last executing test programs: 10m0.845026512s ago: executing program 32 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 10m0.774993855s ago: executing program 33 (id=162): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x0, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0xffffffffffffffff, 0x24000000000, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) unshare(0x20000400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2041, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1d, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty, 'D'}}}}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0xc0f85403, &(0x7f0000000040)) 9m59.390231799s ago: executing program 34 (id=173): unshare(0x26020480) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) read$char_usb(r2, 0x0, 0x0) 6m27.682296173s ago: executing program 35 (id=2595): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$char_usb(r0, &(0x7f0000000080), 0x0) 2m45.986783788s ago: executing program 36 (id=4938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x10, 'fsm\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @common=@frag={{0x30}, {[0x6, 0x3], 0x3, 0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0xc0000000, 'pptp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff, 0xffffff00, 0xff000000, 0xff], [0xff, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000079260000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0x4}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3d, &(0x7f00000000c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r5, r2, 0x25, 0x0, @val=@tracing={0x0, 0x6}}, 0x20) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[], 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="010000000000000000004c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a70000000000000000000f00a9007365636f6e646e616d650000"], 0x50}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x80) r7 = socket(0x1d, 0x2, 0x6) r8 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000380)={0x1d, r9, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x40880) r10 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r11 = socket$inet6(0xa, 0x1, 0x200000) setsockopt$sock_int(r11, 0x1, 0x28, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4a20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000001c0)="a4", 0x1}], 0x1}, 0x8040) 2m28.134883303s ago: executing program 5 (id=5162): mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x5be4, &(0x7f0000000180)={0x0, 0xa3a7, 0x0, 0x21, 0xac}) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@udp6=r1}, 0x20) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) 2m26.844687145s ago: executing program 4 (id=5170): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$eJzs3U9vHGcZAPBn1l7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQt0pI5R6MvbGsrL2RvW5jq4LNJ0BCCJA4wYULEh8ACUXiwhEhRYIzSEUgBClIcCgdNLOzdrqZtTdhvUvs30+azPvOv+d5N57ZmZ1XMwGcWc9HxBsR8WGapi9FxHwxvVIM0ekO2XLv3393NRuSSNO3/pZEUkzLFkvTNO1t82K+ytRBjG8mDwScLcZ7+zdXms3GdlGttzdv1Xf29q9ubK6sN9YbW0tLi68uv7b8yvK1kbTzUkS8/pU/ff87P/3q67/8/Dt/vP6XK9/K0por5vfa8Rimj5rZbXr13GzfCtuPGez/Udae6gdF5fxw69w5yYQAABgoO8f/WER8JiJeivmYOvp0FgAAAHgCpV+aiw+S7v27EjMDpgMAAABPkEreBzap1Iq+AHNRqdRq3T68n4gLlWZrp/25G63drbVuX9mFqFZubDQb14q+wgtRTbL6Yl4+rL/cV1+KiKcj4nvz5/N6bbXVXJv0jx8AAABwRlzsu/7/53z3+v9oyXiSAwAAAEZnYdIJAAAAACfO9T8AAACcatVJJwAAAACcuK+9+WY2pL33X6+9vbd7s/X21bXGzs3a5u5qbbW1fau23mqt58/s2zxue81W69YXYmv3dr3d2GnXL+3tX99s7W61r2/E7FgaBAAAADzk6U/f/X0SEZ0vns+HzMykkwLGYvqg1HumZ8ne/4enuuP3xpQUMBZTQyzz3rny6c4T4Mk23T9hwL4OnD76/wPHvdFjYOed33RHlRHnAwAAjN7lT5Xf/z/+fL7jlB+ecHZiOLv67v+n85NKBBi7/P7/sB15nCzAqVIdqgcgcJr9r/f/j5emj5QQAAAwcnP5kFRqxc97c1Gp1GoRl/LXAlaTGxvNxrWIeCoifjdfPZfVF/M1k2OvGQAAAAAAAAAAAAAAAAAAAAAAAACArjRNIgUAAABOtYjKn5NfdZ/lf3n+xbn+3wdmkn/nrwSeiYh3fvTWD26vtNvbi9n0vx9Mb/+wmP7yJH7BAAAAAPr1rtPz8b8mnQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp837999d7Q1DLH5+VHH/+uWIWCiLPx2z+Xg2qhFx4R9JTD+wXhIRUyOI37kTEZ8si59kaR2ELIs/ig+hcyfppLnS+LFQfApl8S+OID6cZXez488bZft/JZ7Px+X733TER+qPa/DxLw6Of1MD9v9LQ8Z45t7P6wPj34l4Zrr8+NeLnwyI/8JQ0avxja/v7w+am/444nLv+yc/4j0Y4bBUb2/equ/s7V/d2FxZb6w3tpaWFl9dfm35leVr9RsbzUbxb2mM7z77iw+Pav+F0u+/pMhmcPtfLNneVEn+/7l3+/7He5XOw/GvvFAS/9c/KZZ4OH6liPPZopzNv9wrd7rlBz33s98+d1T71w7bX32U//8rgzba76Ed5dnh/nQAgBOxs7d/c6XZbGyfdCG7WB5XrI8UssBjDzqawsxkPrGzU/h2Vrg3qg2maZpm+1TJrLsRMcx2khhxSyvl+RwWBh4BJn1kAgAARu3wpH/SmQAAAAAAAAAAAAAAAAAAAMDZNY6nrPXHPHwEcjKKR2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzEfwMAAP//O7TZvA==") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500"], 0x23c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_clone(0x20000000, &(0x7f0000000080)="2f3d4c197d4de5ed91ced096d37310203108a67f1902c6b175af1dcbf024cca64ffced7dfd90f80731a76eb8c31103519aaa714d681a0533", 0x38, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000780)="02145ca32a1259bf6e2b00d16f633d1be6e4babd5ab51c4f0d64d0613448d531d35116ac99ea88bd10144895b688a903f2dae3a41f21ee94b7ba2e413a7d750f42f4e7b6c90626d1d5c88af320cde715039a4099cac8fc4553a77796e5b1c8a6ab8547eeeb7e2e28558ef69ff6b1f1a395570613a60b4c310a25496c5a10fa1d71bfa33bbf7cb72febfae0aa9923512690cf219a5ceca1729d7635c5c371c14bf170156b") sched_setaffinity(r1, 0x8, &(0x7f0000000840)=0x1) 2m26.843951685s ago: executing program 5 (id=5171): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x17e) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0}) 2m26.770101017s ago: executing program 5 (id=5173): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000800)={0x8, 0xff, 0x3, 0x10001, 0x0, 0x8, 0x6, 0x381}, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r4, @ANYBLOB="05002d000100000008000600", @ANYRES8=r1], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) 2m26.472992817s ago: executing program 4 (id=5177): set_mempolicy(0x3, 0x0, 0x3) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000200)='^\x00', r0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x6c1c2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0xf178, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r2, 0x5421, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @dev}}}], 0x38}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m25.320570824s ago: executing program 5 (id=5182): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000020000000000000", 0x1b) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2c020400) r1 = epoll_create1(0x80000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x20000000) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x9}, 0x106200, 0x1, 0x20d2, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0xb) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000006beacf29f7b5345a322666af4dc51200000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x117) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$pptp(0x18, 0x1, 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000080)={0x10002008}) 2m25.044934863s ago: executing program 9 (id=5183): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x17e) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0}) 2m24.978266894s ago: executing program 4 (id=5184): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) shmdt(0x0) (async) shmdt(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080)=0xfffff001, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000140)='GPL\x00'}, 0x94) 2m24.966115815s ago: executing program 9 (id=5185): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) socket$netlink(0x10, 0x3, 0x1d) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2m24.921102246s ago: executing program 9 (id=5187): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x8000000004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x78b, &(0x7f0000000800)="$eJzs3c1rXFUbAPDnTpKmTfu+yQsvaN0YEDRQmpgaWwWFigsRLBR0bTtMpqFmkimZSWlCQIsIbgQVF4JuunLhR9259WOr/4ULsVRNixUXErmTO+2kmUknXzPV/H5wm3PuvdPnPnPux5m5hzsB7FnD6T+5iMMR8W4SMZjNTyKir1bqjTi5ut6t5aVCOiWxsvLyr0ltnZvLS4VoeE3qYFZ5MCK+fSviSG593MrC4nS+VCrOZfWx6syFscrC4tHzM/mp4lRx9vj4xMSxE0+eOL5zuf7+w+Kha++98NgXJ/9884Gr73yXxMk4lC1rzGPLnl1bHY7h7D3pS9/CNZ7fdrD7S9LtDWBL0kOzZ/Uoj8MxGD21EgDwb/Z6RKwAAHtM4voPAHtM/XuAm8tLhfrU3W8kOuv6cxGxfzX/+v3N1SW92T27/bX7oAM3kzV3RpKIGNqB+MMR8fFXr36WTrFT9yEB2vDG5Yg4OzS8/vyfrBuzsFmPb7BsX/Z3+K75aXx3oKEzvk77P0816//lbvd/okn/p7/JsbsVzY7/NTMO7ECQDVz/JOKZhrFttxryzwz1ZLX/1Pp8fcm586Viem77b0SMRF9/Wh/fIMbIjb9utFrW2P/77f3XPk3jp3/vrJH7ubd/7Wsm89X8dnJudP1yxEO9zfJPbrd/0qL/e7rNGC8+/fZHrZal+af51qf1+Uc2Oml3rFyJeLRp+98Z0ZZsOD5xrLY7jNV3iia+/PHDgVbxG9s/ndL49c8CnZC2/8DG+Q8ljeM1K5uP8f2VwW9aLbt3/s33/33JK7VyvR9xKV+tzo1H7EteWj//2J3XXso/nJVW10/zH3mk+fG/0f6ffiY8Wx8iew+91375fOv57640/8lNtf/mC1dvTfe0it9e+0/USiPZnHbOf+1u4HbeOwAAAAAAAAAAAAAAAAAAAAAAAABoVy4iDkWSG71dzuVGR1d/w/v/MZArlSvVI+fK87OTUfut7KHoy9UfdTnY8DzU8ex5+PX6sbvqT0TE/yLig/4DSf05ipNdzh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6g62+P3/1E/93d46AGDX7O/2BgAAHef6DwB7j+s/AOw97V3/e3Z9OwCAzvH5HwD2Htd/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdtnpU6fSaeWP5aVCWp+8uDA/Xb54dLJYmR6dmS+MFspzF0anyuWpUnG0UJ651/9XKpcvTMTs/KWxarFSHassLJ6ZKc/PVs+cn8lPFc8U+zqSFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsTmVhcTpfKhXnFLZQWOlw0Ei6nnLzQk+2O90v29PRwv3aKNsrdPnEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAP8XcAAAD//44TIJI=") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x2000040) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062) sendfile(r5, r5, 0x0, 0x2000000000409) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x138, r7, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x69c}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "f8c184ba867316027205a8faa404556d89f3802fa0"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x57, 0x3, "7dbfc886945e5e6b5f545cdc267eded7cd4e41b0e9192ff9e96fc7813860df791c67b56a8b5c1b8a62b0eca98adaa2efc3ee20e3d47389efa0feb60264c438b950600d8e3ddfbdf5360768fed8c72c88dcf265"}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x24000814) 2m24.874316008s ago: executing program 4 (id=5188): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0xd, 0x0, 0x11000, 0x4, 0x2, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x5e20, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000001500)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x30}, 0x0) r3 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r5, 0x0, 0x0) wait4(r3, 0x0, 0x40000000, 0x0) r6 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r7, 0x101, 0x1) getdents(r7, &(0x7f00000002c0)=""/201, 0xc9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 2m24.873471998s ago: executing program 1 (id=5189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20e0}, 0x40004) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x316, &(0x7f0000000b00)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "5ecf2c", 0x2e0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[@routing={0x2c, 0x2, 0x2, 0x26, 0x0, [@dev={0xfe, 0x80, '\x00', 0x21}]}, @routing={0x2, 0x8, 0x2, 0x4, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}, @fragment={0x3b, 0x0, 0x0, 0x1, 0x0, 0x14, 0x67}, @routing={0x33, 0xe, 0x0, 0x2, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0xd9, 0xa, 0x4, 0x5, 0xe, 0x20, 0x5, [@private1, @dev={0xfe, 0x80, '\x00', 0x39}, @mcast1, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}]}, @routing={0x5e, 0x14, 0x0, 0x0, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x20}, @dev={0xfe, 0x80, '\x00', 0x16}, @rand_addr=' \x01\x00', @private0, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @fragment={0x11, 0x0, 0x7, 0x0, 0x0, 0x3, 0x65}, @dstopts={0x8, 0x5, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x82}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}]}, @srh={0x2c, 0xe, 0x4, 0x7, 0x2, 0x20, 0xfffe, [@ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xf}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x3e}, @private0={0xfc, 0x0, '\x00', 0x1}]}], {0x4e21, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "061fe1980818873806204b06e9abbdab2b469e12745b22ba", "aea3dcabee05a486a77dc5c1b236ff95e14eddeece3bbadc0ba954f47369fd4d"}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x5) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) r6 = socket(0x15, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000400), 0x9c, 0x1d02) setresuid(0x0, 0xee00, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1d}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xef}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bridge\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x803, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e008000000008"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8044) 2m24.745292962s ago: executing program 5 (id=5191): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x20000000) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x1a9}], 0x1}}], 0x2, 0x2090) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8a000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x800000}, [@call={0x85, 0x0, 0x0, 0x22}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x8081, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b4060000000000007111690000000000851000000200000085000000e4ff000095000000000000009500000000000000f5a942ff8ed56eaca84d5dbfe61868084cb338e2a2b22145d67c0fc9cdcaa595972126ba72ff0000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m24.550150658s ago: executing program 9 (id=5193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20e0}, 0x40004) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x316, &(0x7f0000000b00)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "5ecf2c", 0x2e0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[@routing={0x2c, 0x2, 0x2, 0x26, 0x0, [@dev={0xfe, 0x80, '\x00', 0x21}]}, @routing={0x2, 0x8, 0x2, 0x4, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}, @fragment={0x3b, 0x0, 0x0, 0x1, 0x0, 0x14, 0x67}, @routing={0x33, 0xe, 0x0, 0x2, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0xd9, 0xa, 0x4, 0x5, 0xe, 0x20, 0x5, [@private1, @dev={0xfe, 0x80, '\x00', 0x39}, @mcast1, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}]}, @routing={0x5e, 0x14, 0x0, 0x0, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x20}, @dev={0xfe, 0x80, '\x00', 0x16}, @rand_addr=' \x01\x00', @private0, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @fragment={0x11, 0x0, 0x7, 0x0, 0x0, 0x3, 0x65}, @dstopts={0x8, 0x5, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x82}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}]}, @srh={0x2c, 0xe, 0x4, 0x7, 0x2, 0x20, 0xfffe, [@ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xf}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x3e}, @private0={0xfc, 0x0, '\x00', 0x1}]}], {0x4e21, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "061fe1980818873806204b06e9abbdab2b469e12745b22ba", "aea3dcabee05a486a77dc5c1b236ff95e14eddeece3bbadc0ba954f47369fd4d"}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x5) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) r6 = socket(0x15, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000400), 0x9c, 0x1d02) setresuid(0x0, 0xee00, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1d}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xef}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bridge\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x803, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e008000000008"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8044) 2m24.49388282s ago: executing program 4 (id=5194): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x2300011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x60000002, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x2c80) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xd, &(0x7f0000000100)={0x1, 0x3}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x4, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000484000/0x2000)=nil, 0x2000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=0x0, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x4800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x1, &(0x7f0000000180)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x8) 2m24.238874509s ago: executing program 1 (id=5195): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x17e) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0}) 2m24.154168181s ago: executing program 1 (id=5196): mknod(&(0x7f00000007c0)='./file0\x00', 0x604e55e962254ecf, 0x10001) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1411, 0x1, 0x0, 0x1fffc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) lseek(r4, 0xffffffffffffffed, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0xc, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000880)='y\xa9n\x1a:e\x00\x00\x00O\xbbj\x9f\a\xa3c\x85\'\x9d[@\x9a\xd7O\x9al~\xadTs\xab\b\'\xdc5\xd4\xd8N>\x13\xff\x0f\xff\xc1l\x16\x0e\xac0\x10\xf4(\'\x82\xfd,\xda_\xd30\x1d3;H\x97SS\xe2\xac\x8a)\xdc\xe2\x8d\xf5\x04\x00\x00\x00\n\xe7~\x05\x8e\xae\x94\xeeuOAa\xcd\xdbV^\x87 \xde\xd6\xf0\xe5\x81\x82\x16Q\xc9\xf3#e\x9a4\xa26\xa9\x1b\xda\x863u\x8b8d\xde\f\xd4Vk<\x9c\x17\x00\x00\x00\x00\x00\x00\x00\f\xa8 \xd1T\xee\xdd\x15\xab\xc1&\xf5Fw\x8f8\x89\xa1\xee\xe7\xefW\xbb\x0e\x91\xe6I\x92\xc4w]\xb1\xf2\xbc\xc7\xba\x13M\r~\xac:\xea\x8e\xce\x94\xde\x9e\x941u& r\xdf\xf4\xd27\xc4?\x99\x12\xbf\xfa\xc9\xfb4\x9e\xb3\x95\xd1\xfb\x92\x9b\x01\v\xa3\xd3ZE\xdb<\xba\xc1\xfee\x93\x00\x18\x1a\x97\xa2\x91\xde\x1bf\xd9\xd9\xfa\xc8\xdd\x88\x11\x86\xc3\xb1\n5\x99\b\xaf\xdcD2j\x9f\x86\xdd\x92\x16\xe1%\xc0\xee\xe7\xf7\xfb\xf2v!\x93\xf8\x98\x86\xe3\xef\xde7\xc9\xe7\xaa\x16\xdc\xdbd\xdf\xd9\x8b\xfc\xcd\xac\xce\x1b\x9b\xf0\xbfU\x19\xe0/A\xc7\xf2\x04g\xf8\xe3{\xb9\xc5\xbe\x99t\xd0~\x82FT\xb6\x91S\x9bv\x91\xfb\x9fW\xe6\xa38\x02\xa5\x1c\xad\xe8\xed\xd8Z{\x92\x8b\xfe=\x00'/354, 0xfffffffffffffffe) poll(0x0, 0x0, 0xa) 2m23.694740666s ago: executing program 9 (id=5197): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$netlink(0x10, 0x3, 0x1d) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2m23.545648771s ago: executing program 5 (id=5199): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000180)) accept4$nfc_llcp(r3, &(0x7f00000003c0), &(0x7f00000004c0)=0x60, 0x800) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000009200100000000000000000000000000004e240000000000010000000000000008", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r4, 0x4b4b, &(0x7f0000000480)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup2(r0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r7, 0x2000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r5, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r6) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r8, 0x304, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x4) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) 2m23.446290624s ago: executing program 9 (id=5200): r0 = socket(0x15, 0x3, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x2, @empty, 0x3}], 0x3c) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x4, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}, 0x922bac8552bdad9e) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x400000000000000) getpeername(r1, &(0x7f0000000180)=@rc={0x1f, @fixed}, &(0x7f0000000200)=0x80) 2m23.376277106s ago: executing program 8 (id=5201): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000020000000000000", 0x1b) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2c020400) r1 = epoll_create1(0x80000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x20000000) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x9}, 0x106200, 0x1, 0x20d2, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0xb) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x117) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$pptp(0x18, 0x1, 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000080)={0x10002008}) 2m23.313636488s ago: executing program 8 (id=5202): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 2m23.25335001s ago: executing program 8 (id=5203): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="2c10", 0x2}, {&(0x7f0000000240)="3eca69dbb647689a88bbb5f8d8c8e3670b63275d69cd699888244ae290d2b0173c4cd4dac50a704751779a6ba0c7d32277fad7dfd67024377ad627e67861221a32e6fe8cfbb2531abcbdb10f79fae686f8e6e28003b67fc2f49c8b93cb62895721575b1d119bc6ee740f43ec708bf03e2aed3d5be60e424f3fdf448011333371c19c2008c50e3f00682a5f4434ca5ca7f73216d7cb58", 0x96}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) 2m23.077600086s ago: executing program 4 (id=5204): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000180)) close(r1) r2 = inotify_init1(0x81000) r3 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x1) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x12) fcntl$setlease(r4, 0x400, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000021c0), 0x7fff, 0x101000) syz_usb_disconnect(r5) syz_usb_connect(0x6, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0xc0085504, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r4, 0x400, 0x2) timer_create(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES8=r2, @ANYRESDEC=r1, @ANYRESHEX=r3, @ANYBLOB="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"]) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000001340)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x2000, 0x0) msgrcv(r3, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 2m22.686278268s ago: executing program 1 (id=5209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2m22.685848198s ago: executing program 1 (id=5210): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f000029d000/0x2000)=nil, 0x2000, &(0x7f0000000640)=""/6) syz_clone(0x5600, &(0x7f0000000680)="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", 0xfd, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000a00)="86041f853641ea2ae226842ed9a178781abc5bf7110018a7237306676e47de0122995042bcf887ee1a5ec8608de6724a75224d77af5eb3a782ff96bcaf5798b33150563efeceb33283e4c396dd670b97e70aec70ad1f1bd2bf9eeb98d3eee785f9e88861b487e47906b9ecc93a18130a5a6f67f98ba989e7e99c40a2f81ff643b6b7fcb0601d17f758aa07711743c0529f9f9e5cc219cb62f0e9c425366e606bf8a2dfb0630ae9736d8c8705bf82c544866078e87a") ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) 1m57.905128466s ago: executing program 37 (id=5200): r0 = socket(0x15, 0x3, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x2, @empty, 0x3}], 0x3c) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x4, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}, 0x922bac8552bdad9e) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x400000000000000) getpeername(r1, &(0x7f0000000180)=@rc={0x1f, @fixed}, &(0x7f0000000200)=0x80) 1m57.79315858s ago: executing program 38 (id=5210): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f000029d000/0x2000)=nil, 0x2000, &(0x7f0000000640)=""/6) syz_clone(0x5600, &(0x7f0000000680)="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", 0xfd, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000a00)="86041f853641ea2ae226842ed9a178781abc5bf7110018a7237306676e47de0122995042bcf887ee1a5ec8608de6724a75224d77af5eb3a782ff96bcaf5798b33150563efeceb33283e4c396dd670b97e70aec70ad1f1bd2bf9eeb98d3eee785f9e88861b487e47906b9ecc93a18130a5a6f67f98ba989e7e99c40a2f81ff643b6b7fcb0601d17f758aa07711743c0529f9f9e5cc219cb62f0e9c425366e606bf8a2dfb0630ae9736d8c8705bf82c544866078e87a") ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) 1m57.75638673s ago: executing program 39 (id=5208): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0xa, 0x4e24, 0x1, @loopback, 0x4}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000240)="bf869ace5ab204cc0114c094d08ac9", 0xf}, {&(0x7f0000000280)}, {&(0x7f0000000340)="43d189a79a796b398eabd65efca1b72f7dea2646cc971e2fe737bf31d85959da489f0ee0e268f7c7af54e3be4ad07e4907a04e54bab344ddabfbbe0db5f959b81106a4bc8ff7abff85c3cf8dae265908becc592eaeb5b401c40456a1af0cf6bbebb80cd38307d46e6fb256f0e66f497a358cc34eda35e766c7a039804b3d6e7f3009e82e86e85bdbe31b40f950604b96fcdaf0e5afc2e7ba", 0x98}], 0x3}, 0x4000800) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x9, 0x7ff}, 0x4, 0x8, 0x4bff, 0x5, 0x46, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x2000, 0x0) msgrcv(r3, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 1m57.709231622s ago: executing program 40 (id=5199): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000180)) accept4$nfc_llcp(r3, &(0x7f00000003c0), &(0x7f00000004c0)=0x60, 0x800) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000009200100000000000000000000000000004e240000000000010000000000000008", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r4, 0x4b4b, &(0x7f0000000480)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup2(r0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r7, 0x2000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r5, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r6) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r8, 0x304, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x4) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) 1m57.619864245s ago: executing program 41 (id=5204): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000180)) close(r1) r2 = inotify_init1(0x81000) r3 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x1) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x12) fcntl$setlease(r4, 0x400, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000021c0), 0x7fff, 0x101000) syz_usb_disconnect(r5) syz_usb_connect(0x6, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0xc0085504, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r4, 0x400, 0x2) timer_create(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES8=r2, @ANYRESDEC=r1, @ANYRESHEX=r3, @ANYBLOB="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"]) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000001340)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x40, 0x1, 0x9, 0x3, {{0x11, 0x4, 0x2, 0x5, 0x44, 0x67, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@end, @timestamp={0x44, 0x10, 0x4b, 0x0, 0xe, [0x5, 0x7, 0x7]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x34, [@dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x38}, @local, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast]}]}}}}}) r7 = syz_open_dev$vcsn(&(0x7f0000001d40), 0xffffffffffffff68, 0x400) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d80)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7f, '\x00', r6, r7, 0x4, 0x5}, 0x50) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000500)={0x0, 0x50d2, 0x0, [0x3, 0x4, 0x1, 0x7fff, 0xc000000000], [0x2, 0x8005, 0xf, 0x7, 0x0, 0xffff, 0x7, 0x1, 0x57ff, 0x7, 0x3, 0xf, 0xd, 0x1, 0x5, 0x645d1be7, 0x2, 0x5, 0x7, 0x8, 0xe, 0xfffffffffffffffb, 0x3, 0x2, 0x2, 0x8, 0x7, 0x5, 0x10000, 0x7, 0x29a4, 0x1, 0xacd9e73000000000, 0x200, 0x4, 0x100000000, 0x7, 0x4, 0x3, 0x0, 0x2, 0x100000000, 0xfffffffffffffff7, 0x7, 0x1, 0x4, 0x1, 0x5, 0x1, 0x5, 0x8, 0xa, 0x18, 0x9, 0x0, 0x4, 0x401, 0x1, 0xffffffffffffff90, 0x3, 0x0, 0xff, 0x6, 0x7, 0x1, 0x1, 0x3, 0x3, 0x732f, 0x6, 0x9, 0x8, 0x3, 0x8000000000000000, 0x1000000000001, 0x1, 0x8, 0x3, 0xfffffffffffffff9, 0x9, 0x189c, 0x4, 0x200, 0xc, 0x557, 0x2, 0x7, 0x0, 0x7, 0x4, 0x5, 0x1, 0x0, 0x8, 0xc00000000000, 0xf4f5, 0xffffffff, 0x2, 0x1ff, 0x6, 0x5, 0x4, 0x7, 0x400, 0x0, 0x7fffffff, 0x1, 0x6, 0x8, 0xfff, 0x4, 0x933c, 0x55c, 0x0, 0x4, 0x3, 0x200, 0xd0, 0xfff, 0x1000, 0x5280]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000940)={{r2}, 0x0, 0xc, @unused=[0x7, 0xffffffffffffffff, 0x6, 0x5], @devid=r8}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) 3.103679351s ago: executing program 0 (id=6452): socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="4eaa000000000000711085000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = msgget$private(0x0, 0x14) msgsnd(r0, &(0x7f0000000180)={0x3, "e9ef34fb2af128c54108bdfdf27ede61388bfeca4216f35041df56c96782b8810c80fd7580fbc811b8cc8456f6278eae3a80d0"}, 0x3b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r2, 0x301, 0x800000, 0x25dddbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xf4, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xe0, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xb3, 0x10000000, 0x34e, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xf4}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket$nl_route(0x10, 0x3, 0x0) 2.372491124s ago: executing program 3 (id=6465): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 2.371541954s ago: executing program 6 (id=6466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.343424455s ago: executing program 6 (id=6467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'vxcan1\x00'}) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007"], 0x38}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 2.293875177s ago: executing program 7 (id=6468): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) futimesat(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xde23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x2de175a7, @ipv4={'\x00', '\xff\xff', @empty}, 0x8000}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) 2.19820411s ago: executing program 3 (id=6470): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file4\x00', 0x80c406, &(0x7f0000002d40)=ANY=[@ANYRES8=0x0, @ANYRES8=0x0, @ANYRES32], 0xfb, 0x2b1, &(0x7f0000000100)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f5, 0x0, 0x32}, 0x9c) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x0, 0x10020, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @dev}}}], 0x38}, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x10049, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={&(0x7f0000000400), 0x1}, 0x1040e0, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x2}, 0x0, 0xff6fbfffffffffff, r3, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f00000003c0)=@ethtool_ts_info}) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="f841c49f121a36467b3c2ff1e5700013ef3cd79e3849424bf84e5cc35ef4889e02b7a78e602ec5898a77910203a3c76a99a5070074a57f301ab59a0ed4fd85722ed194afcc6aced2a03e3bda89f73f9e776f12b1bc038a8a01c29d59dcb7dd5aeb7696f60b750b58ae1b47866440903c0c4e035fc4d31c75b075ad27a8a1bb09492133d7cf406eedd4923b"], 0x14}}, 0x4008000) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @empty}, 0x0, 0x40000000, 0x0, 0x3}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f08", 0xd}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r5, 0x0) ioprio_set$uid(0x3, r5, 0x2004) socketpair$unix(0x1, 0xe3e2b833b9ca905c, 0x0, &(0x7f0000000440)) 2.19321175s ago: executing program 0 (id=6471): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) 2.137211402s ago: executing program 0 (id=6473): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x52, 0x0) 2.136630031s ago: executing program 0 (id=6474): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x400}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/15, 0xf}], 0x3}, 0xec}, {{0x0, 0x0, 0x0}, 0xe8c0}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2000}) unshare(0x44040200) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x30, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5248ec76}, @NFULA_CFG_MODE={0xa, 0x2, {0xf, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x58}, 0x40) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca0ebc000000000000008000f0fffeffe809005300fff5dd00000010000163d4f99d69e216e9cc21000a0c10000000008003000000", 0x58}], 0x1) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/149, 0x95}], 0x1) 2.088867063s ago: executing program 7 (id=6476): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x100000001}, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_usbip_server_init(0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$eJzs3d9rm2sdAPDvmzZru/Wc9qgXxwMei+dId9Al7eq24sWcIHo1UOf9LG1aStOmNGm3liEd/gGCiApeeeWN4B8gyP4EEQZ6LyqKuM1deKORJG+2Nkvarkua0Xw+8O59nvdHv98na9+8T56HvAEMrKmIuBURQxHxSURMpNsz6RL7jaV23LOnDxZrSxLV6p1/JZGk25o/K0nXl9LTRiPiu9+KiCfVamvc8u7e2kKxWNhK6/nK+ma+vLt3ZXV9YaWwUtiYm5u9Pn9j/tr8zKnbthNJM6WYjIib3/jbT3/0q2/e/N2X7/357j8u/6C2czzdf7Ad3dRIIFt/LZqGI2KrF8H6YChtT7bfiQAAcCK1+9NPRcQX6vf/EzFUv5s7ytgZZQYAAAB0S/Vr45GN6kgVAAAAOLcy9TmwSSaXzvcdj0wml2vM4f1MXMwUS+XKl5ZL2xtLjbmyk5HNLK8WCzPpXOHJyCa1+mw6x7ZZv9pSn4uI9yLiJxNj9XpusVRc6veHHwAAADAgLrX0/59PNPr/AAAAwDkz2e8EAAAAgJ7T/wcAAIDzT/8fAAAAzrVv375dW6rN518v7exur5V2riwVymu59e3F3GJpazO3Uiqt1L+zb/24n1cslTa/Ehvb9/OVQrmSL+/u3V0vbW9U7q4eegQ2AAAAcIbe+/yjPyURsf/VsfoSScSFdF+2z7kBvZV5nYP/2rs8gLM31O8EgL4Z7ncCQN/o4wPJMfs7Tt75ffdzAQAAemP6sy3j/2H8HwbFa43/A+eK8X8YXG3G/00JgAGRdQcAA6/34//V6mslBAAAdN14fUkyuXQscDwymVwu4p36YwGyyfJqsTATEe9GxB8nsiO1+mz9zOTYPgMAAAAAAAAAAAAAAAAAAAAAAAAA0FCtJlE9heenOQkAAADoi4jM35P0+V/TEx+Pt34+cCH5z0R9HRH3fnHnZ/cXKpWt2dr2Jy+2V36ebr968Mz9Vz9s8LBxAAAAOBPNfnqzHw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fTs6YPF5hLZs4v7z69HxGRL/LrhGK2vR+vpXPx3EsMHzksiYqgL8fcfRsT77eIntbRiMs2iNX4mIsb6HP9SF+LDIHtUu/7cavf3l4mp+rr9399wurypg9e/2uXgYPzm9W+ow/XvnRPG+ODxb/Id4z+M+GC4/fWnGT/pEP+jjhFHDtW+/729vU5HVn8ZMd36/vMiwstSvrK+mS/v7l1ZXV9YKawUNubmZq/P35i/Nj+TX14tFtJ/28b48ed++7+j2n+xQ/zJY9r/ccf2H/bfx/effrpRfOWdtRb/8keH40+l+97vED+Tvvd9MS3X9k83y/uN8kEf/voPH75Iuk38pQ7tP+7//3KzMnp0+z/5zg//csxLBACcofLu3tpCsVjYOmVhJ0568FT7Xc07opMH3Y83zFnhLSsMxeEtzfvULsfKnvB3fvQteVlOUHj3wJYLafO6FKIPFyMAAKCnXt70n+DgQwPuI71LCgAAAAAAAAAAAAAAAAAAAAbMWXxRWWvM/f40FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSP8PAAD//22Dxkw=") write$usbip_server(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="00000003"], 0x3f8e) shutdown(0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000112c40)={0x2, [], 0x0, "967a10880e31b6"}) socket$igmp6(0xa, 0x3, 0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvfrom$packet(r4, 0x0, 0x0, 0x20, 0x0, 0x0) 1.966830457s ago: executing program 3 (id=6479): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x6464, 0xffffffffffffffff}, 0x0, 0x0, 0x11000, 0x8, 0x4, 0x454e, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffff, 0x3}, {}, {0xffe0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x240488d0) 1.779504763s ago: executing program 6 (id=6480): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc91c9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x12}}, 0x1c}}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000002c0)={0x1, 0x726, 0x7, 0x0, 0x4}) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x4, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xc}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x25b}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xc68e}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x564}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x81}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xb8a22d34ce75ab81}, 0x20044000) socket$key(0xf, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001940)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e24, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xb, 0x0, 0x5, 0xe, 0x3}) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000001d00)={'tunl0\x00', &(0x7f0000001c80)={'gre0\x00', 0x0, 0x40, 0x1, 0x9, 0x3, {{0x11, 0x4, 0x2, 0x5, 0x44, 0x67, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@end, @timestamp={0x44, 0x10, 0x4b, 0x0, 0xe, [0x5, 0x7, 0x7]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x34, [@dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x38}, @local, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast]}]}}}}}) syz_open_dev$vcsn(&(0x7f0000001d40), 0xffffffffffffff68, 0x400) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000500)={0x0, 0x50d2, 0x0, [0x3, 0x4, 0x1, 0x7fff, 0xc000000000], [0x2, 0x8005, 0xf, 0x7, 0x0, 0xffff, 0x7, 0x1, 0x57ff, 0x7, 0x3, 0xf, 0xd, 0x1, 0x5, 0x645d1be7, 0x2, 0x5, 0x7, 0x8, 0xe, 0xfffffffffffffffb, 0x3, 0x2, 0x2, 0x8, 0x7, 0x5, 0x10000, 0x7, 0x29a4, 0x1, 0xacd9e73000000000, 0x200, 0x4, 0x100000000, 0x7, 0x4, 0x3, 0x0, 0x2, 0x100000000, 0xfffffffffffffff7, 0x7, 0x1, 0x4, 0x1, 0x5, 0x1, 0x5, 0x8, 0xa, 0x18, 0x9, 0x0, 0x4, 0x401, 0x1, 0xffffffffffffff90, 0x3, 0x0, 0xff, 0x6, 0x7, 0x1, 0x1, 0x3, 0x3, 0x732f, 0x6, 0x9, 0x8, 0x3, 0x8000000000000000, 0x1000000000001, 0x1, 0x8, 0x3, 0xfffffffffffffff9, 0x9, 0x189c, 0x4, 0x200, 0xc, 0x557, 0x2, 0x7, 0x0, 0x7, 0x4, 0x5, 0x1, 0x0, 0x8, 0xc00000000000, 0xf4f5, 0xffffffff, 0x2, 0x1ff, 0x6, 0x5, 0x4, 0x7, 0x400, 0x0, 0x7fffffff, 0x1, 0x6, 0x8, 0xfff, 0x4, 0x933c, 0x55c, 0x0, 0x4, 0x3, 0x200, 0xd0, 0xfff, 0x1000, 0x5280]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000940)={{r2}, 0x0, 0xc, @unused=[0x7, 0xffffffffffffffff, 0x6, 0x5], @devid=r6}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) 1.651501407s ago: executing program 6 (id=6481): socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="4eaa000000000000711085000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = msgget$private(0x0, 0x14) msgsnd(r0, &(0x7f0000000180)={0x3, "e9ef34fb2af128c54108bdfdf27ede61388bfeca4216f35041df56c96782b8810c80fd7580fbc811b8cc8456f6278eae3a80d0"}, 0x3b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000007980)=""/102341, 0xfffffffffffffe60, 0x191) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x7d, &(0x7f00000004c0)={r4, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x400}, 0x90) 1.597309509s ago: executing program 3 (id=6483): socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="4eaa000000000000711085000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = msgget$private(0x0, 0x14) msgsnd(r0, &(0x7f0000000180)={0x3, "e9ef34fb2af128c54108bdfdf27ede61388bfeca4216f35041df56c96782b8810c80fd7580fbc811b8cc8456f6278eae3a80d0"}, 0x3b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r2, 0x301, 0x800000, 0x25dddbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xf4, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xe0, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xb3, 0x10000000, 0x34e, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xf4}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket$nl_route(0x10, 0x3, 0x0) 1.522330181s ago: executing program 6 (id=6484): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x2300011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x60000002, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x2c80) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xd, &(0x7f0000000100)={0x1, 0x3}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x4, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) mprotect(&(0x7f0000484000/0x2000)=nil, 0x2000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=0x0, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x4800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x1, &(0x7f0000000180)) 1.316973978s ago: executing program 2 (id=6488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.220541951s ago: executing program 2 (id=6489): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800005, 0x3}, 0x3286, 0x3, 0x43a1bd76, 0x6, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1e3a284}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000440)=ANY=[], 0x0) 1.083228965s ago: executing program 2 (id=6490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'vxcan1\x00'}) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007"], 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 832.498083ms ago: executing program 2 (id=6491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'vxcan1\x00'}) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007"], 0x38}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 733.091836ms ago: executing program 3 (id=6492): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc91c9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x12}}, 0x1c}}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000002c0)={0x1, 0x726, 0x7, 0x0, 0x4}) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x4, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xc}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x25b}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xc68e}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x564}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x81}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xb8a22d34ce75ab81}, 0x20044000) socket$key(0xf, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001940)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e24, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xb, 0x0, 0x5, 0xe, 0x3}) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000001d00)={'tunl0\x00', &(0x7f0000001c80)={'gre0\x00', 0x0, 0x40, 0x1, 0x9, 0x3, {{0x11, 0x4, 0x2, 0x5, 0x44, 0x67, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@end, @timestamp={0x44, 0x10, 0x4b, 0x0, 0xe, [0x5, 0x7, 0x7]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x34, [@dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x38}, @local, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast]}]}}}}}) r7 = syz_open_dev$vcsn(&(0x7f0000001d40), 0xffffffffffffff68, 0x400) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d80)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7f, '\x00', r6, r7, 0x4, 0x5}, 0x50) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000500)={0x0, 0x50d2, 0x0, [0x3, 0x4, 0x1, 0x7fff, 0xc000000000], [0x2, 0x8005, 0xf, 0x7, 0x0, 0xffff, 0x7, 0x1, 0x57ff, 0x7, 0x3, 0xf, 0xd, 0x1, 0x5, 0x645d1be7, 0x2, 0x5, 0x7, 0x8, 0xe, 0xfffffffffffffffb, 0x3, 0x2, 0x2, 0x8, 0x7, 0x5, 0x10000, 0x7, 0x29a4, 0x1, 0xacd9e73000000000, 0x200, 0x4, 0x100000000, 0x7, 0x4, 0x3, 0x0, 0x2, 0x100000000, 0xfffffffffffffff7, 0x7, 0x1, 0x4, 0x1, 0x5, 0x1, 0x5, 0x8, 0xa, 0x18, 0x9, 0x0, 0x4, 0x401, 0x1, 0xffffffffffffff90, 0x3, 0x0, 0xff, 0x6, 0x7, 0x1, 0x1, 0x3, 0x3, 0x732f, 0x6, 0x9, 0x8, 0x3, 0x8000000000000000, 0x1000000000001, 0x1, 0x8, 0x3, 0xfffffffffffffff9, 0x9, 0x189c, 0x4, 0x200, 0xc, 0x557, 0x2, 0x7, 0x0, 0x7, 0x4, 0x5, 0x1, 0x0, 0x8, 0xc00000000000, 0xf4f5, 0xffffffff, 0x2, 0x1ff, 0x6, 0x5, 0x4, 0x7, 0x400, 0x0, 0x7fffffff, 0x1, 0x6, 0x8, 0xfff, 0x4, 0x933c, 0x55c, 0x0, 0x4, 0x3, 0x200, 0xd0, 0xfff, 0x1000, 0x5280]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000940)={{r2}, 0x0, 0xc, @unused=[0x7, 0xffffffffffffffff, 0x6, 0x5], @devid=r8}) r9 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) 702.854448ms ago: executing program 3 (id=6493): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x100000001}, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_usbip_server_init(0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") write$usbip_server(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="00000003"], 0x3f8e) shutdown(0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000112c40)={0x2, [], 0x0, "967a10880e31b6"}) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$NILFS_IOCTL_GET_BDESCS(r3, 0xc0186e87, &(0x7f0000000080)={&(0x7f0000000040)=[{0x81, 0x10000, 0x9, 0x5}], 0x1, 0x28, 0x1, 0x4}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvfrom$packet(r4, 0x0, 0x0, 0x20, 0x0, 0x0) 590.487601ms ago: executing program 7 (id=6494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 545.374113ms ago: executing program 7 (id=6495): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x6464, 0xffffffffffffffff}, 0x0, 0x0, 0x11000, 0x8, 0x4, 0x454e, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffff, 0x3}, {}, {0xffe0, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x240488d0) 449.120936ms ago: executing program 2 (id=6496): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) 417.113187ms ago: executing program 7 (id=6497): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x329043, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x2}, 0x100260, 0x10000, 0x4, 0x5, 0x8, 0x0, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nobh}, {@nodiscard}]}, 0x3, 0x45c, &(0x7f0000000940)="$eJzs281vFGUYAPBnZtsCArYifvChVtHY+NFSQOXgQY0mHjAx0YMem7YQZKGG1kQIUTAGT8aYeDce/Rc86cUYTyZe9W5IiOECeFozuzN0d9ld6LLbLezvlwy873z0fZ6deXffmXc3gKE1mf2TRGyLiL8iYrxWbdxhsvbftSvn5q9fOTefRKXy3r9Jdb+rV87NF7sWx23NK1NpRPplEntatLt85uyJuXJ58XRen1k5+fHM8pmzLx4/OXds8djiqQOHDx86OPvKywde6kmeWUxXd3+2tHfX2x9++86Rr7N1aZF/Ux49Mtlp4zOVSo+bG6ztdeVkZICBsCaliMhO12i1/49HKVZP3ni89cVAgwP6qlKpVLa233y+AtzDkmis6/IwLIoP+uz+t1iaBwGv9W/4MXCXX6/dAGV5X8uX2paR6vOByO+Ntvep/cmI+OD8f99nS/TnOQQAQIOfs/HPC63Gf2k8XLff/fnc0EREPBAROyLiwYjYGREPRVT3fSQiHl1j+82TJDePf9JLXSV2m7Lx36v53Fbj+K8Y/cVEKa9tr+Y/mhw9Xl7cn78mUzG6KavPdmjjlzf//KbdtvrxX7Zk7RdjwTyOSyObGo9ZmFuZu5Oc612+ELF7pFX+yY2ZgCQidkXE7i7bOP7cj3vbbbt1/h30YJ6p8kPEs7Xzfz6a8i8knecnZzZHeXH/THFV3Oz3Py6+2679O8q/B7Lzf1/L6/9G/hNJ/Xzt8trbuPj3V23vabq9/seS96vlsXzdp3MrK6dnI8aSI7Wg69cfWD22qBf7Z/lP7Wvd/3fE6iuxJyKyi/ixiHg8Ip7IY38yIp6KiH0d8v/tjac/6j7//sryX1jT+V8tjEXzmtaF0olff2podOKm/K93Pv+HqqWpfM3tvP/dTlzdXc0AAABw90kjYlsk6fSNcppOT9e+L78zIi0vLa88f3Tpk1MLtd8ITESkxZOu8brnobP5bX2tfiEial8tKLYfzJ8bf1faUq1Pzy+VFwadPAy5rW36f+af0qCjA/rO77VgeOn/MLxu1f8/X6c4gPXn8x+GV4v+v2UQcQDrbVPLz39jfhgOTf3ftB8Mkab+v3lQcQDrr/vnf2M9jQNYf57/w1Ba3hK3/pF8x0Lxl7o8/J4txOiGCKNvhUg3RBgbtjB6l/eLwb0nAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9NL/AQAA//8kV94B") r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 331.6553ms ago: executing program 2 (id=6498): mknod(&(0x7f00000007c0)='./file0\x00', 0x604e55e962254ecf, 0x10001) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1411, 0x1, 0x0, 0x1fffc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) lseek(r2, 0xffffffffffffffed, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r3) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0xc, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000880)='y\xa9n\x1a:e\x00\x00\x00O\xbbj\x9f\a\xa3c\x85\'\x9d[@\x9a\xd7O\x9al~\xadTs\xab\b\'\xdc5\xd4\xd8N>\x13\xff\x0f\xff\xc1l\x16\x0e\xac0\x10\xf4(\'\x82\xfd,\xda_\xd30\x1d3;H\x97SS\xe2\xac\x8a)\xdc\xe2\x8d\xf5\x04\x00\x00\x00\n\xe7~\x05\x8e\xae\x94\xeeuOAa\xcd\xdbV^\x87 \xde\xd6\xf0\xe5\x81\x82\x16Q\xc9\xf3#e\x9a4\xa26\xa9\x1b\xda\x863u\x8b8d\xde\f\xd4Vk<\x9c\x17\x00\x00\x00\x00\x00\x00\x00\f\xa8 \xd1T\xee\xdd\x15\xab\xc1&\xf5Fw\x8f8\x89\xa1\xee\xe7\xefW\xbb\x0e\x91\xe6I\x92\xc4w]\xb1\xf2\xbc\xc7\xba\x13M\r~\xac:\xea\x8e\xce\x94\xde\x9e\x941u& r\xdf\xf4\xd27\xc4?\x99\x12\xbf\xfa\xc9\xfb4\x9e\xb3\x95\xd1\xfb\x92\x9b\x01\v\xa3\xd3ZE\xdb<\xba\xc1\xfee\x93\x00\x18\x1a\x97\xa2\x91\xde\x1bf\xd9\xd9\xfa\xc8\xdd\x88\x11\x86\xc3\xb1\n5\x99\b\xaf\xdcD2j\x9f\x86\xdd\x92\x16\xe1%\xc0\xee\xe7\xf7\xfb\xf2v!\x93\xf8\x98\x86\xe3\xef\xde7\xc9\xe7\xaa\x16\xdc\xdbd\xdf\xd9\x8b\xfc\xcd\xac\xce\x1b\x9b\xf0\xbfU\x19\xe0/A\xc7\xf2\x04g\xf8\xe3{\xb9\xc5\xbe\x99t\xd0~\x82FT\xb6\x91S\x9bv\x91\xfb\x9fW\xe6\xa38\x02\xa5\x1c\xad\xe8\xed\xd8Z{\x92\x8b\xfe=\x00'/354, 0xfffffffffffffffe) poll(0x0, 0x0, 0xa) 117.453066ms ago: executing program 7 (id=6499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 0s ago: executing program 6 (id=6500): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800005, 0x3}, 0x3286, 0x3, 0x43a1bd76, 0x6, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1e3a284}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000100000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000440)=ANY=[], 0x0) kernel console output (not intermixed with test programs): r at time 1811481964: ext4_iget_extra_inode:5128: inode 15 [ 590.544101][T24660] vhci_hcd: connection closed [ 590.545082][T24647] vhci_hcd: connection closed [ 590.569393][ T1990] vhci_hcd vhci_hcd.2: stop threads [ 590.632560][ T1990] vhci_hcd vhci_hcd.2: release socket [ 590.655890][ T1990] vhci_hcd vhci_hcd.2: disconnect device [ 590.683635][ T1990] vhci_hcd vhci_hcd.2: stop threads [ 590.706418][ T1990] vhci_hcd vhci_hcd.2: release socket [ 590.727187][ T1990] vhci_hcd vhci_hcd.2: disconnect device [ 590.745834][T24642] loop7: lost filesystem error report for type 5 error -117 [ 590.747579][T24642] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.581898][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.351706][ T3518] usb 13-1: enqueue for inactive port 0 [ 592.362309][ T3518] usb 13-1: enqueue for inactive port 0 [ 592.426243][ T28] kauditd_printk_skb: 310 callbacks suppressed [ 592.426262][ T28] audit: type=1400 audit(1811481966.457:10479): avc: denied { write } for pid=24767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.461584][ T3518] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 592.489510][T24781] syzkaller1: tun_chr_ioctl cmd 35111 [ 592.535918][ T28] audit: type=1400 audit(1811481966.567:10480): avc: denied { write } for pid=24782 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.623787][T24785] loop6: detected capacity change from 0 to 512 [ 592.650798][T24785] EXT4-fs: Ignoring removed oldalloc option [ 592.719332][T24789] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 592.726030][T24789] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 592.772649][T24794] loop7: detected capacity change from 0 to 512 [ 592.779601][T24794] EXT4-fs: Ignoring removed oldalloc option [ 592.785891][T24785] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.5643: corrupted in-inode xattr: invalid ea_ino [ 592.799251][T24785] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 592.823995][T24785] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.5643: couldn't read orphan inode 15 (err -117) [ 592.844962][T24785] loop6: lost filesystem error report for type 5 error -117 [ 592.850518][T24789] vhci_hcd vhci_hcd.0: Device attached [ 592.858262][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 592.858331][ C0] EXT4-fs (loop6): initial error at time 1811481966: ext4_iget_extra_inode:5128: inode 15 [ 592.858702][ C0] EXT4-fs (loop6): last error at time 1811481966: ext4_orphan_get:1402 [ 592.897173][T24785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.910379][T24794] EXT4-fs (loop7): filesystem is read-only [ 592.917514][T24794] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 592.951438][T24794] EXT4-fs (loop7): filesystem is read-only [ 592.957509][T24794] EXT4-fs (loop7): orphan cleanup on readonly fs [ 592.964999][T24794] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5644: bg 0: block 64: padding at end of block bitmap is not set [ 592.982629][T24794] loop7: lost filesystem error report for type 5 error -117 [ 592.982845][T24794] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 592.998900][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 592.998917][ C0] EXT4-fs (loop7): initial error at time 1811481967: ext4_validate_block_bitmap:441 [ 592.998937][ C0] EXT4-fs (loop7): last error at time 1811481967: ext4_validate_block_bitmap:441 [ 593.026308][T24794] loop7: lost filesystem error report for type 5 error -117 [ 593.026575][T24794] EXT4-fs (loop7): 1 orphan inode deleted [ 593.040275][T24794] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 593.053453][T24794] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.084765][T24790] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 2 [ 593.093397][ T2197] vhci_hcd vhci_hcd.7: stop threads [ 593.098737][ T2197] vhci_hcd vhci_hcd.7: release socket [ 593.104458][ T2197] vhci_hcd vhci_hcd.7: disconnect device [ 593.113736][T21604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.158868][T24803] loop6: detected capacity change from 0 to 512 [ 593.173284][T24803] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 593.184950][T24803] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 593.195048][T24803] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.5647: Corrupt directory, running e2fsck is recommended [ 593.199672][T24806] loop3: detected capacity change from 0 to 512 [ 593.215610][ T5615] usb 15-1: new low-speed USB device number 7 using vhci_hcd [ 593.226119][T24803] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 593.228324][ T5615] usb 15-1: enqueue for inactive port 0 [ 593.234443][T24803] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.5647: corrupted in-inode xattr: e_name out of bounds [ 593.240980][ T5615] usb 15-1: enqueue for inactive port 0 [ 593.259633][ T5615] usb 15-1: enqueue for inactive port 0 [ 593.268139][T24803] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 593.268421][T24803] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.5647: couldn't read orphan inode 15 (err -117) [ 593.277839][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 593.277862][ C0] EXT4-fs (loop6): initial error at time 1811481967: ext4_iget_extra_inode:5128: inode 15 [ 593.277904][ C0] EXT4-fs (loop6): last error at time 1811481967: ext4_iget_extra_inode:5128: inode 15 [ 593.315957][T24803] loop6: lost filesystem error report for type 5 error -117 [ 593.316025][T24801] loop2: detected capacity change from 0 to 4096 [ 593.317271][T24803] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.338754][T24806] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 593.343476][ T5615] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 593.350643][T24806] EXT4-fs (loop3): orphan cleanup on readonly fs [ 593.401482][T24806] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 593.416255][T24806] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 593.423107][T24806] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #16: comm syz.3.5648: corrupted xattr block 31: invalid header [ 593.436690][T24806] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 593.436923][T24806] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 593.455108][T24806] EXT4-fs (loop3): 1 orphan inode deleted [ 593.461338][T24806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 593.484055][T24806] xt_hashlimit: size too large, truncated to 1048576 [ 593.513410][T24801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.739670][ T28] audit: type=1326 audit(1811481967.767:10481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24802 comm="syz.6.5647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3dfce59 code=0x7ffc0000 [ 593.821009][ T28] audit: type=1326 audit(1811481967.767:10482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24802 comm="syz.6.5647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3dfce59 code=0x7ffc0000 [ 593.846677][ T28] audit: type=1326 audit(1811481967.767:10483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24802 comm="syz.6.5647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3dfce59 code=0x7ffc0000 [ 593.872597][ T28] audit: type=1326 audit(1811481967.767:10484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24802 comm="syz.6.5647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3dfce59 code=0x7ffc0000 [ 593.898306][ T28] audit: type=1326 audit(1811481967.767:10485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24802 comm="syz.6.5647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7ff3a3dfce59 code=0x7ffc0000 [ 594.037833][ T28] audit: type=1326 audit(1811481967.767:10486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24802 comm="syz.6.5647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3dfce59 code=0x7ffc0000 [ 594.102350][ T28] audit: type=1326 audit(1811481967.767:10487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24802 comm="syz.6.5647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3dfce59 code=0x7ffc0000 [ 594.130031][ T28] audit: type=1326 audit(1811481967.767:10488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24802 comm="syz.6.5647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3dfce59 code=0x7ffc0000 [ 594.198256][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.308126][T24832] __nla_validate_parse: 26 callbacks suppressed [ 594.308141][T24832] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5653'. [ 594.347908][T21604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.371735][T24834] loop7: detected capacity change from 0 to 512 [ 594.383452][T24834] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 594.421105][T24834] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 594.448149][T24834] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5654: Corrupt directory, running e2fsck is recommended [ 594.517508][T24842] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5656'. [ 594.535438][T24834] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 594.559847][T24844] syzkaller1: tun_chr_ioctl cmd 35111 [ 594.571554][T24834] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.5654: corrupted in-inode xattr: e_name out of bounds [ 594.585690][T24834] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 594.585917][T24834] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5654: couldn't read orphan inode 15 (err -117) [ 594.595162][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 594.595179][ C1] EXT4-fs (loop7): initial error at time 1811481968: ext4_iget_extra_inode:5128: inode 15 [ 594.595212][ C1] EXT4-fs (loop7): last error at time 1811481968: ext4_iget_extra_inode:5128: inode 15 [ 594.634277][T21600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.656336][T24834] loop7: lost filesystem error report for type 5 error -117 [ 594.660849][T24834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.709552][T24847] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 594.716204][T24847] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 594.753802][T24847] vhci_hcd vhci_hcd.0: Device attached [ 594.815022][T24853] tipc: Enabling of bearer rejected, failed to enable media [ 594.875263][T24851] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 594.876045][T24857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5659'. [ 594.881907][T24851] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 594.904818][T24851] vhci_hcd vhci_hcd.0: Device attached [ 594.971685][T19343] usb 14-1: SetAddress Request (3) to port 0 [ 594.991912][T19343] usb 14-1: new SuperSpeed USB device number 3 using vhci_hcd [ 595.438466][T24848] vhci_hcd: connection closed [ 595.438605][T24852] vhci_hcd: connection reset by peer [ 595.450356][ T2211] vhci_hcd vhci_hcd.6: stop threads [ 595.462464][ T2211] vhci_hcd vhci_hcd.6: release socket [ 595.480543][ T2211] vhci_hcd vhci_hcd.6: disconnect device [ 595.503511][ T2211] vhci_hcd vhci_hcd.6: stop threads [ 595.521816][ T2211] vhci_hcd vhci_hcd.6: release socket [ 595.535872][ T2211] vhci_hcd vhci_hcd.6: disconnect device [ 595.571822][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.608469][ T2211] Bluetooth: hci0: Frame reassembly failed (-84) [ 595.629996][T24844] loop3: detected capacity change from 0 to 4096 [ 595.648320][T24844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.903053][T24874] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5674'. [ 595.991277][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.050017][T24878] batadv_slave_1: entered promiscuous mode [ 596.058581][T24878] netlink: 'syz.7.5665': attribute type 21 has an invalid length. [ 596.067770][T24877] batadv_slave_1: left promiscuous mode [ 596.082897][T24883] loop3: detected capacity change from 0 to 512 [ 596.141131][T24883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.154058][T24883] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.184954][T24889] loop7: detected capacity change from 0 to 128 [ 596.196272][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.270760][T24894] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24894 comm=syz.3.5671 [ 596.287651][T24894] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24894 comm=syz.3.5671 [ 596.379709][T24901] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 596.386280][T24901] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 596.424221][T24901] vhci_hcd vhci_hcd.0: Device attached [ 596.435371][T24901] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 596.442010][T24901] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 596.451965][T24901] vhci_hcd vhci_hcd.0: Device attached [ 596.476623][T24914] 9p: Bad value for 'rfdno' [ 596.515472][T24902] vhci_hcd: connection closed [ 596.515719][T24908] vhci_hcd: connection closed [ 596.515934][ T2211] vhci_hcd vhci_hcd.7: stop threads [ 596.534063][T24920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5677'. [ 596.552014][ T2211] vhci_hcd vhci_hcd.7: release socket [ 596.564259][ T2211] vhci_hcd vhci_hcd.7: disconnect device [ 596.583878][ T2211] vhci_hcd vhci_hcd.7: stop threads [ 596.598477][ T2211] vhci_hcd vhci_hcd.7: release socket [ 596.601645][ T919] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 596.620855][ T2211] vhci_hcd vhci_hcd.7: disconnect device [ 597.020214][T24952] xt_hashlimit: size too large, truncated to 1048576 [ 597.631573][T24309] Bluetooth: hci0: command 0x1003 tx timeout [ 597.643590][ T3568] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 597.810565][T24975] loop2: detected capacity change from 0 to 1024 [ 597.830897][T24975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 597.850853][T24977] loop7: detected capacity change from 0 to 512 [ 597.866922][T24975] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 597.881976][T24977] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.909664][T24975] System zones: 0-1, 3-12 [ 597.915604][T24975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.938109][T24977] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.999535][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.102620][T21600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.137204][T24992] loop2: detected capacity change from 0 to 128 [ 598.384467][ T28] kauditd_printk_skb: 209 callbacks suppressed [ 598.384483][ T28] audit: type=1326 audit(1811481972.417:10698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.7.5704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48da92ce59 code=0x7ffc0000 [ 598.419826][ T28] audit: type=1326 audit(1811481972.447:10699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.7.5704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48da92ce59 code=0x7ffc0000 [ 598.732104][ T28] audit: type=1326 audit(1811481972.447:10700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.7.5704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48da92ce59 code=0x7ffc0000 [ 599.257663][ T28] audit: type=1326 audit(1811481972.447:10701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.7.5704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48da92ce59 code=0x7ffc0000 [ 599.412840][ T28] audit: type=1326 audit(1811481972.447:10702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.7.5704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f48da92ce59 code=0x7ffc0000 [ 599.545501][ T28] audit: type=1326 audit(1811481972.517:10703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.7.5704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48da92ce59 code=0x7ffc0000 [ 599.599328][T25041] loop7: detected capacity change from 0 to 512 [ 599.663448][T24309] Bluetooth: hci0: sending frame failed (-49) [ 599.669937][ T3568] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 599.686873][T25041] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.703108][ T28] audit: type=1326 audit(1811481972.517:10704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.7.5704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f48da92cbc2 code=0x7ffc0000 [ 599.741540][ T28] audit: type=1326 audit(1811481972.517:10705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.7.5704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f48da92cc57 code=0x7ffc0000 [ 599.767350][ T28] audit: type=1326 audit(1811481972.517:10706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.7.5704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f48da8e9b51 code=0x7ffc0000 [ 599.812000][ T28] audit: type=1326 audit(1811481972.517:10707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.7.5704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f48da92dc49 code=0x7ffc0000 [ 599.920668][T25041] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.054939][T25056] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5726'. [ 600.280485][T19343] usb 14-1: device descriptor read/8, error -110 [ 600.298520][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.313976][T25068] loop6: detected capacity change from 0 to 512 [ 600.370438][T25068] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 600.383869][T25068] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 600.400155][T25068] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.5731: Corrupt directory, running e2fsck is recommended [ 600.420560][T25073] batadv_slave_1: entered promiscuous mode [ 600.430626][T25068] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 600.444966][T19343] usb 14-1: new SuperSpeed USB device number 3 using vhci_hcd [ 600.456344][T25068] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.5731: corrupted in-inode xattr: e_name out of bounds [ 600.479569][T25072] batadv_slave_1: left promiscuous mode [ 600.491365][T25068] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 600.491525][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 600.507184][ C1] EXT4-fs (loop6): initial error at time 1811481974: ext4_iget_extra_inode:5128: inode 15 [ 600.517156][ C1] EXT4-fs (loop6): last error at time 1811481974: ext4_iget_extra_inode:5128: inode 15 [ 600.532258][T19343] usb 14-1: enqueue for inactive port 0 [ 600.541146][T25068] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.5731: couldn't read orphan inode 15 (err -117) [ 600.558554][T19343] usb 14-1: enqueue for inactive port 0 [ 600.564617][T19343] usb 14-1: enqueue for inactive port 0 [ 600.570393][T25068] loop6: lost filesystem error report for type 5 error -117 [ 600.571097][T25068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.654069][T25085] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5738'. [ 600.664042][T25083] loop7: detected capacity change from 0 to 1024 [ 600.681214][T25083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 600.718717][T19343] usb usb14-port1: attempt power cycle [ 600.722437][T25083] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 600.741765][ T3518] usb usb16-port1: attempt power cycle [ 600.762226][T25083] System zones: 0-1, 3-12 [ 600.771024][T25094] loop3: detected capacity change from 0 to 512 [ 600.774395][T25083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.781640][ T5615] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 600.815479][T25094] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 600.879999][T25094] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 600.894706][T25100] syzkaller1: tun_chr_ioctl cmd 35111 [ 601.049763][T25094] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.5741: Corrupt directory, running e2fsck is recommended [ 601.205407][T25094] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 601.251819][T25094] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.5741: corrupted in-inode xattr: e_name out of bounds [ 601.323438][T25094] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 601.324665][T25094] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5741: couldn't read orphan inode 15 (err -117) [ 601.333906][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 601.333947][ C0] EXT4-fs (loop3): initial error at time 1811481975: ext4_iget_extra_inode:5128: inode 15 [ 601.333980][ C0] EXT4-fs (loop3): last error at time 1811481975: ext4_iget_extra_inode:5128: inode 15 [ 601.371934][T25094] loop3: lost filesystem error report for type 5 error -117 [ 601.375376][T25094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.440337][T21604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.540741][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.027578][T24982] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 602.100277][T25100] loop2: detected capacity change from 0 to 4096 [ 602.240394][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.254970][T25100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.276389][T25126] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5747'. [ 602.337825][T25128] loop7: detected capacity change from 0 to 128 [ 602.462385][T25138] loop3: detected capacity change from 0 to 512 [ 602.532412][T25138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.547256][T25138] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.589483][T21600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.608944][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.729464][T25158] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5761'. [ 602.755218][T25158] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5761'. [ 602.778908][T25160] loop2: detected capacity change from 0 to 512 [ 602.783567][T25158] netlink: 'syz.6.5761': attribute type 8 has an invalid length. [ 602.792955][T25158] netlink: 'syz.6.5761': attribute type 5 has an invalid length. [ 602.800707][T25158] netlink: 'syz.6.5761': attribute type 5 has an invalid length. [ 602.810570][T25158] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5761'. [ 602.834599][T25160] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 602.863677][T25168] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5764'. [ 602.880341][T25160] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 602.905361][T25160] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.5762: Corrupt directory, running e2fsck is recommended [ 602.939094][T25160] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 602.981115][T25160] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.5762: corrupted in-inode xattr: e_name out of bounds [ 603.012093][T25178] loop6: detected capacity change from 0 to 512 [ 603.018966][T25160] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 603.019317][T25160] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.5762: couldn't read orphan inode 15 (err -117) [ 603.028623][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 603.028640][ C1] EXT4-fs (loop2): initial error at time 1811481977: ext4_iget_extra_inode:5128: inode 15 [ 603.028667][ C1] EXT4-fs (loop2): last error at time 1811481977: ext4_iget_extra_inode:5128: inode 15 [ 603.067852][T25160] loop2: lost filesystem error report for type 5 error -117 [ 603.068240][T25181] syzkaller1: tun_chr_ioctl cmd 35111 [ 603.081923][T25160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.095556][ T3518] usb usb16-port1: unable to enumerate USB device [ 603.174933][T25183] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5767'. [ 603.249575][T25178] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.262122][T25178] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 603.298439][T21604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.393779][ T28] kauditd_printk_skb: 378 callbacks suppressed [ 603.393794][ T28] audit: type=1326 audit(1811481977.427:11086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25159 comm="syz.2.5762" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b433ce59 code=0x7ffc0000 [ 603.475261][ T28] audit: type=1326 audit(1811481977.427:11087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25159 comm="syz.2.5762" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b433ce59 code=0x7ffc0000 [ 603.575933][T25191] loop7: detected capacity change from 0 to 4096 [ 603.608021][ T28] audit: type=1326 audit(1811481977.427:11088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25159 comm="syz.2.5762" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60b42fd68e code=0x7ffc0000 [ 603.648299][T25191] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.798105][ T28] audit: type=1326 audit(1811481977.457:11089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25159 comm="syz.2.5762" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60b42fd68e code=0x7ffc0000 [ 603.869196][ T28] audit: type=1326 audit(1811481977.457:11090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25159 comm="syz.2.5762" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60b42fd68e code=0x7ffc0000 [ 603.925066][ T28] audit: type=1326 audit(1811481977.457:11091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25159 comm="syz.2.5762" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60b42fd68e code=0x7ffc0000 [ 603.929903][T25198] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5770'. [ 603.953464][ T28] audit: type=1326 audit(1811481977.457:11092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25159 comm="syz.2.5762" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60b42fd68e code=0x7ffc0000 [ 603.989182][ T28] audit: type=1326 audit(1811481977.457:11093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25159 comm="syz.2.5762" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60b42fd68e code=0x7ffc0000 [ 604.015296][ T28] audit: type=1326 audit(1811481977.467:11094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25159 comm="syz.2.5762" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60b42fd68e code=0x7ffc0000 [ 604.046072][ T28] audit: type=1326 audit(1811481977.467:11095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25159 comm="syz.2.5762" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60b42fd68e code=0x7ffc0000 [ 604.080107][T25204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5775'. [ 604.131723][T19343] usb usb14-port1: unable to enumerate USB device [ 604.141459][T21600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.213799][T25218] loop3: detected capacity change from 0 to 512 [ 604.273737][T25218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.294862][T25218] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 604.340067][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.350217][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.367796][T25230] loop6: detected capacity change from 0 to 512 [ 604.403064][T25230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.506707][T21604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.090945][T25252] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 605.097611][T25252] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 605.106282][T25252] vhci_hcd vhci_hcd.0: Device attached [ 605.151463][T25253] vhci_hcd: connection closed [ 605.151693][ T2064] vhci_hcd vhci_hcd.6: stop threads [ 605.225651][ T2064] vhci_hcd vhci_hcd.6: release socket [ 605.240754][ T2064] vhci_hcd vhci_hcd.6: disconnect device [ 605.495533][T25269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.527198][T25269] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.550829][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.614652][T25280] __nla_validate_parse: 5 callbacks suppressed [ 605.614739][T25280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5801'. [ 605.654011][T25276] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 605.662909][T25276] EXT4-fs (loop7): orphan cleanup on readonly fs [ 605.677427][T25276] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 605.720913][T25276] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 605.730628][T25276] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2972: inode #16: comm syz.7.5800: corrupted xattr block 31: invalid header [ 605.747898][T25276] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 605.749545][T25276] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117) [ 605.758837][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 605.758884][ C1] EXT4-fs (loop7): initial error at time 1811481979: ext4_xattr_delete_inode:2972: inode 16 [ 605.759001][ C1] EXT4-fs (loop7): last error at time 1811481979: ext4_xattr_delete_inode:2972: inode 16 [ 605.795403][T25276] EXT4-fs (loop7): 1 orphan inode deleted [ 605.803513][T25276] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 605.828072][T25276] xt_hashlimit: size too large, truncated to 1048576 [ 605.963532][T25307] set_capacity_and_notify: 2 callbacks suppressed [ 605.963550][T25307] loop3: detected capacity change from 0 to 512 [ 606.005922][T25307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.041775][T25307] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.067052][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.202940][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.247098][T25319] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5814'. [ 606.268954][T25319] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5814'. [ 606.294069][T25321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5815'. [ 606.423545][T25319] netlink: 'syz.7.5814': attribute type 8 has an invalid length. [ 606.444383][T25319] netlink: 'syz.7.5814': attribute type 5 has an invalid length. [ 606.465815][T25319] netlink: 'syz.7.5814': attribute type 5 has an invalid length. [ 606.493657][T25329] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5814'. [ 606.577894][T25337] loop7: detected capacity change from 0 to 512 [ 606.605099][T25337] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.633934][T25337] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.660486][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.532420][T25362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5829'. [ 607.693296][T25374] loop2: detected capacity change from 0 to 512 [ 607.745803][T25374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.764975][T25374] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.897315][T21600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.044535][T25388] batadv_slave_1: entered promiscuous mode [ 608.078131][T25387] batadv_slave_1: left promiscuous mode [ 608.149387][T25425] loop6: detected capacity change from 0 to 512 [ 608.183367][T25425] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.203390][T25425] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.204446][T25429] loop3: detected capacity change from 0 to 1024 [ 608.221388][T25429] EXT4-fs: Ignoring removed nomblk_io_submit option [ 608.237632][T25433] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 608.244214][T25433] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 608.252540][T25433] vhci_hcd vhci_hcd.0: Device attached [ 608.274426][T21604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.286076][T25429] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 608.294830][T25429] System zones: 0-1, 3-12 [ 608.313664][T25434] vhci_hcd: connection closed [ 608.314230][ T2211] vhci_hcd vhci_hcd.7: stop threads [ 608.316943][T25429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.319212][ T2211] vhci_hcd vhci_hcd.7: release socket [ 608.347768][ T2211] vhci_hcd vhci_hcd.7: disconnect device [ 608.361136][T25443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5858'. [ 608.382626][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.395289][T25445] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25445 comm=syz.6.5860 [ 608.408271][T25445] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25445 comm=syz.6.5860 [ 608.536254][T25452] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 608.542856][T25452] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 608.552027][T25452] vhci_hcd vhci_hcd.0: Device attached [ 608.560337][T25452] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 608.566988][T25452] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 608.574678][T25452] vhci_hcd vhci_hcd.0: Device attached [ 608.600829][T25454] vhci_hcd: connection closed [ 608.600950][T25457] vhci_hcd: connection closed [ 608.601980][ T68] vhci_hcd vhci_hcd.3: stop threads [ 608.616647][ T68] vhci_hcd vhci_hcd.3: release socket [ 608.622415][ T68] vhci_hcd vhci_hcd.3: disconnect device [ 608.628232][ T68] vhci_hcd vhci_hcd.3: stop threads [ 608.633489][ T68] vhci_hcd vhci_hcd.3: release socket [ 608.639013][ T68] vhci_hcd vhci_hcd.3: disconnect device [ 609.093467][T25477] loop2: detected capacity change from 0 to 128 [ 609.138306][T25479] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 609.144878][T25479] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 609.157655][T25479] vhci_hcd vhci_hcd.0: Device attached [ 609.191217][T25475] loop7: detected capacity change from 0 to 512 [ 609.216500][T25475] EXT4-fs: Ignoring removed oldalloc option [ 609.236325][T25487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5873'. [ 609.258760][T25475] EXT4-fs (loop7): filesystem is read-only [ 609.278804][T25475] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 609.314603][T25475] EXT4-fs (loop7): filesystem is read-only [ 609.320458][T25475] EXT4-fs (loop7): orphan cleanup on readonly fs [ 609.331517][T25475] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5868: bg 0: block 64: padding at end of block bitmap is not set [ 609.345779][T25475] loop7: lost filesystem error report for type 5 error -117 [ 609.347110][T25475] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 609.363147][T25475] loop7: lost filesystem error report for type 5 error -117 [ 609.363449][T25475] EXT4-fs (loop7): 1 orphan inode deleted [ 609.366519][T25495] loop3: detected capacity change from 0 to 128 [ 609.371871][T25475] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 609.461680][T19332] usb 15-1: new low-speed USB device number 9 using vhci_hcd [ 609.462163][T25475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.570994][T25480] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 3 [ 609.586506][ T2211] vhci_hcd vhci_hcd.7: stop threads [ 609.592952][T25504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5878'. [ 609.602127][ T2211] vhci_hcd vhci_hcd.7: release socket [ 609.608301][ T2211] vhci_hcd vhci_hcd.7: disconnect device [ 609.833193][T25517] loop7: detected capacity change from 0 to 512 [ 609.864040][T25517] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.898111][T25526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5884'. [ 609.902285][T25517] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.954217][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.986956][T25530] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 609.993546][T25530] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 610.021626][T25534] loop3: detected capacity change from 0 to 512 [ 610.024922][T25530] vhci_hcd vhci_hcd.0: Device attached [ 610.048088][T25530] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 610.054678][T25530] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 610.063457][T25530] vhci_hcd vhci_hcd.0: Device attached [ 610.099718][T25535] vhci_hcd: connection closed [ 610.099995][ T2064] vhci_hcd vhci_hcd.7: stop threads [ 610.120686][ T2064] vhci_hcd vhci_hcd.7: release socket [ 610.125239][T25531] vhci_hcd: connection closed [ 610.127485][ T2064] vhci_hcd vhci_hcd.7: disconnect device [ 610.139538][T25534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.152580][T25534] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.163915][ T2064] vhci_hcd vhci_hcd.7: stop threads [ 610.169272][ T2064] vhci_hcd vhci_hcd.7: release socket [ 610.177825][ T2064] vhci_hcd vhci_hcd.7: disconnect device [ 610.193968][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.269675][T25545] EXT4-fs: Ignoring removed oldalloc option [ 610.295503][T25545] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 610.307064][T25545] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5889: invalid indirect mapped block 83886080 (level 1) [ 610.323410][T25545] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 610.323544][T25545] EXT4-fs (loop3): Remounting filesystem read-only [ 610.332712][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 610.332746][ C0] EXT4-fs (loop3): initial error at time 1811481984: ext4_free_branches:1023: inode 16 [ 610.332772][ C0] EXT4-fs (loop3): last error at time 1811481984: ext4_free_branches:1023: inode 16 [ 610.372916][T25545] EXT4-fs (loop3): 1 orphan inode deleted [ 610.391835][T25545] EXT4-fs (loop3): 1 truncate cleaned up [ 610.403724][T25545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.420731][T25545] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.530074][T25545] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 610.536638][T25545] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 610.544206][T25545] vhci_hcd vhci_hcd.0: Device attached [ 610.574670][T25552] vhci_hcd: connection closed [ 610.574854][ T1990] vhci_hcd vhci_hcd.3: stop threads [ 610.589531][ T1990] vhci_hcd vhci_hcd.3: release socket [ 610.595713][ T1990] vhci_hcd vhci_hcd.3: disconnect device [ 610.825806][T25576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.874365][T25576] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.943574][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.160907][T25590] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 611.167474][T25590] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 611.193563][T25590] vhci_hcd vhci_hcd.0: Device attached [ 611.211426][T25595] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 611.218012][T25595] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 611.248940][T25595] vhci_hcd vhci_hcd.0: Device attached [ 611.339982][T25596] vhci_hcd: connection closed [ 611.342705][ T2211] vhci_hcd vhci_hcd.7: stop threads [ 611.354376][ T2211] vhci_hcd vhci_hcd.7: release socket [ 611.364552][ T2211] vhci_hcd vhci_hcd.7: disconnect device [ 611.367409][T25593] vhci_hcd: connection closed [ 611.377447][ T2211] vhci_hcd vhci_hcd.7: stop threads [ 611.387499][ T2211] vhci_hcd vhci_hcd.7: release socket [ 611.394577][ T2211] vhci_hcd vhci_hcd.7: disconnect device [ 611.479301][T25613] set_capacity_and_notify: 3 callbacks suppressed [ 611.479321][T25613] loop6: detected capacity change from 0 to 128 [ 611.641175][T25622] loop6: detected capacity change from 0 to 1024 [ 611.650897][T25622] EXT4-fs: Ignoring removed nomblk_io_submit option [ 611.682924][T25622] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 611.691216][T25622] System zones: 0-1, 3-12 [ 611.696322][T25622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.754259][T21604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.766119][T25628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5918'. [ 611.775371][T25628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5918'. [ 611.787595][T25628] netlink: 'syz.0.5918': attribute type 13 has an invalid length. [ 611.796084][T25628] netlink: 'syz.0.5918': attribute type 11 has an invalid length. [ 612.025019][T25650] syzkaller1: tun_chr_ioctl cmd 35111 [ 612.251161][T25667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5934'. [ 612.267719][T25668] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 612.274002][T25667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5934'. [ 612.274302][T25668] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 612.291170][T25660] loop2: detected capacity change from 0 to 4096 [ 612.319106][T25672] loop3: detected capacity change from 0 to 512 [ 612.325876][T25668] vhci_hcd vhci_hcd.0: Device attached [ 612.339984][T25660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.360066][T25668] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 612.366637][T25668] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 612.374324][T25668] vhci_hcd vhci_hcd.0: Device attached [ 612.401757][T25672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.420584][T25669] vhci_hcd: connection closed [ 612.420756][T25676] vhci_hcd: connection closed [ 612.420999][ T2211] vhci_hcd vhci_hcd.7: stop threads [ 612.435394][ T2211] vhci_hcd vhci_hcd.7: release socket [ 612.440810][ T2211] vhci_hcd vhci_hcd.7: disconnect device [ 612.449708][ T2211] vhci_hcd vhci_hcd.7: stop threads [ 612.452459][T25672] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.455037][ T2211] vhci_hcd vhci_hcd.7: release socket [ 612.455057][ T2211] vhci_hcd vhci_hcd.7: disconnect device [ 612.498147][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.934385][T25709] loop3: detected capacity change from 0 to 512 [ 612.961649][T25709] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 612.973731][T25709] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 613.005400][T25709] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.5948: Corrupt directory, running e2fsck is recommended [ 613.005882][T25712] loop7: detected capacity change from 0 to 512 [ 613.039251][T25714] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5951'. [ 613.059231][T25709] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 613.061781][T25712] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 613.085861][T25709] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.5948: corrupted in-inode xattr: e_name out of bounds [ 613.100049][T25709] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 613.100132][T25712] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 613.109344][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 613.109367][ C0] EXT4-fs (loop3): initial error at time 1811481987: ext4_iget_extra_inode:5128: inode 15 [ 613.109405][ C0] EXT4-fs (loop3): last error at time 1811481987: ext4_iget_extra_inode:5128: inode 15 [ 613.134284][T25709] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5948: couldn't read orphan inode 15 (err -117) [ 613.136416][T25712] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5950: Corrupt directory, running e2fsck is recommended [ 613.162658][T25709] loop3: lost filesystem error report for type 5 error -117 [ 613.172430][T25712] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 613.189376][T25709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.192468][T25712] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.5950: corrupted in-inode xattr: e_name out of bounds [ 613.215980][T25712] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 613.216171][T25712] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5950: couldn't read orphan inode 15 (err -117) [ 613.218842][T21600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.225393][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 613.225411][ C0] EXT4-fs (loop7): initial error at time 1811481987: ext4_iget_extra_inode:5128: inode 15 [ 613.225444][ C0] EXT4-fs (loop7): last error at time 1811481987: ext4_iget_extra_inode:5128: inode 15 [ 613.238515][T25712] loop7: lost filesystem error report for type 5 error -117 [ 613.309904][T25712] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.409131][T25728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5956'. [ 613.540666][ T28] kauditd_printk_skb: 614 callbacks suppressed [ 613.540692][ T28] audit: type=1326 audit(1811481987.537:11710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.5948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 614.417324][ T28] audit: type=1326 audit(1811481987.547:11711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.5948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 614.476633][ T28] audit: type=1326 audit(1811481987.547:11712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.5948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 614.509412][ T28] audit: type=1326 audit(1811481987.547:11713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.5948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 614.536367][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.545703][T19332] usb 15-1: enqueue for inactive port 0 [ 614.551650][T19332] usb 15-1: enqueue for inactive port 0 [ 614.557329][ T28] audit: type=1326 audit(1811481987.547:11714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.5948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 614.621049][ T28] audit: type=1326 audit(1811481987.547:11715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.5948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 614.647226][ T28] audit: type=1326 audit(1811481987.547:11716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.5948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 614.652236][T19332] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 614.680336][T25744] loop3: detected capacity change from 0 to 512 [ 614.687333][T25744] EXT4-fs: Ignoring removed nobh option [ 614.695881][T25746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5961'. [ 614.726418][ T28] audit: type=1326 audit(1811481987.547:11717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.5948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 614.752709][ T28] audit: type=1326 audit(1811481987.547:11718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.5948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 614.778663][ T28] audit: type=1326 audit(1811481987.547:11719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25708 comm="syz.3.5948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 614.801639][T25750] loop6: detected capacity change from 0 to 512 [ 614.810998][T25750] EXT4-fs: Ignoring removed oldalloc option [ 614.817765][T25744] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 614.863889][T25750] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 614.874471][T25744] EXT4-fs (loop3): 1 truncate cleaned up [ 614.892391][T25744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.905563][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.919683][T25743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5958'. [ 614.941012][T25758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5965'. [ 614.946423][T25750] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.5963: invalid indirect mapped block 83886080 (level 1) [ 614.964253][T25750] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 614.965198][T25743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5958'. [ 614.974396][T25750] EXT4-fs (loop6): Remounting filesystem read-only [ 614.974411][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 614.974438][ C0] EXT4-fs (loop6): initial error at time 1811481988: ext4_free_branches:1023: inode 16 [ 614.974472][ C0] EXT4-fs (loop6): last error at time 1811481988: ext4_free_branches:1023: inode 16 [ 614.974487][T25750] EXT4-fs (loop6): 1 orphan inode deleted [ 614.974520][T25750] EXT4-fs (loop6): 1 truncate cleaned up [ 614.975437][T25750] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.057137][T25750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.095456][T25767] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25767 comm=syz.0.5969 [ 615.109610][T25767] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25767 comm=syz.0.5969 [ 615.123970][T25750] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 615.130637][T25750] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 615.138203][T25750] vhci_hcd vhci_hcd.0: Device attached [ 615.190939][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.248057][T25768] vhci_hcd: connection closed [ 615.248548][ T2197] vhci_hcd vhci_hcd.6: stop threads [ 615.270948][ T2197] vhci_hcd vhci_hcd.6: release socket [ 615.278122][ T2197] vhci_hcd vhci_hcd.6: disconnect device [ 615.332947][ T3518] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 615.565580][T25799] loop7: detected capacity change from 0 to 512 [ 615.589035][T25799] EXT4-fs: Ignoring removed nobh option [ 615.599417][T25799] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 615.625647][T25799] EXT4-fs (loop7): 1 truncate cleaned up [ 615.633797][T25799] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.708970][T25808] syzkaller1: tun_chr_ioctl cmd 35111 [ 615.818639][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.093168][T25808] loop2: detected capacity change from 0 to 4096 [ 616.147042][T25808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.371286][T25843] EXT4-fs: Ignoring removed oldalloc option [ 616.404209][T25843] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 616.427297][T25843] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.6000: invalid indirect mapped block 83886080 (level 1) [ 616.449535][T25843] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 616.450484][T25843] EXT4-fs (loop6): Remounting filesystem read-only [ 616.459833][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 616.459850][ C0] EXT4-fs (loop6): initial error at time 1811481990: ext4_free_branches:1023: inode 16 [ 616.459885][ C0] EXT4-fs (loop6): last error at time 1811481990: ext4_free_branches:1023: inode 16 [ 616.518332][T25843] EXT4-fs (loop6): 1 orphan inode deleted [ 616.524474][T25843] EXT4-fs (loop6): 1 truncate cleaned up [ 616.530617][T25843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.544908][T25843] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.620068][T25843] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 616.626643][T25843] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 616.634516][T25843] vhci_hcd vhci_hcd.0: Device attached [ 616.667967][T25855] vhci_hcd: connection closed [ 616.668440][ T1990] vhci_hcd vhci_hcd.6: stop threads [ 616.684836][ T1990] vhci_hcd vhci_hcd.6: release socket [ 616.696596][ T1990] vhci_hcd vhci_hcd.6: disconnect device [ 616.760272][T21600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.934278][T25862] set_capacity_and_notify: 2 callbacks suppressed [ 616.934299][T25862] loop2: detected capacity change from 0 to 1764 [ 617.103085][T25868] __nla_validate_parse: 5 callbacks suppressed [ 617.103103][T25868] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6009'. [ 617.153493][T25868] netlink: 'syz.2.6009': attribute type 1 has an invalid length. [ 617.187047][T25868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.346810][T25875] loop3: detected capacity change from 0 to 1764 [ 620.150003][T25891] syzkaller1: tun_chr_ioctl cmd 35111 [ 620.168125][T25892] loop7: detected capacity change from 0 to 1764 [ 620.264893][T25895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6021'. [ 620.426865][T25908] syzkaller1: tun_chr_ioctl cmd 35111 [ 620.468525][T25913] loop7: detected capacity change from 0 to 512 [ 620.513825][T25913] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 620.543063][T25913] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 620.553550][T25913] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6028: Corrupt directory, running e2fsck is recommended [ 620.567941][T25913] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 620.576445][T25913] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6028: corrupted in-inode xattr: e_name out of bounds [ 620.590677][T25913] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 620.590877][T25913] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6028: couldn't read orphan inode 15 (err -117) [ 620.600075][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 620.600092][ C0] EXT4-fs (loop7): initial error at time 1811481994: ext4_iget_extra_inode:5128: inode 15 [ 620.600135][ C0] EXT4-fs (loop7): last error at time 1811481994: ext4_iget_extra_inode:5128: inode 15 [ 620.641722][T25913] loop7: lost filesystem error report for type 5 error -117 [ 620.643569][T25913] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.696899][T25891] loop6: detected capacity change from 0 to 4096 [ 620.739701][T25891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.905744][T25908] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6026'. [ 620.930959][T25908] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6026'. [ 621.081889][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 621.081909][ T28] audit: type=1326 audit(1811481995.047:11741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25912 comm="syz.7.6028" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48da92ce59 code=0x7ffc0000 [ 621.347196][ T28] audit: type=1326 audit(1811481995.047:11742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25912 comm="syz.7.6028" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48da92ce59 code=0x7ffc0000 [ 621.412500][T25908] loop3: detected capacity change from 0 to 4096 [ 621.453992][ T28] audit: type=1326 audit(1811481995.047:11743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25912 comm="syz.7.6028" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48da92ce59 code=0x7ffc0000 [ 621.481144][ T28] audit: type=1326 audit(1811481995.047:11744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25912 comm="syz.7.6028" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48da92ce59 code=0x7ffc0000 [ 621.526577][T25908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.545938][ T28] audit: type=1326 audit(1811481995.047:11745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25912 comm="syz.7.6028" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f48da92ce59 code=0x7ffc0000 [ 621.577456][ T28] audit: type=1326 audit(1811481995.047:11746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25912 comm="syz.7.6028" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48da92ce59 code=0x7ffc0000 [ 621.603429][ T28] audit: type=1326 audit(1811481995.047:11747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25912 comm="syz.7.6028" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48da92ce59 code=0x7ffc0000 [ 621.629075][ T28] audit: type=1326 audit(1811481995.047:11748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25912 comm="syz.7.6028" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48da92ce59 code=0x7ffc0000 [ 621.659566][ T28] audit: type=1326 audit(1811481995.047:11749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25912 comm="syz.7.6028" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48da92ce59 code=0x7ffc0000 [ 621.685424][ T28] audit: type=1326 audit(1811481995.047:11750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25912 comm="syz.7.6028" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f48da92ce59 code=0x7ffc0000 [ 621.835591][T25932] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6032'. [ 621.845138][T25932] netlink: 'syz.0.6032': attribute type 1 has an invalid length. [ 621.859610][T25932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 621.901114][T25936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6034'. [ 622.000337][T25940] loop7: detected capacity change from 0 to 512 [ 622.047164][T25940] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 622.084074][T25940] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 622.094334][T25940] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6035: Corrupt directory, running e2fsck is recommended [ 622.109408][T25940] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 622.122041][T25940] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6035: corrupted in-inode xattr: e_name out of bounds [ 622.151536][T25940] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 622.161514][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 622.177192][ C0] EXT4-fs (loop7): initial error at time 1811481996: ext4_iget_extra_inode:5128: inode 15 [ 622.187207][ C0] EXT4-fs (loop7): last error at time 1811481996: ext4_iget_extra_inode:5128: inode 15 [ 622.196987][T25940] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6035: couldn't read orphan inode 15 (err -117) [ 622.228482][T25940] loop7: lost filesystem error report for type 5 error -117 [ 622.396290][T25958] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25958 comm=syz.6.6042 [ 622.412194][T25951] batadv_slave_1: entered promiscuous mode [ 622.426597][T25958] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25958 comm=syz.6.6042 [ 622.436564][T25950] batadv_slave_1: left promiscuous mode [ 622.454837][T25963] loop3: detected capacity change from 0 to 512 [ 622.765503][T25963] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 622.974451][T25963] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 623.022762][T25973] netlink: 'syz.0.6045': attribute type 1 has an invalid length. [ 623.050771][T25973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 623.060481][T25963] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6044: Corrupt directory, running e2fsck is recommended [ 623.108961][T25963] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 623.117354][T25963] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.6044: corrupted in-inode xattr: e_name out of bounds [ 623.131358][T25963] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 623.192180][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 623.208011][ C0] EXT4-fs (loop3): initial error at time 1811481997: ext4_iget_extra_inode:5128: inode 15 [ 623.218005][ C0] EXT4-fs (loop3): last error at time 1811481997: ext4_iget_extra_inode:5128: inode 15 [ 623.221866][T25963] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6044: couldn't read orphan inode 15 (err -117) [ 623.247227][T25982] syzkaller1: tun_chr_ioctl cmd 35111 [ 623.270628][T25963] loop3: lost filesystem error report for type 5 error -117 [ 623.294414][T25985] loop2: detected capacity change from 0 to 512 [ 623.339682][T25985] EXT4-fs: Ignoring removed nobh option [ 623.428794][T25985] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 623.474473][T25985] EXT4-fs (loop2): 1 truncate cleaned up [ 623.482504][T25985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6051'. [ 623.491876][T25985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6051'. [ 624.092414][T25982] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6049'. [ 624.119073][T25982] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6049'. [ 624.142748][T26011] loop2: detected capacity change from 0 to 1024 [ 624.172191][T26011] EXT4-fs: Ignoring removed nomblk_io_submit option [ 624.190657][T25982] loop7: detected capacity change from 0 to 4096 [ 624.294509][T26011] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 624.317215][T26011] System zones: 0-1, 3-12 [ 624.348322][T26023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6065'. [ 624.357331][T26023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6065'. [ 625.256983][T26058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6077'. [ 625.275483][T26058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6077'. [ 625.349717][T26066] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 625.356296][T26066] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 625.372029][T26066] vhci_hcd vhci_hcd.0: Device attached [ 625.438988][T26067] vhci_hcd: connection closed [ 625.440798][ T2197] vhci_hcd vhci_hcd.2: stop threads [ 625.455462][ T2197] vhci_hcd vhci_hcd.2: release socket [ 625.462459][ T2197] vhci_hcd vhci_hcd.2: disconnect device [ 625.657245][T26083] loop7: detected capacity change from 0 to 512 [ 625.678986][T26083] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 625.694255][T26083] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 625.704825][T26083] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6086: Corrupt directory, running e2fsck is recommended [ 625.719140][T26083] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 625.729102][T26083] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6086: corrupted in-inode xattr: e_name out of bounds [ 625.743263][T26083] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 625.743469][T26083] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6086: couldn't read orphan inode 15 (err -117) [ 625.752667][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 625.752683][ C0] EXT4-fs (loop7): initial error at time 1811481999: ext4_iget_extra_inode:5128: inode 15 [ 625.752715][ C0] EXT4-fs (loop7): last error at time 1811481999: ext4_iget_extra_inode:5128: inode 15 [ 625.791401][T26083] loop7: lost filesystem error report for type 5 error -117 [ 625.926635][T26090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6090'. [ 625.945375][T26090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6090'. [ 625.974132][T26092] loop3: detected capacity change from 0 to 1024 [ 626.092468][ T28] kauditd_printk_skb: 740 callbacks suppressed [ 626.092483][ T28] audit: type=1326 audit(1811482000.127:12491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.7.6086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f48da8ed68e code=0x7ffc0000 [ 626.152572][T26092] EXT4-fs: Ignoring removed nomblk_io_submit option [ 626.385779][T26092] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 626.410746][ T28] audit: type=1326 audit(1811482000.157:12492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.7.6086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f48da8ed68e code=0x7ffc0000 [ 626.471287][T26092] System zones: 0-1, 3-12 [ 626.472763][ T28] audit: type=1326 audit(1811482000.157:12493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.7.6086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f48da8ed68e code=0x7ffc0000 [ 626.501419][ T28] audit: type=1326 audit(1811482000.157:12494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.7.6086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f48da8ed68e code=0x7ffc0000 [ 626.527451][ T28] audit: type=1326 audit(1811482000.157:12495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.7.6086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f48da8ed68e code=0x7ffc0000 [ 626.553384][ T28] audit: type=1326 audit(1811482000.157:12496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.7.6086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f48da8ed68e code=0x7ffc0000 [ 626.595829][ T28] audit: type=1326 audit(1811482000.157:12497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.7.6086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f48da8ed68e code=0x7ffc0000 [ 626.626565][ T28] audit: type=1326 audit(1811482000.167:12498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.7.6086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f48da8ed68e code=0x7ffc0000 [ 626.665522][ T28] audit: type=1326 audit(1811482000.167:12499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.7.6086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f48da8ed68e code=0x7ffc0000 [ 626.710600][ T28] audit: type=1326 audit(1811482000.167:12500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26082 comm="syz.7.6086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f48da8ed68e code=0x7ffc0000 [ 626.792480][T26113] loop3: detected capacity change from 0 to 128 [ 626.816968][T26114] loop2: detected capacity change from 0 to 512 [ 626.825633][T26114] EXT4-fs: Ignoring removed nobh option [ 626.865850][T26114] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 626.889756][T26114] EXT4-fs (loop2): 1 truncate cleaned up [ 627.097711][T26136] loop2: detected capacity change from 0 to 1024 [ 627.133255][T26136] EXT4-fs: Ignoring removed nomblk_io_submit option [ 627.150710][T26140] loop7: detected capacity change from 0 to 512 [ 627.171605][T26140] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 627.206850][T26136] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 627.218271][T26136] System zones: 0-1, 3-12 [ 627.224065][T26140] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 627.242410][T26140] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6110: Corrupt directory, running e2fsck is recommended [ 627.255983][T26149] loop3: detected capacity change from 0 to 128 [ 627.314176][T26140] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 627.355206][T26140] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6110: corrupted in-inode xattr: e_name out of bounds [ 627.376184][T26154] loop2: detected capacity change from 0 to 512 [ 627.408411][T26154] EXT4-fs: Ignoring removed nobh option [ 627.430028][T26140] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 627.431602][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 627.447346][ C0] EXT4-fs (loop7): initial error at time 1811482001: ext4_iget_extra_inode:5128: inode 15 [ 627.457458][ C0] EXT4-fs (loop7): last error at time 1811482001: ext4_iget_extra_inode:5128: inode 15 [ 627.468225][T26140] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6110: couldn't read orphan inode 15 (err -117) [ 627.482877][T26154] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 627.502397][T26140] loop7: lost filesystem error report for type 5 error -117 [ 627.562988][T26154] EXT4-fs (loop2): 1 truncate cleaned up [ 628.197520][T26185] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26185 comm=syz.6.6127 [ 628.246928][T26185] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=26185 comm=syz.6.6127 [ 628.352959][T26195] syzkaller1: tun_chr_ioctl cmd 35111 [ 628.377627][T26195] loop2: detected capacity change from 0 to 4096 [ 628.442715][T26205] loop7: detected capacity change from 0 to 512 [ 628.478048][T26205] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 628.497556][T26208] syzkaller1: tun_chr_ioctl cmd 35111 [ 628.503506][T26205] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 628.514131][T26205] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6134: Corrupt directory, running e2fsck is recommended [ 628.568779][T26205] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 628.607419][T26205] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6134: corrupted in-inode xattr: e_name out of bounds [ 628.683504][T26205] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 628.683744][T26205] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6134: couldn't read orphan inode 15 (err -117) [ 628.693051][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 628.693067][ C0] EXT4-fs (loop7): initial error at time 1811482002: ext4_iget_extra_inode:5128: inode 15 [ 628.693117][ C0] EXT4-fs (loop7): last error at time 1811482002: ext4_iget_extra_inode:5128: inode 15 [ 628.807196][T26205] loop7: lost filesystem error report for type 5 error -117 [ 629.520106][T26232] tipc: Enabling of bearer rejected, failed to enable media [ 629.668305][T26240] syzkaller1: tun_chr_ioctl cmd 35111 [ 629.722627][T26242] __nla_validate_parse: 7 callbacks suppressed [ 629.722653][T26242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6147'. [ 629.746606][T26242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6147'. [ 629.799025][T26240] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6146'. [ 629.818185][T26240] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6146'. [ 629.865090][T26251] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 629.871697][T26251] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 629.910954][T26240] loop7: detected capacity change from 0 to 4096 [ 629.911762][T26251] vhci_hcd vhci_hcd.0: Device attached [ 629.986547][T26254] loop2: detected capacity change from 0 to 512 [ 629.994610][T26254] EXT4-fs: Ignoring removed oldalloc option [ 630.018462][T26254] EXT4-fs (loop2): filesystem is read-only [ 630.031621][T26254] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 630.051084][T26254] EXT4-fs (loop2): filesystem is read-only [ 630.073090][T26254] EXT4-fs (loop2): orphan cleanup on readonly fs [ 630.092862][T26254] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6149: bg 0: block 64: padding at end of block bitmap is not set [ 630.114473][T26254] loop2: lost filesystem error report for type 5 error -117 [ 630.116036][T26254] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 630.123419][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 630.123435][ C1] EXT4-fs (loop2): initial error at time 1811482004: ext4_validate_block_bitmap:441 [ 630.123457][ C1] EXT4-fs (loop2): last error at time 1811482004: ext4_validate_block_bitmap:441 [ 630.157354][T26254] loop2: lost filesystem error report for type 5 error -117 [ 630.163477][T26254] EXT4-fs (loop2): 1 orphan inode deleted [ 630.206298][T26252] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 630.247781][ T1739] vhci_hcd vhci_hcd.2: stop threads [ 630.253214][ T1739] vhci_hcd vhci_hcd.2: release socket [ 630.258743][ T1739] vhci_hcd vhci_hcd.2: disconnect device [ 630.338137][T26276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6158'. [ 630.386039][T26280] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6161'. [ 630.587242][T26287] syzkaller1: tun_chr_ioctl cmd 35111 [ 631.116332][ T28] kauditd_printk_skb: 651 callbacks suppressed [ 631.116350][ T28] audit: type=1326 audit(1811482005.117:13152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26281 comm="syz.0.6160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec8d1ce59 code=0x7ffc0000 [ 631.167865][ T28] audit: type=1326 audit(1811482005.117:13153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26281 comm="syz.0.6160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec8d1ce59 code=0x7ffc0000 [ 631.193894][ T28] audit: type=1326 audit(1811482005.147:13154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26281 comm="syz.0.6160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcec8cdd68e code=0x7ffc0000 [ 631.228109][ T28] audit: type=1326 audit(1811482005.177:13155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26281 comm="syz.0.6160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcec8cdd68e code=0x7ffc0000 [ 631.281576][ T28] audit: type=1326 audit(1811482005.177:13156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26281 comm="syz.0.6160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcec8cdd68e code=0x7ffc0000 [ 631.307446][ T28] audit: type=1326 audit(1811482005.177:13157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26281 comm="syz.0.6160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcec8cdd68e code=0x7ffc0000 [ 631.383767][T26299] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6165'. [ 631.391411][ T28] audit: type=1326 audit(1811482005.187:13158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26281 comm="syz.0.6160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcec8cdd68e code=0x7ffc0000 [ 631.418920][ T28] audit: type=1326 audit(1811482005.187:13159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26281 comm="syz.0.6160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcec8cdd68e code=0x7ffc0000 [ 631.451514][ T28] audit: type=1326 audit(1811482005.187:13160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26281 comm="syz.0.6160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcec8cdd68e code=0x7ffc0000 [ 631.513315][ T28] audit: type=1326 audit(1811482005.187:13161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26281 comm="syz.0.6160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcec8cdd68e code=0x7ffc0000 [ 631.554793][T26297] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6163'. [ 631.565026][T26297] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6163'. [ 631.626676][T26297] loop7: detected capacity change from 0 to 4096 [ 631.662512][T26297] EXT4-fs mount: 33 callbacks suppressed [ 631.662534][T26297] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.947239][T26332] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 631.953847][T26332] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 631.961387][T26332] vhci_hcd vhci_hcd.0: Device attached [ 631.989537][T26332] loop2: detected capacity change from 0 to 512 [ 631.996178][T26332] EXT4-fs: Ignoring removed oldalloc option [ 632.024824][T26332] EXT4-fs (loop2): filesystem is read-only [ 632.039419][T26332] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 632.039431][T26336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6178'. [ 632.092460][T26332] EXT4-fs (loop2): filesystem is read-only [ 632.110682][T26332] EXT4-fs (loop2): orphan cleanup on readonly fs [ 632.158752][T26332] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6176: bg 0: block 64: padding at end of block bitmap is not set [ 632.195518][T26332] loop2: lost filesystem error report for type 5 error -117 [ 632.196411][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.201577][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 632.219172][ C0] EXT4-fs (loop2): initial error at time 1811482006: ext4_validate_block_bitmap:441 [ 632.228623][ C0] EXT4-fs (loop2): last error at time 1811482006: ext4_validate_block_bitmap:441 [ 632.238633][T26332] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 632.257680][T26332] loop2: lost filesystem error report for type 5 error -117 [ 632.263950][T26332] EXT4-fs (loop2): 1 orphan inode deleted [ 632.348484][T26332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 632.387857][T26332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.486552][T26371] loop3: detected capacity change from 0 to 512 [ 632.494592][T26371] EXT4-fs: Ignoring removed nobh option [ 632.515997][T26371] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 632.530608][T26333] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 632.547549][T26371] EXT4-fs (loop3): 1 truncate cleaned up [ 632.554137][ T2197] vhci_hcd vhci_hcd.2: stop threads [ 632.559044][T26371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.559372][ T2197] vhci_hcd vhci_hcd.2: release socket [ 632.559399][ T2197] vhci_hcd vhci_hcd.2: disconnect device [ 632.641745][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.731080][T26394] syzkaller1: tun_chr_ioctl cmd 35111 [ 632.871529][T26409] loop7: detected capacity change from 0 to 512 [ 632.892181][T26409] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 632.911343][T26409] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 632.924227][T26409] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6202: Corrupt directory, running e2fsck is recommended [ 632.938827][T26409] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 632.951630][T26409] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6202: corrupted in-inode xattr: e_name out of bounds [ 632.965722][T26409] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 632.967252][T26409] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6202: couldn't read orphan inode 15 (err -117) [ 632.976460][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 632.976482][ C1] EXT4-fs (loop7): initial error at time 1811482006: ext4_iget_extra_inode:5128: inode 15 [ 632.976514][ C1] EXT4-fs (loop7): last error at time 1811482006: ext4_iget_extra_inode:5128: inode 15 [ 633.014591][T26409] loop7: lost filesystem error report for type 5 error -117 [ 633.016614][T26409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.063854][T26418] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26418 comm=syz.3.6205 [ 633.077885][T26418] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=26418 comm=syz.3.6205 [ 633.449565][T26425] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 633.456142][T26425] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 633.504115][T26425] vhci_hcd vhci_hcd.0: Device attached [ 633.549986][T26429] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 633.556547][T26429] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 633.849848][T26429] vhci_hcd vhci_hcd.0: Device attached [ 633.906894][T26426] vhci_hcd: connection closed [ 633.910372][ T30] vhci_hcd vhci_hcd.2: stop threads [ 633.920335][T26430] vhci_hcd: connection closed [ 633.923994][ T30] vhci_hcd vhci_hcd.2: release socket [ 633.934098][ T30] vhci_hcd vhci_hcd.2: disconnect device [ 633.948517][ T30] vhci_hcd vhci_hcd.2: stop threads [ 633.953779][ T30] vhci_hcd vhci_hcd.2: release socket [ 633.959171][ T30] vhci_hcd vhci_hcd.2: disconnect device [ 634.063007][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.329902][T26460] loop6: detected capacity change from 0 to 512 [ 634.348001][T26460] EXT4-fs: Ignoring removed nobh option [ 634.374866][T26460] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 634.395172][T26460] EXT4-fs (loop6): 1 truncate cleaned up [ 634.408958][T26460] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.454807][T21604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.551672][T26473] loop6: detected capacity change from 0 to 512 [ 634.563133][T26473] EXT4-fs: Ignoring removed oldalloc option [ 634.578817][T26473] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 634.607181][T26473] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.6223: invalid indirect mapped block 83886080 (level 1) [ 634.631613][T26473] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 634.633010][T26473] EXT4-fs (loop6): Remounting filesystem read-only [ 634.642256][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 634.642276][ C1] EXT4-fs (loop6): initial error at time 1811482008: ext4_free_branches:1023: inode 16 [ 634.642310][ C1] EXT4-fs (loop6): last error at time 1811482008: ext4_free_branches:1023: inode 16 [ 634.674620][T26473] EXT4-fs (loop6): 1 orphan inode deleted [ 634.680587][T26473] EXT4-fs (loop6): 1 truncate cleaned up [ 634.686720][T26473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.700199][T26473] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.750833][T26473] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 634.757436][T26473] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 634.765300][T26473] vhci_hcd vhci_hcd.0: Device attached [ 634.779069][T26488] vhci_hcd: connection closed [ 634.780628][ T30] vhci_hcd vhci_hcd.6: stop threads [ 634.797352][ T30] vhci_hcd vhci_hcd.6: release socket [ 634.803508][ T30] vhci_hcd vhci_hcd.6: disconnect device [ 634.868247][T26493] __nla_validate_parse: 7 callbacks suppressed [ 634.868267][T26493] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6231'. [ 634.951593][T26499] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 634.958165][T26499] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 634.982122][T26499] vhci_hcd vhci_hcd.0: Device attached [ 634.998583][T26504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6233'. [ 635.008341][T26504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6233'. [ 635.017536][T26499] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 635.024071][T26499] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 635.035620][T26499] vhci_hcd vhci_hcd.0: Device attached [ 635.093920][T26501] vhci_hcd: connection closed [ 635.096890][T26505] vhci_hcd: connection closed [ 635.109847][ T30] vhci_hcd vhci_hcd.7: stop threads [ 635.119949][ T30] vhci_hcd vhci_hcd.7: release socket [ 635.125771][ T30] vhci_hcd vhci_hcd.7: disconnect device [ 635.131906][ T30] vhci_hcd vhci_hcd.7: stop threads [ 635.137183][ T30] vhci_hcd vhci_hcd.7: release socket [ 635.143108][ T30] vhci_hcd vhci_hcd.7: disconnect device [ 635.161662][T19335] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 635.173341][T26511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6234'. [ 635.182872][T26511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6234'. [ 635.380110][T26525] syzkaller1: tun_chr_ioctl cmd 35111 [ 635.522003][T26529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6243'. [ 635.570304][T26536] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6244'. [ 635.579639][T26536] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6244'. [ 635.622897][T26538] loop7: detected capacity change from 0 to 512 [ 635.666730][T26538] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.687701][T26538] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.714463][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.801007][T26534] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6240'. [ 635.821063][T26534] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6240'. [ 635.899671][T26534] loop6: detected capacity change from 0 to 4096 [ 635.932454][T26534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.214950][T26583] loop3: detected capacity change from 0 to 512 [ 636.224136][T26583] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 636.236370][T26583] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 636.246765][T26583] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6260: Corrupt directory, running e2fsck is recommended [ 636.261238][T26583] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 636.269816][T26583] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.6260: corrupted in-inode xattr: e_name out of bounds [ 636.284189][T26583] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 636.285951][T26583] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6260: couldn't read orphan inode 15 (err -117) [ 636.301511][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 636.307608][T26583] loop3: lost filesystem error report for type 5 error -117 [ 636.313455][ C1] EXT4-fs (loop3): initial error at time 1811482010: ext4_iget_extra_inode:5128: inode 15 [ 636.313517][ C1] EXT4-fs (loop3): last error at time 1811482010: ext4_iget_extra_inode:5128: inode 15 [ 636.342881][T26583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.483854][T21604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.527428][ T28] kauditd_printk_skb: 313 callbacks suppressed [ 636.527447][ T28] audit: type=1326 audit(1811482010.557:13475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26582 comm="syz.3.6260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 636.565957][ T28] audit: type=1326 audit(1811482010.557:13476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26582 comm="syz.3.6260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 636.591782][ T28] audit: type=1326 audit(1811482010.557:13477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26582 comm="syz.3.6260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 636.617579][ T28] audit: type=1326 audit(1811482010.557:13478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26582 comm="syz.3.6260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 636.643226][ T28] audit: type=1326 audit(1811482010.587:13479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26582 comm="syz.3.6260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 636.668850][ T28] audit: type=1326 audit(1811482010.597:13480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26582 comm="syz.3.6260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 636.727600][T26592] loop6: detected capacity change from 0 to 512 [ 636.741537][ T28] audit: type=1326 audit(1811482010.597:13481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26582 comm="syz.3.6260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 636.748906][T26592] EXT4-fs: Ignoring removed nobh option [ 636.799721][ T28] audit: type=1326 audit(1811482010.597:13482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26582 comm="syz.3.6260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 636.826051][T26592] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 636.838390][ T28] audit: type=1326 audit(1811482010.597:13483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26582 comm="syz.3.6260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 636.871765][ T28] audit: type=1326 audit(1811482010.597:13484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26582 comm="syz.3.6260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7427ece59 code=0x7ffc0000 [ 636.877665][T26592] EXT4-fs (loop6): 1 truncate cleaned up [ 636.988816][T26592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.186294][T26608] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 637.192956][T26608] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 637.200723][T26608] vhci_hcd vhci_hcd.0: Device attached [ 637.250647][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.285883][T21604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.301836][T26603] loop7: detected capacity change from 0 to 512 [ 637.325493][T26603] EXT4-fs: Ignoring removed oldalloc option [ 637.343998][T26603] EXT4-fs (loop7): filesystem is read-only [ 637.350214][T26603] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 637.371264][T26620] syzkaller1: tun_chr_ioctl cmd 35111 [ 637.384029][T26603] EXT4-fs (loop7): filesystem is read-only [ 637.390360][T26603] EXT4-fs (loop7): orphan cleanup on readonly fs [ 637.434386][T26603] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6267: bg 0: block 64: padding at end of block bitmap is not set [ 637.450565][T26603] loop7: lost filesystem error report for type 5 error -117 [ 637.465423][T26627] loop2: detected capacity change from 0 to 128 [ 637.513887][T26603] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 637.523195][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 637.523244][ C1] EXT4-fs (loop7): initial error at time 1811482011: ext4_validate_block_bitmap:441 [ 637.523305][ C1] EXT4-fs (loop7): last error at time 1811482011: ext4_validate_block_bitmap:441 [ 637.560380][T26603] loop7: lost filesystem error report for type 5 error -117 [ 637.598734][T26603] EXT4-fs (loop7): 1 orphan inode deleted [ 637.613245][T19335] usb 15-1: new low-speed USB device number 11 using vhci_hcd [ 637.826308][T26637] loop3: detected capacity change from 0 to 128 [ 637.838593][T26603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 638.019455][T26603] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.080570][T26610] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 4 [ 638.087896][ T68] vhci_hcd vhci_hcd.7: stop threads [ 638.093350][ T68] vhci_hcd vhci_hcd.7: release socket [ 638.098941][ T68] vhci_hcd vhci_hcd.7: disconnect device [ 638.286373][T26620] loop6: detected capacity change from 0 to 4096 [ 638.309592][T26620] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.629545][T21604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.743450][T26674] syzkaller1: tun_chr_ioctl cmd 35111 [ 638.766529][T26674] loop2: detected capacity change from 0 to 4096 [ 638.778052][T26674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.935241][T21600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.148425][T26710] loop6: detected capacity change from 0 to 512 [ 639.155528][T26710] EXT4-fs: Ignoring removed nobh option [ 639.161735][T26710] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 639.194261][T26710] EXT4-fs (loop6): 1 truncate cleaned up [ 639.200604][T26710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.213891][T26712] loop2: detected capacity change from 0 to 4096 [ 639.226738][T26712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.255951][T21604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.338680][T21600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.420511][T26721] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 639.427092][T26721] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 639.452160][T26721] vhci_hcd vhci_hcd.0: Device attached [ 639.476581][T26721] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 639.483226][T26721] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 639.504596][T26721] vhci_hcd vhci_hcd.0: Device attached [ 639.582061][T26732] vhci_hcd: connection closed [ 639.583166][T26723] vhci_hcd: connection closed [ 639.593419][ T68] vhci_hcd vhci_hcd.2: stop threads [ 639.613481][ T68] vhci_hcd vhci_hcd.2: release socket [ 639.625355][ T68] vhci_hcd vhci_hcd.2: disconnect device [ 639.643951][ T68] vhci_hcd vhci_hcd.2: stop threads [ 639.653744][ T68] vhci_hcd vhci_hcd.2: release socket [ 639.672021][ T68] vhci_hcd vhci_hcd.2: disconnect device [ 639.720555][T26757] loop3: detected capacity change from 0 to 4096 [ 639.731383][T26757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.822793][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.893682][T26777] loop3: detected capacity change from 0 to 512 [ 639.906719][T26777] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 639.919010][T26777] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 639.929570][T26777] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6328: Corrupt directory, running e2fsck is recommended [ 639.946626][T26777] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 639.962518][T26777] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.6328: corrupted in-inode xattr: e_name out of bounds [ 639.976873][T26777] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 639.980275][T26777] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6328: couldn't read orphan inode 15 (err -117) [ 639.989552][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 639.989586][ C1] EXT4-fs (loop3): initial error at time 1811482014: ext4_iget_extra_inode:5128: inode 15 [ 639.989626][ C1] EXT4-fs (loop3): last error at time 1811482014: ext4_iget_extra_inode:5128: inode 15 [ 640.027756][T26777] loop3: lost filesystem error report for type 5 error -117 [ 640.028950][T26777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.068908][T26787] loop7: detected capacity change from 0 to 128 [ 640.229112][T26798] __nla_validate_parse: 18 callbacks suppressed [ 640.229138][T26798] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6335'. [ 640.247911][T26798] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6335'. [ 640.320006][T26803] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6337'. [ 640.452032][T26814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6342'. [ 640.593139][T26836] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6350'. [ 640.605740][T26838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6351'. [ 640.615196][T26836] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6350'. [ 640.745976][T26850] loop6: detected capacity change from 0 to 512 [ 640.752067][T26851] EXT4-fs: Ignoring removed oldalloc option [ 640.761378][T26850] EXT4-fs: Ignoring removed nobh option [ 640.769336][T26850] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 640.781712][T26851] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 640.849315][T26850] EXT4-fs (loop6): 1 truncate cleaned up [ 640.855437][T26851] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.6357: invalid indirect mapped block 83886080 (level 1) [ 640.869837][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.880683][T26850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.893197][T26851] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 640.894832][T26851] EXT4-fs (loop2): Remounting filesystem read-only [ 640.904005][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 640.904021][ C1] EXT4-fs (loop2): initial error at time 1811482014: ext4_free_branches:1023: inode 16 [ 640.904052][ C1] EXT4-fs (loop2): last error at time 1811482014: ext4_free_branches:1023: inode 16 [ 640.936785][T26851] EXT4-fs (loop2): 1 orphan inode deleted [ 640.948879][T26851] EXT4-fs (loop2): 1 truncate cleaned up [ 640.960133][T26851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.975346][T26851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.990199][T21604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.006342][T26851] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 641.012970][T26851] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 641.020583][T26851] vhci_hcd vhci_hcd.0: Device attached [ 641.028704][T26859] vhci_hcd: connection closed [ 641.029045][ T68] vhci_hcd vhci_hcd.2: stop threads [ 641.045226][ T68] vhci_hcd vhci_hcd.2: release socket [ 641.051108][ T68] vhci_hcd vhci_hcd.2: disconnect device [ 641.176420][T26874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6364'. [ 641.202507][T26877] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6366'. [ 641.211790][T26877] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6366'. [ 641.259356][T26877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.350040][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.429642][T26890] EXT4-fs: Ignoring removed nobh option [ 641.446347][T26890] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 641.459140][T26890] EXT4-fs (loop7): 1 truncate cleaned up [ 641.465740][T26890] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.504863][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.672699][T26907] syzkaller1: tun_chr_ioctl cmd 35111 [ 642.093007][T26907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.111859][T26929] EXT4-fs: Ignoring removed oldalloc option [ 642.143702][T26929] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 642.154608][T26929] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.6386: invalid indirect mapped block 83886080 (level 1) [ 642.169089][T26929] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 642.169253][T26929] EXT4-fs (loop7): Remounting filesystem read-only [ 642.178416][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 642.178433][ C0] EXT4-fs (loop7): initial error at time 1811482016: ext4_free_branches:1023: inode 16 [ 642.178464][ C0] EXT4-fs (loop7): last error at time 1811482016: ext4_free_branches:1023: inode 16 [ 642.212833][T26929] EXT4-fs (loop7): 1 orphan inode deleted [ 642.220546][T26929] EXT4-fs (loop7): 1 truncate cleaned up [ 642.226856][T26929] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.240496][T26929] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.283822][T26929] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 642.290394][T26929] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 642.298045][T26929] vhci_hcd vhci_hcd.0: Device attached [ 642.304318][T26936] vhci_hcd: connection closed [ 642.304615][ T68] vhci_hcd vhci_hcd.7: stop threads [ 642.319914][ T68] vhci_hcd vhci_hcd.7: release socket [ 642.326339][ T68] vhci_hcd vhci_hcd.7: disconnect device [ 642.372730][T26943] syzkaller1: tun_chr_ioctl cmd 35111 [ 642.402905][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.671956][T19335] usb 15-1: enqueue for inactive port 0 [ 642.680562][T19335] usb 15-1: enqueue for inactive port 0 [ 642.707984][T26964] set_capacity_and_notify: 6 callbacks suppressed [ 642.708002][T26964] loop6: detected capacity change from 0 to 4096 [ 642.761561][T19335] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 642.779334][T26964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.038714][T26997] syzkaller1: tun_chr_ioctl cmd 35111 [ 643.108654][T27005] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27005 comm=syz.3.6411 [ 643.123135][T27005] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27005 comm=syz.3.6411 [ 643.249713][T26997] loop2: detected capacity change from 0 to 4096 [ 643.264730][T26997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.317751][T21604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.535177][ T28] kauditd_printk_skb: 951 callbacks suppressed [ 643.535191][ T28] audit: type=1326 audit(1811482017.567:14436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27015 comm="syz.0.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec8d1ce59 code=0x7ffc0000 [ 643.705188][T27020] loop6: detected capacity change from 0 to 1764 [ 643.764568][ T28] audit: type=1326 audit(1811482017.607:14437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27015 comm="syz.0.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec8d1ce59 code=0x7ffc0000 [ 643.823277][ T28] audit: type=1326 audit(1811482017.607:14438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27015 comm="syz.0.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec8d1ce59 code=0x7ffc0000 [ 643.851495][ T28] audit: type=1326 audit(1811482017.607:14439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27015 comm="syz.0.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fcec8d1ce59 code=0x7ffc0000 [ 643.907138][ T28] audit: type=1326 audit(1811482017.607:14440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27015 comm="syz.0.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec8d1ce59 code=0x7ffc0000 [ 643.963323][T21600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.991099][ T28] audit: type=1326 audit(1811482017.637:14441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27015 comm="syz.0.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec8d1ce59 code=0x7ffc0000 [ 644.023346][ T28] audit: type=1326 audit(1811482017.637:14442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27015 comm="syz.0.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec8d1ce59 code=0x7ffc0000 [ 644.051399][ T28] audit: type=1326 audit(1811482017.637:14443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27015 comm="syz.0.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec8d1ce59 code=0x7ffc0000 [ 644.390205][ T28] audit: type=1326 audit(1811482017.637:14444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27015 comm="syz.0.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fcec8d1ce59 code=0x7ffc0000 [ 644.441173][ T28] audit: type=1326 audit(1811482017.677:14445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27015 comm="syz.0.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec8d1ce59 code=0x7ffc0000 [ 645.113323][T27045] loop7: detected capacity change from 0 to 512 [ 645.162841][T27045] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 645.196102][T27045] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 645.216826][T27045] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6426: Corrupt directory, running e2fsck is recommended [ 645.247089][T27045] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 645.264437][T27045] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6426: corrupted in-inode xattr: e_name out of bounds [ 645.294224][T27045] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 645.294480][T27045] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6426: couldn't read orphan inode 15 (err -117) [ 645.303734][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 645.303763][ C1] EXT4-fs (loop7): initial error at time 1811482019: ext4_iget_extra_inode:5128: inode 15 [ 645.303801][ C1] EXT4-fs (loop7): last error at time 1811482019: ext4_iget_extra_inode:5128: inode 15 [ 645.389863][T27045] loop7: lost filesystem error report for type 5 error -117 [ 645.390509][T27045] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.584074][T27052] loop6: detected capacity change from 0 to 128 [ 646.248104][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.342070][T27077] syzkaller1: tun_chr_ioctl cmd 35111 [ 646.530747][T27089] syzkaller1: tun_chr_ioctl cmd 35111 [ 646.710371][T27104] __nla_validate_parse: 10 callbacks suppressed [ 646.710388][T27104] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6435'. [ 646.748494][T27104] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6435'. [ 646.879358][T27119] loop7: detected capacity change from 0 to 4096 [ 646.892588][T27077] loop6: detected capacity change from 0 to 4096 [ 646.923574][T27077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.926214][T27119] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.090028][T21615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.181432][T21604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.236653][T27134] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6455'. [ 647.294309][T27137] loop6: detected capacity change from 0 to 128 [ 647.477497][T27150] loop3: detected capacity change from 0 to 512 [ 647.485909][T27150] EXT4-fs: Ignoring removed nobh option [ 647.496143][T27150] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 647.508589][T27150] EXT4-fs (loop3): 1 truncate cleaned up [ 647.515264][T27150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.566084][T21587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.594017][T27161] syzkaller1: tun_chr_ioctl cmd 35111 [ 647.609044][T27161] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6467'. [ 647.618628][T27161] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6467'. [ 647.674868][T27161] loop6: detected capacity change from 0 to 4096 [ 647.698671][T27167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6469'. [ 647.709330][T27161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.795869][T27179] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27179 comm=syz.0.6474 [ 647.808727][T27179] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27179 comm=syz.0.6474 [ 647.957316][T27182] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 647.963931][T27182] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 647.971535][T27182] vhci_hcd vhci_hcd.0: Device attached [ 647.978652][T27187] set_capacity_and_notify: 1 callbacks suppressed [ 647.978669][T27187] loop2: detected capacity change from 0 to 512 [ 647.985515][T27182] loop7: detected capacity change from 0 to 512 [ 648.000441][T27182] EXT4-fs: Ignoring removed oldalloc option [ 648.007807][T27187] EXT4-fs: Ignoring removed nobh option [ 648.014598][T27187] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 648.026819][T27182] EXT4-fs (loop7): filesystem is read-only [ 648.032708][T27182] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 648.048550][T27182] EXT4-fs (loop7): filesystem is read-only [ 648.048789][T27187] EXT4-fs (loop2): 1 truncate cleaned up [ 648.055499][T27182] EXT4-fs (loop7): orphan cleanup on readonly fs [ 648.071690][T27182] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6476: bg 0: block 64: padding at end of block bitmap is not set [ 648.086074][T27182] loop7: lost filesystem error report for type 5 error -117 [ 648.086676][T27187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.106052][T27182] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 648.114843][T27182] loop7: lost filesystem error report for type 5 error -117 [ 648.116421][T27182] EXT4-fs (loop7): 1 orphan inode deleted [ 648.129996][T27182] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 648.142957][T27182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.153941][T21604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.166771][T27188] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 4 [ 648.177486][ T1739] vhci_hcd vhci_hcd.7: stop threads [ 648.182748][ T1739] vhci_hcd vhci_hcd.7: release socket [ 648.188265][ T1739] vhci_hcd vhci_hcd.7: disconnect device [ 648.281973][T19347] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 648.300803][T21600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.862582][T27226] syzkaller1: tun_chr_ioctl cmd 35111 [ 648.919925][T27226] loop2: detected capacity change from 0 to 4096 [ 649.129330][T27230] syzkaller1: tun_chr_ioctl cmd 35111 [ 649.159384][T27230] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6491'. [ 649.171118][T27230] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6491'. [ 649.248045][T27230] loop2: detected capacity change from 0 to 4096 [ 649.352321][T27237] tipc: Enabling of bearer rejected, failed to enable media [ 649.406744][T27234] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 649.413339][T27234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 649.438782][T27234] vhci_hcd vhci_hcd.0: Device attached [ 649.458157][T27243] loop3: detected capacity change from 0 to 512 [ 649.520983][T27243] EXT4-fs: Ignoring removed oldalloc option [ 649.538794][T27246] loop7: detected capacity change from 0 to 512 [ 649.552071][T27246] EXT4-fs: Ignoring removed nobh option [ 649.564768][T27243] EXT4-fs (loop3): filesystem is read-only [ 649.582906][T27243] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 649.603183][T27246] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 649.614934][T27243] EXT4-fs (loop3): filesystem is read-only [ 649.620932][T27243] EXT4-fs (loop3): orphan cleanup on readonly fs [ 649.640568][T27251] loop2: detected capacity change from 0 to 512 [ 649.658596][T27246] EXT4-fs (loop7): 1 truncate cleaned up [ 649.664634][T27243] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6493: bg 0: block 64: padding at end of block bitmap is not set [ 649.689494][T27251] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 649.717541][T27251] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 649.738714][T27243] loop3: lost filesystem error report for type 5 error -117 [ 649.738903][T27243] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 649.746268][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 649.746283][ C0] EXT4-fs (loop3): initial error at time 1811482023: ext4_validate_block_bitmap:441 [ 649.746303][ C0] EXT4-fs (loop3): last error at time 1811482023: ext4_validate_block_bitmap:441 [ 649.780154][T27243] loop3: lost filesystem error report for type 5 error -117 [ 649.780357][T27243] EXT4-fs (loop3): 1 orphan inode deleted [ 649.781650][T27251] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.6498: Corrupt directory, running e2fsck is recommended [ 649.821511][T27238] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 649.844641][ T1990] vhci_hcd vhci_hcd.3: stop threads [ 649.849895][ T1990] vhci_hcd vhci_hcd.3: release socket [ 649.855256][T27251] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 649.855330][T27251] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.6498: corrupted in-inode xattr: e_name out of bounds [ 649.855388][ T1990] ================================================================== [ 649.855369][T27251] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 649.855434][ T1990] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 649.855485][ T1990] [ 649.855491][ T1990] write to 0xffffffff86c84590 of 8 bytes by task 27251 on cpu 0: [ 649.855511][ T1990] data_alloc+0x310/0x390 [ 649.855549][ T1990] prb_reserve+0x8d6/0xad0 [ 649.855587][ T1990] vprintk_store+0x54a/0x910 [ 649.855588][T27251] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6498: couldn't read orphan inode 15 (err -117) [ 649.855608][ T1990] vprintk_emit+0x1a4/0x600 [ 649.855634][T27251] loop2: lost filesystem error report for type 5 error -117 [ 649.855631][ T1990] vprintk_default+0x26/0x30 [ 649.855656][ T1990] vprintk+0x1d/0x30 [ 649.855689][ T1990] _printk+0x79/0xa0 [ 649.855710][ T1990] __ext4_msg+0x1aa/0x1c0 [ 649.855732][ T1990] ext4_orphan_cleanup+0x4dc/0x9f0 [ 649.855756][ T1990] ext4_fill_super+0x3408/0x37c0 [ 649.855774][ T1990] get_tree_bdev_flags+0x291/0x300 [ 649.855804][ T1990] get_tree_bdev+0x1f/0x30 [ 649.855845][ T1990] ext4_get_tree+0x1c/0x30 [ 649.855864][ T1990] vfs_get_tree+0x57/0x1d0 [ 649.855896][ T1990] do_new_mount+0x288/0x8d0 [ 649.855934][ T1990] path_mount+0x4d0/0xbc0 [ 649.855971][ T1990] __se_sys_mount+0x28c/0x2e0 [ 649.856003][ T1990] __x64_sys_mount+0x67/0x80 [ 649.856036][ T1990] x64_sys_call+0x2d61/0x3020 [ 649.856063][ T1990] do_syscall_64+0x12c/0x3b0 [ 649.856091][ T1990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.856111][ T1990] [ 649.856118][ T1990] read to 0xffffffff86c84590 of 16 bytes by task 1990 on cpu 1: [ 649.856140][ T1990] _prb_read_valid+0x1b6/0x950 [ 649.856178][ T1990] prb_read_valid+0x3c/0x60 [ 649.856211][ T1990] printk_get_next_message+0xea/0x560 [ 649.856240][ T1990] console_flush_all+0x2cd/0x6c0 [ 649.856268][ T1990] console_unlock+0xa1/0x280 [ 649.856290][ T1990] vprintk_emit+0x3e4/0x600 [ 649.856312][ T1990] dev_vprintk_emit+0x242/0x2a0 [ 649.856345][ T1990] dev_printk_emit+0x84/0xb0 [ 649.856373][ T1990] __dev_printk+0xf3/0x110 [ 649.856397][ T1990] _dev_info+0xa6/0xd0 [ 649.856420][ T1990] vhci_shutdown_connection+0x157/0x210 [ 649.856463][ T1990] event_handler+0x189/0x330 [ 649.856496][ T1990] process_scheduled_works+0x4f0/0x9c0 [ 649.856527][ T1990] worker_thread+0x58a/0x780 [ 649.856560][ T1990] kthread+0x22a/0x280 [ 649.856578][ T1990] ret_from_fork+0x146/0x330 [ 649.856611][ T1990] ret_from_fork_asm+0x1a/0x30 [ 649.856640][ T1990] [ 649.856646][ T1990] Reported by Kernel Concurrency Sanitizer on: [ 649.856662][ T1990] CPU: 1 UID: 0 PID: 1990 Comm: kworker/u8:10 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 649.856699][ T1990] Tainted: [W]=WARN [ 649.856708][ T1990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 649.856727][ T1990] Workqueue: usbip_event event_handler [ 649.856763][ T1990] ================================================================== [ 650.167780][ T1990] vhci_hcd vhci_hcd.3: disconnect device [ 650.313473][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 650.313491][ T28] audit: type=1326 audit(1811482024.347:14539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27250 comm="syz.2.6498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b433ce59 code=0x7ffc0000 [ 650.357126][ T28] audit: type=1326 audit(1811482024.347:14540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27250 comm="syz.2.6498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b433ce59 code=0x7ffc0000 [ 650.383244][ T28] audit: type=1326 audit(1811482024.347:14541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27250 comm="syz.2.6498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b433ce59 code=0x7ffc0000 [ 650.409787][ T28] audit: type=1326 audit(1811482024.347:14542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27250 comm="syz.2.6498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b433ce59 code=0x7ffc0000 [ 650.435773][ T28] audit: type=1326 audit(1811482024.347:14543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27250 comm="syz.2.6498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f60b433ce59 code=0x7ffc0000 [ 650.462063][ T28] audit: type=1326 audit(1811482024.377:14544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27250 comm="syz.2.6498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b433ce59 code=0x7ffc0000 [ 650.487904][ T28] audit: type=1326 audit(1811482024.377:14545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27250 comm="syz.2.6498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b433ce59 code=0x7ffc0000 [ 650.514554][ T28] audit: type=1326 audit(1811482024.377:14546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27250 comm="syz.2.6498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b433ce59 code=0x7ffc0000 [ 650.541210][ T28] audit: type=1326 audit(1811482024.377:14547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27250 comm="syz.2.6498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b433ce59 code=0x7ffc0000 [ 650.567035][T26882] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 650.581830][ T28] audit: type=1326 audit(1811482024.377:14548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27250 comm="syz.2.6498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f60b433ce59 code=0x7ffc0000