last executing test programs: 7m17.313476662s ago: executing program 0 (id=534): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) recvmmsg(r1, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000002540)=""/212, 0xd4}, {&(0x7f0000002640)=""/80, 0x50}, {&(0x7f00000026c0)=""/145, 0x91}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/226, 0xe2}, {&(0x7f0000004780)=""/125, 0x7d}], 0x6}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x40000040, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10161, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB, @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB], 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe2(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x100000000001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r0) 7m17.057810905s ago: executing program 0 (id=539): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd29, 0x10080, {0xa, 0x0, 0x10, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f00000000c0)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x3, 0x519, &(0x7f0000000f80)="$eJzs3cFvHFcZAPBvxl7Xbh3sAodSidZCoLSC7No1bS0ObZEQnAqUcjfGXluW117Lu25jq0KOOCMkhADBBU5ckPgDkFD+BIQUCe4RQqAIknDgENhqdmcde7PrOMquN7F/P+ll3rzMzPe9TfZ53854JoALayYi3omIkYh4NSKm8vY0L3HQKtl2d25/tJyVJBqN9/+VRJK3tY+V5Mvn8t3GI+I734j4fpK0Go6o7e1vLFUq5Z18vVTf3C7V9vavrG8urZXXylvz83NvLLy58PrCbN/6+tbX/v6zH//262/98Usf3lz85ys/yPKdzP/uaD/6qfWaFJqvRdtoROwMItgQjOT/Twqn2TgZfD4AAJws++z2yYj4XETc/eWwswEAAAAGofH2ZNxLIhoP+ua38k0AAACAp1vavAY2SYv5tQCTkabFYusa3k/H21Gp1upfXK3ubq20rpWdjkK6ul4pz+bXCk9HIcnW55r1++uvdazPR8TzEfHTqYnmenG5WlkZ9pcfAAAAcEFk8/zJtFXPFv+ZStPi2LCzAgAAAPpuetgJAAAAAANn/g8AAADn34Pz/5nWIhk9+2QAAACAfvv2u+9mpdF+/vXKB3u7G9UPrqyUaxvFzd3l4nJ1Z7u4Vq2uNe/Zt3l/z2e6Hq9SrW5/ObZ2r5bq5Vq9VNvbX9ys7m7VF5vP9V4sn+o50QAAAEBfPf/y9b8mEXHwlYlmybRv/2euDudb+mibJ4PKAzh7I6duBM4bF/jCxeX9DzxsYj9+RnkAAACDc/kzh+f/J+LI+f9LN53/h/PuEc//A+eIU/1wcXWc//v1qXa61xhMMsCZMscHHvY9QM/z/3/qfy4AAMBgTDZLkhbzOcBkpGmxGHGp+ViAQrK6XinPRsQnIuIvU4VnsvW5YScNAAAAAAAAAAAAAAAAAAAAAAAAAE+ZRiOJBgAAAHCuRaT/SCIiifGIqc9Pdn4/MJb8d6q5jIgPf/X+z68u1es7c1n7vw/b67/I218bxjcYAAAAQKf2PL09jwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfrpz+6PldjnS/IVBx7311YiY7hZ/NMaby/EoRMSzd5MYPbJfEhEjfYh/cC0iXugWP8nSiuk8i874aURMDDn+c32IDxfZ9Wz8eafb+y+Nmeay+/tvNC+P69ZMr/EvPRz/RnqMf5cecuyxfPnijd+Xesa/FvHiaPfxpx1/7DHH3+99d3+/o+m99tjZ+E3E5a4/f5JjsUr1ze1SbW//yvrm0lp5rbw1Pz/3xsKbC68vzJZW1yvl/M+u8X/y2T/8/6T+P9sj/nTe/6TZ//Fjnc/aGo3ux3y5Y/1/N67e/lS3DZOIWz/K613+/V84Fv/46z+S/3BO89fncrt+0Kof9dLv/vxS7/6PxEqP/o+fED9re6XXQTu8+t4P/9aqFU65BwAwSLW9/Y2lSqW887RXss48AWn0sTLzZKRx3ivtWdSTks/gKskjvd+HOy4BAAD9d/9D/7AzAQAAAAAAAAAAAAAAAAAAgIur/fv/7Xs5D+LeY0fjHd5FOUnOvK8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf5OAAA//9O3cdG") r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x400000000008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x5}, 0x0, 0x0, 0x800004, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfffffffffffffffd, r1, 0x1) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0xb00, 0x0, 0x101, 0x300}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) io_setup(0x239f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x20, 0x0, 0x3, 0x6, {{0x26, 0x4, 0x3, 0xb, 0x98, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}, {[@timestamp_addr={0x44, 0xc, 0xb4, 0x1, 0x2, [{@remote, 0xd8d}]}, @end, @rr={0x7, 0x7, 0x93, [@private=0xa010101]}, @noop, @generic={0x83, 0xf, "806bedd3d503168b7851c488ac"}, @lsrr={0x83, 0xf, 0x78, [@rand_addr=0x64010101, @remote, @remote]}, @ssrr={0x89, 0xf, 0x6c, [@loopback, @broadcast, @private=0xa010101]}, @timestamp_addr={0x44, 0x1c, 0xc3, 0x1, 0xb, [{@rand_addr=0x64010101, 0xb}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x7}, {@private=0xa010102, 0x80}]}, @rr={0x7, 0x23, 0x84, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000002d40)={'batadv_slave_1\x00'}) 7m16.053947896s ago: executing program 0 (id=544): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x49, &(0x7f0000000440)=""/118, &(0x7f0000000500)=0x76) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_open_dev$sg(&(0x7f0000001040), 0x9a08, 0x10000) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000001080)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x20040000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000200)={0x80, 0x2b, 0x62, 0xe17, 0x9, 0xda}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000700000001000000020000060400000004008fc0a4b816be188300fb35f5ffff005f61612e30"], &(0x7f0000000900)=""/18, 0x3b, 0x12, 0x1, 0xfffffff0}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000001ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB='<4\x00\x00', @ANYRES32], 0x1b0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r6, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x0, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) 7m15.624338061s ago: executing program 0 (id=548): getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000200)) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000140), 0x3, 0x57d, &(0x7f0000001340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x4, 0x8000, 0x10002}) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x8007, &(0x7f0000000280)=ANY=[], 0x3, 0x59b, &(0x7f0000000600)="$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") pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x111) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_clone(0xc008000, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r4, r4, 0x13) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=r4) listen(r3, 0x0) shutdown(r3, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80800) unshare(0x22020400) poll(0x0, 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r5) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="f3f428bd7000fedbdf251a00000010002280644be50f49eb1f1fa64a4c4904000080040000800400008006002100"], 0x34}, 0x1, 0x0, 0x0, 0x841}, 0x20000090) 7m14.867174s ago: executing program 0 (id=554): socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, &(0x7f00000007c0)=""/215, 0xd7, 0x9f) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f00000000c0)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x3, 0x519, &(0x7f0000000f80)="$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") r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x400000000008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x5}, 0x0, 0x0, 0x800004, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfffffffffffffffd, r0, 0x1) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0xb00, 0x0, 0x101, 0x300}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) io_setup(0x239f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x20, 0x0, 0x3, 0x6, {{0x26, 0x4, 0x3, 0xb, 0x98, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}, {[@timestamp_addr={0x44, 0xc, 0xb4, 0x1, 0x2, [{@remote, 0xd8d}]}, @end, @rr={0x7, 0x7, 0x93, [@private=0xa010101]}, @noop, @generic={0x83, 0xf, "806bedd3d503168b7851c488ac"}, @lsrr={0x83, 0xf, 0x78, [@rand_addr=0x64010101, @remote, @remote]}, @ssrr={0x89, 0xf, 0x6c, [@loopback, @broadcast, @private=0xa010101]}, @timestamp_addr={0x44, 0x1c, 0xc3, 0x1, 0xb, [{@rand_addr=0x64010101, 0xb}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x7}, {@private=0xa010102, 0x80}]}, @rr={0x7, 0x23, 0x84, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000002d40)={'batadv_slave_1\x00'}) 7m14.321491206s ago: executing program 0 (id=560): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, 0x0, 0x4044) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r4, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x5, 0x1100, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000240)={0x80040, 0x40}, 0x18) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1, 0x1}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="080000001f0137f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b374d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc", 0xd8}], 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000001900)=[{{&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa010100]}]}}}], 0x18}}], 0x2, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x1, 0x400, 0xfffc}, 0x20) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x0) ptrace(0x10, r0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000280)={0x3, 0x0, &(0x7f00000001c0)=[r4, r7, r4, r5, r2, r2, r6]}, 0x7) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x50, r7, 0x9fc5e000) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'}) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB], 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="09042dbd7000ffdbdf250800000005000500f600000014000680060005004e2300000800060018000000"], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x25, 0x1, @void}, 0x10) 7m14.321123106s ago: executing program 32 (id=560): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, 0x0, 0x4044) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r4, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x5, 0x1100, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000240)={0x80040, 0x40}, 0x18) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1, 0x1}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="080000001f0137f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b374d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc", 0xd8}], 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000001900)=[{{&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa010100]}]}}}], 0x18}}], 0x2, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x1, 0x400, 0xfffc}, 0x20) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x0) ptrace(0x10, r0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000280)={0x3, 0x0, &(0x7f00000001c0)=[r4, r7, r4, r5, r2, r2, r6]}, 0x7) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x50, r7, 0x9fc5e000) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'}) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB], 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="09042dbd7000ffdbdf250800000005000500f600000014000680060005004e2300000800060018000000"], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x25, 0x1, @void}, 0x10) 3m42.107358791s ago: executing program 5 (id=2427): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb904021d0800fe007c05e8fe55a1bc001200020014260c600e12100015007f370401a8001000200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) accept$packet(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000400)={0x0, 0xd386, 0x0, 0x3, 0x7f}, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0xc, 0x800, 0xf535, 0x7}, {0x0, 0x805, 0x1, 0x7, 0x60d8, 0x1}]}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000001300)=""/115) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f00000001c0)="0f", 0x1, 0x0, 0x40, 0x2, 0xffffffff, 0x0, 0x0}) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x1fc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), r6) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000006002400000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4004800) r8 = dup2(r4, r5) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000480)=r8) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000004c0)={0x2, 0x1}) write$nbd(r8, &(0x7f00000000c0)={0x67446698, 0x0, 0x3, 0x4, 0x1, "faaed1003468a635292f6674f632e0f451b5bf3db0b46dbab1c0a5018218a8ab1bbf0ede36f218bd24fedd4dbd29fd8262f5b1e5c6d43e7bcccd7da93d49d00cc825515aa600af3b3f7a636695d1b1c8ae46676ddbfef1a15262c31649cac9d70095ef30f94884e70fabf7db6294eb6c247ff6d1ddcaa957433a4c9a87205f3bb58bfe4a7579ba5e9a84287cceb7380dfe"}, 0xa1) r9 = add_key(&(0x7f0000000500)='id_legacy\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="a41c00b725e166c45449c17e9c95d4ac292e171a8a1f7e75fd1252b0e70ece1dc46857b46e7620e30fdbf62e34f2b5599e6ea18d4b2796c4b0cd89245647bd5a82133a43fc3313c7d1ca98941c065053f4627016f2937b5b6f0ee5ab09ebd5292b767fa983d6f06683c813d24ee161a99e7a527f6ee79927bf4aee454481612f51c226eae2194139c1a9a2371e5b1af1f92494388f83e4778a21343e34dd6fad59d68f04393e4cf17775f0f94fc63d60f395f7605f9ccfbc8f1f06b6d6773f8fb2d76f9f", 0xc4, 0x0) keyctl$update(0x2, r9, &(0x7f0000000680)="a3d21d491564443a99d475c0a79105c3529bfd61dc4467858b8f0c3995910baebb5595db4e977c68e3a4f86e47754e72289a2eedd7f6f5d433c2bae9b17743b400beeda1e7c6d0d84126e9352ea31c8ca58af4d76e5ec56b18fc1d718d65720c18923e23b54ff39f9db2c613042dfa127a8a1c94ea7636", 0x77) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x2, 0x1, 0x0, r8}]}, &(0x7f0000000040)='GPL\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x2e, '\x00', r10, @fallback=0x1f, r4, 0x8, &(0x7f0000000300)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x0, 0x1, 0x40c0}, 0x10, 0xffffffffffffffff, r4, 0x3, 0x0, &(0x7f0000000380)=[{0x5, 0x3, 0x7, 0x6}, {0x5, 0x4, 0x0, 0x9}, {0x2, 0x3, 0x10, 0x9}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) 3m41.140010442s ago: executing program 5 (id=2436): bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000280)={0x6, 0x5d9a}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x82, 0x0, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000000400)=[{&(0x7f00000017c0)=""/4096, 0x1030}], 0x1, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000180)=""/154, 0x9a}], 0x2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000000)) socket$inet(0x2, 0x3, 0x3) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xffffff1f, 0xfffffff8, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20044, 0x5c182}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008880}, 0x4008040) 3m41.025516983s ago: executing program 5 (id=2437): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) shutdown(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffff2834) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000003c0)={{r0, &(0x7f00000000c0)='&,-\x00', 0x200240, &(0x7f0000000100)={@align=0xf, {0x111, 0x280, 0xfffff001, 0x7fffffffffffffff}}, 0x7, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000200)=0x7}, 0x2, &(0x7f0000000380)=[{0x3, 0x2fa, &(0x7f0000000240)='\x00', &(0x7f0000000280)="37853f269297d0f99e4342c2d71f955771a8185213ebae52314c7b179939ece40c516fa967ba806ef3628da9db763f1852846b22b565", 0x36, 0x8}, {0x2, 0x9, &(0x7f00000002c0)='!\x00', &(0x7f0000000300)="a73b6422428ccbbf078028719c18a6c7d16e0b173e52f4da64a6ca4350d3557384c186dfc63eb86741e28a03eb33cd5a26b051eeba216f41b6da2d13da1bddfd74b5", 0x42}]}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000440)=@req={0x6, 0x9, 0x3, 0x3ff}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/84, 0x54}], 0x1}, 0x66e}], 0x1, 0x21, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000740)=0x17, 0x4) 3m41.007933713s ago: executing program 5 (id=2438): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x808d0, &(0x7f0000000080)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c00a99176bffea999ec4947785a4b3392b470a878b010acc5fde3f7c39533b111d92aa1e3cd9504b4aec083a038cd1b944d314716e6b8463de9dc9743fbe9e0ef9396a932024b904283205650ea735ae7adac50b5efe5244d737dc9515a51775b2fafbc85c9c1c8f62872a466192aae714a90990e0b07aa2b92e463ad98"], 0x1, 0x25f, &(0x7f0000000840)="$eJzs3cFqE0EYB/Av2zSJvdizeFjw4qmobxAkghgQInvQk4HqpRVhe1k95TF8Bh/Jx8ipt0i7wbSpllqSTpP9/SDsx/4Z8s1lJ4GZ5OPjL0eHX08+z379iF6WRztiEqcR+5HFTtRa82t2XnfiokkAAJtmNBr3U/fACrWu3irL/ng3IrpXkuLn3TQFAAAAAAAAAADAql3a/9+z/x8AmsD+/+1Xlv3x3vzz22X2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpnM5mD2fXvFL3BwCs3tn6n1n/AaBRfP8HgOa52fqfpW4TAFihd+8/vOlnMRjleS9iOqmKqqivdf7q9XDwLD/XWYyaVlWxO6+Hg+d1ni/ne/PxL/6ad+Lpkzo/y16+HS7l3Thc9+QBAAAAAAAAAAAAAAAAAADgnjjI/9hf3J1WVbFT5wf/yuvqwu8DLJ3fb8ej9p1NAwAAAAAAAAAAAAAAAAAAADbaybfvR+Pj40/lFhadiLgHbWxg8SBuMaoXa26sG7Hut2hW0Wpf8wRI/WQCAAAAAAAAAAAAAAAAAIDmWRz6Td0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKSz+P//mxb/Pyr1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBm+B0AAP//Ai+I5w==") bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x600002, 0x0) fcntl$setflags(r0, 0x2, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000140)={[{@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@abort}, {@jqfmt_vfsold}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[], 0x20) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000100)={0x0, 0x2000}) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r2, 0x89f3, &(0x7f00000000c0)={0x0, 0x770000, 0x8, 0x0, 0x19, "bb5dee0403081c012083d08600"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) tkill(r4, 0x7) 3m40.788746396s ago: executing program 5 (id=2445): r0 = syz_mount_image$msdos(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', 0x808, &(0x7f0000000800)=ANY=[], 0x1, 0x242, &(0x7f0000000300)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x20010, r0, 0xc0f41000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x4ff5, r2}, 0x38) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 3m36.614366464s ago: executing program 5 (id=2460): open$dir(&(0x7f0000000040)='./file0\x00', 0x400, 0x146) syz_open_procfs(0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x95, 0xfffffffffffffffa, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x71ac92c2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) (async, rerun: 32) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) timer_create(0x0, 0x0, 0x0) (async) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) ioprio_set$pid(0x0, r3, 0x4) (async, rerun: 32) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd28, 0x25dfdbff, {0x2, 0x14, 0x14, 0x1, 0xbe, 0x0, 0x0, 0x0, 0x18}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) (async, rerun: 32) r5 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) (async, rerun: 32) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) (rerun: 32) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, &(0x7f0000000100), 0x0}, 0x20) timer_settime(0x0, 0x1, 0x0, 0x0) (async) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x11, 0x4, @thr={&(0x7f0000000080)="4a2505a8aa21588e54849279e031d8b0f09e4fa1b29d9353414cdba82433f2a8fb1d01ed064a4706f44b3a1a16f6fe2513199a78635c69cca6336d6552e384b29f0a384ee9bf6e22", &(0x7f0000000100)="733326edac36348abf9a7cf8c5294e7a9380a8b03a6e7dfac4273a963b669a30e9d88e58b92bf241ac2289ba937c720d6f1c4eb8c3ee77c6e71720b7bad635bbdbf0e025c406dc7514ef8c4ad37f2f69ccc12dec0a5bf87972baecd66c4f71da5984121a9e742a092ed63870c3446dbec0f828359675eadbde268a590cefd6224b41ae0aeb3d8172d90ecd03cf265014b354c2311fe22d31c8cccdba235330df5637722bb8c640e663beda49806519c6e07a09d9d09105b2f7e29a5ecd9481"}}, &(0x7f0000000200)) (async, rerun: 64) dup3(r2, r2, 0x0) (async, rerun: 64) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000001080)={[{@auto_da_alloc}]}, 0x3, 0x460, &(0x7f00000015c0)="$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") (async) r7 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x4000000080000001, 0x0, 0x6, 0x0, 0xfffffffffffffffa, 0x100000001, 0x0, 0x7a8b, 0x0, 0x1, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x8}) (async) finit_module(r7, 0x0, 0x0) 3m36.457210696s ago: executing program 33 (id=2460): open$dir(&(0x7f0000000040)='./file0\x00', 0x400, 0x146) syz_open_procfs(0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x95, 0xfffffffffffffffa, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x71ac92c2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) (async, rerun: 32) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) timer_create(0x0, 0x0, 0x0) (async) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) ioprio_set$pid(0x0, r3, 0x4) (async, rerun: 32) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd28, 0x25dfdbff, {0x2, 0x14, 0x14, 0x1, 0xbe, 0x0, 0x0, 0x0, 0x18}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) (async, rerun: 32) r5 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) (async, rerun: 32) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) (rerun: 32) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, &(0x7f0000000100), 0x0}, 0x20) timer_settime(0x0, 0x1, 0x0, 0x0) (async) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x11, 0x4, @thr={&(0x7f0000000080)="4a2505a8aa21588e54849279e031d8b0f09e4fa1b29d9353414cdba82433f2a8fb1d01ed064a4706f44b3a1a16f6fe2513199a78635c69cca6336d6552e384b29f0a384ee9bf6e22", &(0x7f0000000100)="733326edac36348abf9a7cf8c5294e7a9380a8b03a6e7dfac4273a963b669a30e9d88e58b92bf241ac2289ba937c720d6f1c4eb8c3ee77c6e71720b7bad635bbdbf0e025c406dc7514ef8c4ad37f2f69ccc12dec0a5bf87972baecd66c4f71da5984121a9e742a092ed63870c3446dbec0f828359675eadbde268a590cefd6224b41ae0aeb3d8172d90ecd03cf265014b354c2311fe22d31c8cccdba235330df5637722bb8c640e663beda49806519c6e07a09d9d09105b2f7e29a5ecd9481"}}, &(0x7f0000000200)) (async, rerun: 64) dup3(r2, r2, 0x0) (async, rerun: 64) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000001080)={[{@auto_da_alloc}]}, 0x3, 0x460, &(0x7f00000015c0)="$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") (async) r7 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x4000000080000001, 0x0, 0x6, 0x0, 0xfffffffffffffffa, 0x100000001, 0x0, 0x7a8b, 0x0, 0x1, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x8}) (async) finit_module(r7, 0x0, 0x0) 2m40.116617315s ago: executing program 1 (id=2906): unshare(0x80) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x8) 2m40.073209826s ago: executing program 1 (id=2907): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x5, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1, 0xfffffffd, 0x2b7) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000380)=""/4086, 0xff6}], 0x1, 0x101, 0x2) fsopen(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000180)={0x8, 0xa}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000000900020073797a31000000000900010073797a3000000000080005400000002108000c"], 0x8c}}, 0x0) syz_clone3(0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000002000)=""/4082) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x8) 2m39.789499818s ago: executing program 1 (id=2912): semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m39.415258063s ago: executing program 1 (id=2916): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x8) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xb, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) symlink(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dde60111"], 0xfdef) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x188, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1b}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0xb05d}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd}, {0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x6f6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x58}, {0x5, 0x12, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x24048090}, 0x4010010) 2m38.83546151s ago: executing program 1 (id=2927): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x141202, 0x0, 0x8}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400), 0xc) 2m36.913422992s ago: executing program 1 (id=2959): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x5, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1, 0xfffffffd, 0x2b7) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000380)=""/4086, 0xff6}], 0x1, 0x101, 0x2) fsopen(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000180)={0x8, 0xa}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000000900020073797a31000000000900010073797a3000000000080005400000002108000c"], 0x8c}}, 0x0) syz_clone3(0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000002000)=""/4082) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x8) 2m36.887316282s ago: executing program 34 (id=2959): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x5, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1, 0xfffffffd, 0x2b7) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000380)=""/4086, 0xff6}], 0x1, 0x101, 0x2) fsopen(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000180)={0x8, 0xa}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000000900020073797a31000000000900010073797a3000000000080005400000002108000c"], 0x8c}}, 0x0) syz_clone3(0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000002000)=""/4082) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x8) 1.81347251s ago: executing program 6 (id=4507): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x288, 0x20a, 0x278, 0x288, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xffffffff, 0xffffffff, 0xff], [0xff000000, 0x0, 0xffffffff, 0xff000000], 'veth0_to_bridge\x00', 'wlan1\x00', {0xff}, {0xff}, 0x5e, 0x5, 0x0, 0x29}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10010, r1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0xa131, 0xffffffffffffffff, 0x0) 1.81324721s ago: executing program 4 (id=4508): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}, 0x710000}], 0x1, 0x60, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) 1.80926219s ago: executing program 7 (id=4509): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd29, 0x10080, {0xa, 0x0, 0x10, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x800) pread64(0xffffffffffffffff, &(0x7f00000007c0)=""/215, 0xd7, 0x9f) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f00000000c0)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x3, 0x519, &(0x7f0000000f80)="$eJzs3cFvHFcZAPBvxl7Xbh3sAodSidZCoLSC7No1bS0ObZEQnAqUcjfGXluW117Lu25jq0KOOCMkhADBBU5ckPgDkFD+BIQUCe4RQqAIknDgENhqdmcde7PrOMquN7F/P+ll3rzMzPe9TfZ53854JoALayYi3omIkYh4NSKm8vY0L3HQKtl2d25/tJyVJBqN9/+VRJK3tY+V5Mvn8t3GI+I734j4fpK0Go6o7e1vLFUq5Z18vVTf3C7V9vavrG8urZXXylvz83NvLLy58PrCbN/6+tbX/v6zH//262/98Usf3lz85ys/yPKdzP/uaD/6qfWaFJqvRdtoROwMItgQjOT/Twqn2TgZfD4AAJws++z2yYj4XETc/eWwswEAAAAGofH2ZNxLIhoP+ua38k0AAACAp1vavAY2SYv5tQCTkabFYusa3k/H21Gp1upfXK3ubq20rpWdjkK6ul4pz+bXCk9HIcnW55r1++uvdazPR8TzEfHTqYnmenG5WlkZ9pcfAAAAcEFk8/zJtFXPFv+ZStPi2LCzAgAAAPpuetgJAAAAAANn/g8AAADn34Pz/5nWIhk9+2QAAACAfvv2u+9mpdF+/vXKB3u7G9UPrqyUaxvFzd3l4nJ1Z7u4Vq2uNe/Zt3l/z2e6Hq9SrW5/ObZ2r5bq5Vq9VNvbX9ys7m7VF5vP9V4sn+o50QAAAEBfPf/y9b8mEXHwlYlmybRv/2euDudb+mibJ4PKAzh7I6duBM4bF/jCxeX9DzxsYj9+RnkAAACDc/kzh+f/J+LI+f9LN53/h/PuEc//A+eIU/1wcXWc//v1qXa61xhMMsCZMscHHvY9QM/z/3/qfy4AAMBgTDZLkhbzOcBkpGmxGHGp+ViAQrK6XinPRsQnIuIvU4VnsvW5YScNAAAAAAAAAAAAAAAAAAAAAAAAAE+ZRiOJBgAAAHCuRaT/SCIiifGIqc9Pdn4/MJb8d6q5jIgPf/X+z68u1es7c1n7vw/b67/I218bxjcYAAAAQKf2PL09jwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfrpz+6PldjnS/IVBx7311YiY7hZ/NMaby/EoRMSzd5MYPbJfEhEjfYh/cC0iXugWP8nSiuk8i874aURMDDn+c32IDxfZ9Wz8eafb+y+Nmeay+/tvNC+P69ZMr/EvPRz/RnqMf5cecuyxfPnijd+Xesa/FvHiaPfxpx1/7DHH3+99d3+/o+m99tjZ+E3E5a4/f5JjsUr1ze1SbW//yvrm0lp5rbw1Pz/3xsKbC68vzJZW1yvl/M+u8X/y2T/8/6T+P9sj/nTe/6TZ//Fjnc/aGo3ux3y5Y/1/N67e/lS3DZOIWz/K613+/V84Fv/46z+S/3BO89fncrt+0Kof9dLv/vxS7/6PxEqP/o+fED9re6XXQTu8+t4P/9aqFU65BwAwSLW9/Y2lSqW887RXss48AWn0sTLzZKRx3ivtWdSTks/gKskjvd+HOy4BAAD9d/9D/7AzAQAAAAAAAAAAAAAAAAAAgIur/fv/7Xs5D+LeY0fjHd5FOUnOvK8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf5OAAA//9O3cdG") r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x400000000008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x5}, 0x0, 0x0, 0x800004, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfffffffffffffffd, r1, 0x1) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0xb00, 0x0, 0x101, 0x300}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) io_setup(0x239f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x20, 0x0, 0x3, 0x6, {{0x25, 0x4, 0x3, 0xb, 0x94, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}, {[@timestamp_addr={0x44, 0xc, 0xb4, 0x1, 0x2, [{@remote, 0xd8d}]}, @end, @rr={0x7, 0x3, 0x93}, @noop, @generic={0x83, 0xf, "806bedd3d503168b7851c488ac"}, @lsrr={0x83, 0xf, 0x78, [@rand_addr=0x64010101, @remote, @remote]}, @ssrr={0x89, 0xf, 0x6c, [@loopback, @broadcast, @private=0xa010101]}, @timestamp_addr={0x44, 0x1c, 0xc3, 0x1, 0xb, [{@rand_addr=0x64010101, 0xb}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x7}, {@private=0xa010102, 0x80}]}, @rr={0x7, 0x23, 0x84, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000002d40)={'batadv_slave_1\x00'}) 1.692264791s ago: executing program 6 (id=4511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000003000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c000080240001"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 1.691225691s ago: executing program 4 (id=4512): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x9c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x6, @private1, 0x9}, @in6={0xa, 0x4e24, 0x7fff, @private1, 0x6}, @in6={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, @in6={0xa, 0x4e23, 0xe, @remote, 0x8268}, @in6={0xa, 0x4e21, 0xfffffffb, @remote, 0x9}, @in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x1a20, 0x793}, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010100, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="1e1106f2008e", {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x8, 0xd, 0x8, 0x0, 0x6, 'batadv_slave_0\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1002, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1.661252351s ago: executing program 4 (id=4513): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000300)) keyctl$search(0xa, r0, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x2000012d, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @empty, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0xb2}, @ssrr={0x89, 0xb, 0x5, [@dev={0xac, 0x14, 0x14, 0x12}, @loopback]}]}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.644395712s ago: executing program 4 (id=4514): r0 = syz_open_dev$evdev(&(0x7f00000021c0), 0xc1, 0x101000) r1 = syz_open_dev$evdev(0x0, 0x2, 0x2002) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4086, 0xff6}], 0x1) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000000)=0x10) 1.576749952s ago: executing program 3 (id=4515): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) 1.576198962s ago: executing program 2 (id=4516): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x200, 0x4) syz_open_dev$evdev(&(0x7f0000000240), 0x8, 0x472000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800010301000000000000000a80aac3a37033ab91fce57b900000ff03000600000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x18}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r4, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000040)=0x1, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x1, 0x0, 0x1, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x101, 0x1, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x70}]}]}, 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @loopback, 0xcd89}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000380)=';', 0x1}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x2, @remote, 0x8}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4004851) sendmsg$inet6(r0, &(0x7f0000000780)={&(0x7f0000000000)={0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x45}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="ce24d14dda5ab617355a74503525821d7c6c2f332cbd8af49be4036b470ef2be76cc53b318bb89f46d31b77bc14e6bcd4fee5aad566c8f3b65b2fd3106fa938976b80e95eb526c", 0x47}, {0x0}], 0x2}, 0x4) 1.516120713s ago: executing program 3 (id=4517): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000056c0)=[{0x0}], 0x1}}], 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f140000001100"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) close(0x4) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x0, &(0x7f0000000280)=0x8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x0, 0x8, 0x8001, 0x5, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000180)=[{0x20, 0x3c, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff010}, {0xa, 0xfd, 0x7, 0x3}, {0x2fc6, 0x74, 0x42, 0xfffffff8}]}, 0x10) pipe(&(0x7f0000000140)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @local, 0xbff}, @ib={0x1b, 0x38e, 0x0, {}, 0x0, 0x3ffffffc, 0x8}}}, 0x118) 1.516060623s ago: executing program 6 (id=4518): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x8) (fail_nth: 1) 1.260049046s ago: executing program 6 (id=4519): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x5, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1, 0xfffffffd, 0x2b7) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000380)=""/4086, 0xff6}], 0x1, 0x101, 0x2) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8c}}, 0x0) syz_clone3(0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000002000)=""/4082) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0x41, "5c83276f6c02000000000000000000010000000000335b021f55001d00a2"}}) 1.253570676s ago: executing program 3 (id=4520): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x8) 1.233202696s ago: executing program 3 (id=4521): r0 = socket(0x8, 0x80000, 0x2) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0x7, 0x4) (async) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x6a, 0x82802) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x57, 0x4, 0x1, {0x8, 0x6}, {0x9, 0x8001}, @const={0x1, {0xa9, 0x0, 0x401, 0x401}}}) (async) r2 = signalfd(r0, &(0x7f00000000c0)={[0x6]}, 0x8) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x50) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000240)=[0x80000001, 0x1]) (async) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000001280)={0x5, 0x1000, &(0x7f0000000280)="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"}) (async) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000022c0)={0x1f, 0x1000, &(0x7f00000012c0)="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"}) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000002300)={0x3, 0x8, 0x5, 0x7ff, 0x7, "00459d7ed2543942daffaabad2917829885517"}) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000002340)='macsec0\x00', 0x10) (async) ioctl$TCSETS(r2, 0x5402, &(0x7f0000002380)={0x3, 0xfffffff8, 0x9, 0x6, 0x18, "bf89407419f7c90e911c101828edccc45b384a"}) (async) connect(r0, &(0x7f00000023c0)=@isdn={0x22, 0xc2, 0x81, 0x0, 0x7}, 0x80) (async) getpeername$packet(r0, &(0x7f0000002440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002480)=0x14) bind$can_raw(r2, &(0x7f00000024c0)={0x1d, r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000002540), 0x0, 0x0) (async) stat(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)) (async) fstat(r6, &(0x7f0000002640)) (async) sendto$inet(r2, &(0x7f00000026c0)="588c9af7d81e9894b995bbba79974c3f7a37976d4ca514173254c8462212d9ec324a6a5015878cc96b6bd07d68158103112d75d350d414a957bddbbe7ff41305f58d24e8e5b9c42d1b091ae40d862a073c0a9888df3b549d02d030b994935fb2c72fe5a2dd756fc9ed9ea030727b6dff4e7b4f09432021ab7b36bd51ea95", 0x7e, 0x4010, 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000002740)=0x9) (async) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000002780)={{r5}, "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"}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000037c0), r2) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000003880)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x40, r7, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x71}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000038c0)=""/149) (async) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000003a40)={&(0x7f0000003980), 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x14, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000003b40)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x20, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40488d1}, 0x20004001) (async) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x40, r7, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x46}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6ca1edebe49867cb}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20004800) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000003d80)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x38, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x69}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x51}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000090) 1.181035397s ago: executing program 7 (id=4522): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x8) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x81, 0xff, 0x4, 0x0, 0xf, 0x30, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3, 0xffffffffffff80d0}, 0x18001, 0xfffffffffffffff8, 0x3, 0x4, 0x1, 0x0, 0x7f, 0x0, 0xbf, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0xb9, 0x8c, 0x7e, 0x7, 0xf, 0x69, 0x8, 0x8, 0x0, 0x89, 0xd, 0x9, 0x0, 0x2}, 0xe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x1, 0x80, 0x10, 0x8, 0xf4, 0x1, 0x0, 0x7fffffffffffffff, 0x88c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x12885, 0x9, 0x3, 0x3, 0x3, 0xfffffff9, 0xc, 0x0, 0x80000001, 0x0, 0x200}) 1.125561847s ago: executing program 3 (id=4523): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000002000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c0016"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x10) 1.120740028s ago: executing program 7 (id=4524): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000001, 0x401, &(0x7f0000000640)) ioperm(0x4, 0x2, 0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}], [], 0x6b}}) 1.115493438s ago: executing program 6 (id=4525): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0xe0}}, 0x8040) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae93700000000fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa2a, &(0x7f0000000240)="$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") r3 = syz_open_dev$loop(&(0x7f0000000c80), 0x3, 0x541840) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x8000000000000001) r4 = open(&(0x7f0000000e40)='./file1\x00', 0x121000, 0x143) getdents64(r4, &(0x7f0000000fc0)=""/224, 0xe0) syz_emit_ethernet(0x52, &(0x7f00000005c0)={@random="8b840461a6dc", @empty, @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x0, 0x4, 0x20, 0x64, 0x0, 0x6, 0x6, 0x0, @private=0xa010102, @remote, {[@generic={0x44, 0x5, "2103b9"}, @end, @end]}}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0xe, 0x0, 0x0, 0xb, 0x401, 0x2, 0x4e21, 0x4e23, 0x1, 0x2}}}}}}, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2ec) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r6, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) 1.115241647s ago: executing program 3 (id=4526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06f60e45928bb54d2ff8c6a83d7eac9f18440799b44a2f301c773a434d598709d36c4a9a0caa620fababd216100a4176b4ff62f1794afa24825b4ed96413c2876fda64af1611fb528026b53a5ac9bc5a3f428fbc0b59de0b0410fae09a17", @ANYRES32=0x1, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRESDEC=0x0, @ANYRES8=r1, @ANYBLOB="ea3d90bdc5328ef9618613259b6919095d4604c9fce46ee62702c10738724f0e7b89600ab01ce57e7d2bc7ad7c3b0a05445c21d33f1ebffd148bbb1fa39131f08b59f737bb5537c406be14eaef36", @ANYRESOCT=r0, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/201, 0xffffff47) mbind(&(0x7f0000425000/0x3000)=nil, 0x3000, 0x10000000000001, 0x0, 0x8, 0x7) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r4, &(0x7f0000000000), 0x0, 0x800, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000840) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r7 = epoll_create1(0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r7}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x30000004}) 917.37002ms ago: executing program 7 (id=4527): syz_clone(0x2008400, 0x0, 0xe4ff, 0x0, 0x0, 0x0) 826.070141ms ago: executing program 7 (id=4528): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) close_range(r0, r2, 0x2) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, 0x0) 714.151842ms ago: executing program 4 (id=4529): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x3}, 0x108010, 0x200, 0x0, 0x1, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f00005dc000/0x3000)=nil, 0x3000, 0x100000a, 0x100010, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4820749000001000010400000000001000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r6, @ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="0500070002000000", @ANYRESOCT=r2], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) sendfile(r3, r4, 0x0, 0x7ffff000) syz_clone3(&(0x7f0000000900)={0x23800200, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x20027}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r10, &(0x7f0000000380)=[{&(0x7f0000000040)='4', 0xff1a}], 0x1) r11 = socket(0xb, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000500)=0x1, &(0x7f0000000540)=0x4) 713.689172ms ago: executing program 2 (id=4530): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000056c0)=[{0x0}], 0x1}}], 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f140000001100"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) close(0x4) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x0, &(0x7f0000000280)=0x8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x0, 0x8, 0x8001, 0x5, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000180)=[{0x20, 0x3c, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff010}, {0xa, 0xfd, 0x7, 0x3}, {0x2fc6, 0x74, 0x42, 0xfffffff8}]}, 0x10) pipe(&(0x7f0000000140)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @local, 0xbff}, @ib={0x1b, 0x38e, 0x0, {}, 0x0, 0x3ffffffc, 0x8}}}, 0x118) 609.161133ms ago: executing program 2 (id=4531): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_config_ext={0x7, 0x101}, 0x214, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000940)={0x14, r2, 0x5, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01002000000000000000000000000000070000000000000000000002"], 0x0, 0x21}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) 565.416134ms ago: executing program 7 (id=4532): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd29, 0x10080, {0xa, 0x0, 0x10, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x800) pread64(0xffffffffffffffff, &(0x7f00000007c0)=""/215, 0xd7, 0x9f) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f00000000c0)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x3, 0x519, &(0x7f0000000f80)="$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") r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x400000000008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x5}, 0x0, 0x0, 0x800004, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfffffffffffffffd, r1, 0x1) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0xb00, 0x0, 0x101, 0x300}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) io_setup(0x239f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x20, 0x0, 0x3, 0x6, {{0x25, 0x4, 0x3, 0xb, 0x94, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}, {[@timestamp_addr={0x44, 0xc, 0xb4, 0x1, 0x2, [{@remote, 0xd8d}]}, @end, @rr={0x7, 0x3, 0x93}, @noop, @generic={0x83, 0xf, "806bedd3d503168b7851c488ac"}, @lsrr={0x83, 0xf, 0x78, [@rand_addr=0x64010101, @remote, @remote]}, @ssrr={0x89, 0xf, 0x6c, [@loopback, @broadcast, @private=0xa010101]}, @timestamp_addr={0x44, 0x1c, 0xc3, 0x1, 0xb, [{@rand_addr=0x64010101, 0xb}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x7}, {@private=0xa010102, 0x80}]}, @rr={0x7, 0x23, 0x84, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000002d40)={'batadv_slave_1\x00'}) 359.663346ms ago: executing program 4 (id=4533): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f00000001c0)=0x2, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000000c0)) mount$9p_fd(0x0, 0x0, 0x0, 0x311880, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0/../file0/file0\x00', 0x2261000, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x0, 0x2c1, &(0x7f0000001880)="$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") symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='cgroup\x00') r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) lseek(r4, 0x7, 0x5) listen(r5, 0x800000b) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x803) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x7d4165c9) listen(r6, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r9, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r9, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) 324.421247ms ago: executing program 2 (id=4534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006ddffff9400000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @local}, &(0x7f0000000180)=0xc) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x700, 0x40, 0x3, 0x0, {{0xe, 0x4, 0x0, 0x39, 0x38, 0x66, 0x0, 0x7, 0x2f, 0x0, @multicast2, @remote, {[@rr={0x7, 0x13, 0xe8, [@local, @rand_addr=0x64010102, @rand_addr=0x64010101, @empty]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0xa8, [@local, @private=0xa010101]}]}}}}}) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r10, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r11}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) sendmsg$can_bcm(r10, &(0x7f0000000300)={&(0x7f0000000080)={0x1d, r11}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x20008814) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x8, 0x80, 0x9, 0x8, {{0x17, 0x4, 0x1, 0x5, 0x5c, 0x66, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@timestamp={0x44, 0x20, 0x80, 0x0, 0x3, [0x80000000, 0x2, 0x401, 0x8, 0x1, 0x10, 0x5]}, @timestamp={0x44, 0x24, 0x92, 0x0, 0x6, [0xfae, 0x87b, 0xe0b, 0x2, 0x7, 0x8, 0x6, 0x43b7]}, @ra={0x94, 0x4}]}}}}}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r14, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_RX_RING(r14, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r14, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r14, &(0x7f0000000100)={0x2c, 0x0, r15}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x7b, 0x15, 0x101, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1, 0x8, 0x400, 0x9}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r2, @ANYBLOB="000427bd7000fddbdf250b0000003800018008000300020000001400020070696d3672656731000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="74000180140002006272696467655f736c6176655f3100001400020074756e6c300000000000000000000000080003000000000008000300030000000800030001000000140002007465616d5f736c6176655f30000000000800030000000000140002006d6163766c616e3000000000000000005400018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000300000000071400020070696d3672656700000000000000f6ae7d7d09ce000008000100d868a7c7c0bd493388317bb1ae1791128d448971f8d6dce58a776cef6a9826d0ded3d03b800d179318647d6c4d79b1511d734675a222eecff620da36f4fc66a6f6982b15b9740bbd832a1163218b8e2d25881a57085373a45bf8a3440cc583cf0bd74d41ce1279c6658bd66e56c26a26a86658", @ANYRES32=r15, @ANYBLOB="1400020076657468315f746f5f687372000000002c00018014000200766574683000000000000000000000001400020070696d726567300000000000000000002800018008000100", @ANYRES32=r16, @ANYBLOB="1400020076657468315f766c616e00000000000008000300000000004000018014000200776731000000000000000000000000001400020077673100000000000000000000000000140002006e696376663000"/92], 0x1a8}, 0x1, 0x0, 0x0, 0x4000804}, 0x13c7ad587b560522) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010f9010000000000000000000a00000a58000000060a09040000000000000000020000000900010073797a300000000009007a73000000002c000480280001800e000100636f6e6e6c696d69740000001400028008000140800000010800020500000001140000001100010000000000000000000000000a00000000"], 0x80}}, 0x0) 61.34041ms ago: executing program 6 (id=4535): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x5, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1, 0xfffffffd, 0x2b7) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000380)=""/4086, 0xff6}], 0x1, 0x101, 0x2) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8c}}, 0x0) syz_clone3(0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000002000)=""/4082) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0x41, "5c83276f6c02000000000000000000010000000000335b021f55001d00a2"}}) 61.05843ms ago: executing program 2 (id=4536): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x41, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) 0s ago: executing program 2 (id=4537): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100000c000000000000000001000000e4afa166a81100f067380b4fc0ca272194185991a8fcdcc65d32720adc40aab2890dd7d502640f91f14ab3e0cd8afe278a0503d9866b0e5f4c19150920ee378e16cdd9a5c06400"/130], &(0x7f0000000400)=""/4096, 0x28, 0x1000, 0x1, 0x4c6}, 0x28) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f0000001400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC, @ANYRESOCT=r1, @ANYRESHEX=r1]) r2 = openat$incfs(r1, &(0x7f0000000040)='.log\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x820, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0xf, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800141, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8004745a, &(0x7f0000001200)) ioctl$KDSETMODE(r2, 0x4b3a, 0x100000) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="190000000400000004000000020000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000999d9cd3b150e886b7d2bddd4004c1f2907e49c987c0217fe07ce8db401ca376e4b59af3796fd55e2b3d9f12a3f5a44edc6dad"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110180000000000ce050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f0000001680)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xc, 0x8, &(0x7f0000001540)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0c359187aa1a64b11a5a970000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) capset(0x0, &(0x7f0000000200)={0x200002, 0x200007, 0x6, 0x7, 0x7, 0x8001}) r5 = socket(0x2a, 0x80805, 0x3) setsockopt(r5, 0x84, 0x18, &(0x7f0000000440)='\a\x00', 0x2) write$nbd(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="ce446698000000000400020004000000"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) kernel console output (not intermixed with test programs): frame+0x77/0x7f [ 470.604062][T15694] RIP: 0033:0x7fcf2a3ecdd9 [ 470.604088][T15694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.604112][T15694] RSP: 002b:00007fcf28e26028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 470.604137][T15694] RAX: ffffffffffffffda RBX: 00007fcf2a666090 RCX: 00007fcf2a3ecdd9 [ 470.604156][T15694] RDX: 0000000000000001 RSI: 0000200000003840 RDI: 0000000000000003 [ 470.604177][T15694] RBP: 00007fcf28e26090 R08: 0000000000000000 R09: 0000000000000000 [ 470.604195][T15694] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 470.604226][T15694] R13: 00007fcf2a666128 R14: 00007fcf2a666090 R15: 00007ffcb82831c8 [ 470.604249][T15694] [ 470.625233][T15693] ip6tnl0 speed is unknown, defaulting to 1000 [ 470.748727][ T28] kauditd_printk_skb: 553 callbacks suppressed [ 470.748758][ T28] audit: type=1326 audit(1253.729:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="syz.2.3743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd51efd60e code=0x7ffc0000 [ 470.760954][T15698] set_capacity_and_notify: 9 callbacks suppressed [ 470.761026][T15698] loop6: detected capacity change from 0 to 128 [ 470.771897][ T28] audit: type=1326 audit(1253.739:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="syz.2.3743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd51efd60e code=0x7ffc0000 [ 470.876402][ T28] audit: type=1326 audit(1253.739:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="syz.2.3743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd51efd60e code=0x7ffc0000 [ 470.902706][ T28] audit: type=1326 audit(1253.739:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="syz.2.3743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd51efd60e code=0x7ffc0000 [ 470.902807][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.930078][ T28] audit: type=1326 audit(1253.739:6463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="syz.2.3743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd51efd60e code=0x7ffc0000 [ 471.025695][T15702] loop7: detected capacity change from 0 to 256 [ 471.129929][ T28] audit: type=1326 audit(1253.849:6464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="syz.2.3743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcd51f3cdd9 code=0x7ffc0000 [ 471.165630][T15711] loop7: detected capacity change from 0 to 2048 [ 471.206106][ T28] audit: type=1326 audit(1253.849:6465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="syz.2.3743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcd51f3cdd9 code=0x7ffc0000 [ 471.259234][T15711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 471.268249][ T28] audit: type=1400 audit(1254.219:6466): avc: denied { shutdown } for pid=15712 comm="syz.4.3757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 471.271975][T15717] usb usb7: usbfs: process 15717 (syz.4.3759) did not claim interface 0 before use [ 471.310482][ T28] audit: type=1400 audit(1254.219:6467): avc: denied { write } for pid=15712 comm="syz.4.3757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 471.337729][T15711] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.353119][ T28] audit: type=1326 audit(1254.219:6468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15714 comm="syz.3.3758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f376fd5cdd9 code=0x0 [ 471.366299][T15719] loop3: detected capacity change from 0 to 1024 [ 471.441417][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.516459][T15729] loop7: detected capacity change from 0 to 128 [ 471.523064][T15709] loop6: detected capacity change from 0 to 128 [ 471.940201][T15735] loop7: detected capacity change from 0 to 512 [ 472.037625][T15735] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 472.424500][T15750] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 472.436726][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 473.043670][T15760] loop6: detected capacity change from 0 to 128 [ 473.280003][T15767] usb usb7: usbfs: process 15767 (syz.3.3776) did not claim interface 0 before use [ 473.334032][T15769] loop6: detected capacity change from 0 to 512 [ 473.371015][T15769] ext4: Unknown parameter 'permit_directio' [ 473.613188][T15775] loop3: detected capacity change from 0 to 256 [ 473.683506][T15775] FAT-fs (loop3): Directory bread(block 64) failed [ 473.703243][T15775] FAT-fs (loop3): Directory bread(block 65) failed [ 473.721388][T15775] FAT-fs (loop3): Directory bread(block 66) failed [ 473.743299][T15775] FAT-fs (loop3): Directory bread(block 67) failed [ 473.779304][T15775] FAT-fs (loop3): Directory bread(block 68) failed [ 473.898302][T15775] FAT-fs (loop3): Directory bread(block 69) failed [ 473.907502][T15775] FAT-fs (loop3): Directory bread(block 70) failed [ 473.914330][T15775] FAT-fs (loop3): Directory bread(block 71) failed [ 473.921589][T15775] FAT-fs (loop3): Directory bread(block 72) failed [ 473.928598][T15775] FAT-fs (loop3): Directory bread(block 73) failed [ 474.300096][T15788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 474.307668][T15788] IPv6: NLM_F_CREATE should be set when creating new route [ 474.315235][T15788] IPv6: NLM_F_CREATE should be set when creating new route [ 475.966280][T15821] loop7: detected capacity change from 0 to 128 [ 476.113626][T15825] usb usb7: usbfs: process 15825 (syz.2.3800) did not claim interface 0 before use [ 476.137346][T15814] loop6: detected capacity change from 0 to 1024 [ 476.138620][T15827] loop7: detected capacity change from 0 to 1024 [ 476.153726][T15827] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 476.179477][T15827] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #11: comm syz.7.3801: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 476.198220][T15827] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 476.198407][T15827] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.3801: couldn't read orphan inode 11 (err -117) [ 476.208399][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 476.208478][ C0] EXT4-fs (loop7): initial error at time 1266: ext4_ext_check_inode:521: inode 11 [ 476.208658][ C0] EXT4-fs (loop7): last error at time 1266: ext4_ext_check_inode:521: inode 11 [ 476.212481][T15814] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 476.222997][T15827] loop7: lost filesystem error report for type 5 error -117 [ 476.252653][T15833] loop2: detected capacity change from 0 to 128 [ 476.286287][T15812] loop3: detected capacity change from 0 to 128 [ 476.296745][T15827] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.307716][T15814] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.3795: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 476.338782][T15814] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 476.339096][T15814] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3795: couldn't read orphan inode 11 (err -117) [ 476.360620][T15814] loop6: lost filesystem error report for type 5 error -117 [ 476.388126][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 476.402216][ C0] EXT4-fs (loop6): initial error at time 1266: ext4_ext_check_inode:521: inode 11 [ 476.411866][ C0] EXT4-fs (loop6): last error at time 1266: ext4_orphan_get:1402 [ 476.427596][T15814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.605916][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.621468][T11196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.743486][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 476.743507][ T28] audit: type=1326 audit(1266.700:6478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.6.3811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 476.777261][ T28] audit: type=1326 audit(1266.700:6479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.6.3811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 476.847208][ T28] audit: type=1326 audit(1266.700:6480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.6.3811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 476.950795][T15865] usb usb7: usbfs: process 15865 (syz.6.3812) did not claim interface 0 before use [ 476.974348][ T28] audit: type=1326 audit(1266.700:6481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.6.3811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 477.000676][ T28] audit: type=1326 audit(1266.700:6482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.6.3811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 477.049684][ T28] audit: type=1326 audit(1266.700:6483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.6.3811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 477.242953][T15872] loop3: detected capacity change from 0 to 512 [ 477.323333][T15872] EXT4-fs (loop3): Invalid log block size: 2147483646 [ 477.474531][ T28] audit: type=1326 audit(1266.700:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.6.3811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 477.547158][ T28] audit: type=1326 audit(1266.700:6485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.6.3811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 477.583811][ T28] audit: type=1326 audit(1266.700:6486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.6.3811" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 477.937925][ T28] audit: type=1326 audit(1266.870:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15841 comm="syz.2.3806" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51f3cdd9 code=0x7ffc0000 [ 478.296559][T15883] __nla_validate_parse: 6 callbacks suppressed [ 478.296639][T15883] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3818'. [ 478.481255][T15887] lo speed is unknown, defaulting to 1000 [ 478.935933][T15887] ip6tnl0 speed is unknown, defaulting to 1000 [ 478.956706][T15896] loop6: detected capacity change from 0 to 2048 [ 478.997214][T15896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.121517][T11196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.199327][T15903] xfrm0 speed is unknown, defaulting to 1000 [ 479.241080][T15903] xfrm0 speed is unknown, defaulting to 1000 [ 479.256968][T15903] xfrm0 speed is unknown, defaulting to 1000 [ 479.325269][T15916] usb usb7: usbfs: process 15916 (syz.6.3825) did not claim interface 0 before use [ 479.484210][T15903] infiniband syz0: set active [ 479.489379][T10823] xfrm0 speed is unknown, defaulting to 1000 [ 479.516827][T15903] infiniband syz0: added xfrm0 [ 479.600565][T15918] loop6: detected capacity change from 0 to 1024 [ 479.613015][T15918] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 479.649909][T15903] RDS/IB: syz0: added [ 479.663036][T15903] smc: adding ib device syz0 with port count 1 [ 479.673015][T15903] smc: ib device syz0 port 1 has no pnetid [ 479.681622][T12654] xfrm0 speed is unknown, defaulting to 1000 [ 479.692550][T15903] xfrm0 speed is unknown, defaulting to 1000 [ 479.715312][T15918] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.3826: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 479.715472][T15918] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 479.716085][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 479.716122][ C1] EXT4-fs (loop6): initial error at time 1269: ext4_ext_check_inode:521: inode 11 [ 479.716154][ C1] EXT4-fs (loop6): last error at time 1269: ext4_ext_check_inode:521: inode 11 [ 479.743539][T15918] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3826: couldn't read orphan inode 11 (err -117) [ 479.816374][T15918] loop6: lost filesystem error report for type 5 error -117 [ 479.834697][T15918] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.937113][T15928] lo speed is unknown, defaulting to 1000 [ 480.008760][T15928] ip6tnl0 speed is unknown, defaulting to 1000 [ 480.042833][T15903] xfrm0 speed is unknown, defaulting to 1000 [ 480.082477][T15903] xfrm0 speed is unknown, defaulting to 1000 [ 480.125455][T11196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.169816][T15903] xfrm0 speed is unknown, defaulting to 1000 [ 480.258177][T15933] loop6: detected capacity change from 0 to 128 [ 480.293719][T15933] syz.6.3830: attempt to access beyond end of device [ 480.293719][T15933] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 480.323009][T15903] xfrm0 speed is unknown, defaulting to 1000 [ 480.421224][T15937] loop7: detected capacity change from 0 to 1024 [ 480.432183][T15928] xfrm0 speed is unknown, defaulting to 1000 [ 480.440469][T15937] EXT4-fs: Ignoring removed bh option [ 480.453955][T15937] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 480.484093][T15937] EXT4-fs (loop7): orphan cleanup on readonly fs [ 480.490748][T15937] EXT4-fs error (device loop7): ext4_quota_enable:7221: comm syz.7.3832: Bad quota inum: 4294934528, type: 0 [ 480.502856][T15937] loop7: lost filesystem error report for type 5 error -117 [ 480.518865][T15903] xfrm0 speed is unknown, defaulting to 1000 [ 480.521503][T15937] EXT4-fs (loop7): Remounting filesystem read-only [ 480.539345][T15937] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 480.555308][T15937] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 480.562504][T15937] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 480.640176][T15903] xfrm0 speed is unknown, defaulting to 1000 [ 480.955228][T15949] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 481.000216][T15949] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.3834: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 481.026476][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.035722][T15949] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 481.036025][T15949] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3834: couldn't read orphan inode 11 (err -117) [ 481.086163][T15949] loop3: lost filesystem error report for type 5 error -117 [ 481.086847][T15949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.256350][T13600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.293288][T15959] set_capacity_and_notify: 1 callbacks suppressed [ 481.293346][T15959] loop3: detected capacity change from 0 to 128 [ 481.342802][T15955] rdma_rxe: rxe_newlink: failed to add lo [ 481.412408][T15962] loop2: detected capacity change from 0 to 256 [ 481.665894][T15975] loop6: detected capacity change from 0 to 128 [ 481.677834][T15979] loop3: detected capacity change from 0 to 128 [ 481.686559][T15977] loop2: detected capacity change from 0 to 512 [ 481.711630][T15977] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.3846: Bad quota inum: 2, type: 1 [ 481.776989][T15977] loop2: lost filesystem error report for type 5 error -117 [ 481.778035][T15977] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 481.800418][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 481.800458][ C0] EXT4-fs (loop2): initial error at time 1271: ext4_quota_enable:7221 [ 481.800486][ C0] EXT4-fs (loop2): last error at time 1271: ext4_quota_enable:7221 [ 481.835603][T15977] EXT4-fs (loop2): mount failed [ 481.881835][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 481.881932][ T28] audit: type=1400 audit(1271.860:6542): avc: denied { remount } for pid=15993 comm="syz.6.3850" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 482.019673][T15994] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 482.032209][ T28] audit: type=1326 audit(1272.010:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15987 comm="syz.3.3848" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376fd5cdd9 code=0x7ffc0000 [ 482.064271][ T28] audit: type=1326 audit(1272.010:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15987 comm="syz.3.3848" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376fd5cdd9 code=0x7ffc0000 [ 482.092957][ T28] audit: type=1326 audit(1272.010:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15987 comm="syz.3.3848" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376fd5cdd9 code=0x7ffc0000 [ 482.120603][ T28] audit: type=1326 audit(1272.010:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15987 comm="syz.3.3848" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376fd5cdd9 code=0x7ffc0000 [ 482.124688][T15997] loop6: detected capacity change from 0 to 256 [ 482.151669][ T28] audit: type=1326 audit(1272.010:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15987 comm="syz.3.3848" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f376fd5cdd9 code=0x7ffc0000 [ 482.190668][ T28] audit: type=1326 audit(1272.010:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15987 comm="syz.3.3848" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376fd5cdd9 code=0x7ffc0000 [ 482.215578][T15999] loop2: detected capacity change from 0 to 128 [ 482.265267][T16001] SELinux: policydb version 0 does not match my version range 15-35 [ 482.289645][T16001] SELinux: failed to load policy [ 482.295440][T16003] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3853'. [ 482.308553][ T28] audit: type=1326 audit(1272.010:6549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15987 comm="syz.3.3848" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376fd5cdd9 code=0x7ffc0000 [ 482.348226][T16003] loop6: detected capacity change from 0 to 512 [ 482.398900][ T28] audit: type=1326 audit(1272.010:6550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15987 comm="syz.3.3848" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f376fd1d60e code=0x7ffc0000 [ 482.442961][T16003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.466225][ T28] audit: type=1326 audit(1272.160:6551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15987 comm="syz.3.3848" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f376fd1d60e code=0x7ffc0000 [ 482.781874][T16019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=16019 comm=syz.7.3860 [ 482.814601][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3861'. [ 482.824042][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3861'. [ 483.038780][T11196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.104580][T16028] loop7: detected capacity change from 0 to 1024 [ 483.128825][T16028] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 483.149704][T16028] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #11: comm syz.7.3864: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 483.169472][T16028] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 483.169621][T16028] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.3864: couldn't read orphan inode 11 (err -117) [ 483.179017][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 483.179119][ C1] EXT4-fs (loop7): initial error at time 1273: ext4_ext_check_inode:521: inode 11 [ 483.179480][ C1] EXT4-fs (loop7): last error at time 1273: ext4_ext_check_inode:521: inode 11 [ 483.223521][T16028] loop7: lost filesystem error report for type 5 error -117 [ 483.243926][T16028] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.294100][T16034] loop6: detected capacity change from 0 to 473 [ 483.322723][T16034] FAT-fs (loop6): invalid media value (0x03) [ 483.335064][T16034] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 483.369770][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.369902][T16034] FAT-fs (loop6): Can't find a valid FAT filesystem [ 483.898573][T16035] EXT4-fs: Ignoring removed mblk_io_submit option [ 483.930256][T16035] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 483.941506][T16035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.955038][T16034] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3866'. [ 484.018794][T11196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.086411][T16057] EXT4-fs: Ignoring removed mblk_io_submit option [ 484.118379][T16057] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.3873: corrupted in-inode xattr: e_value size too large [ 484.146149][T16057] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 484.146394][T16057] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3873: couldn't read orphan inode 15 (err -117) [ 484.156293][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 484.156316][ C1] EXT4-fs (loop6): initial error at time 1274: ext4_iget_extra_inode:5128: inode 15 [ 484.156351][ C1] EXT4-fs (loop6): last error at time 1274: ext4_iget_extra_inode:5128: inode 15 [ 484.205700][T16057] loop6: lost filesystem error report for type 5 error -117 [ 484.206330][T16057] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.275481][T16057] EXT4-fs (loop6): shut down requested (2) [ 484.361100][T16054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3872'. [ 484.417149][T16050] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3872'. [ 484.934719][T16067] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.001246][T11196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.104725][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.125020][T16070] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3877'. [ 485.154431][T16072] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 485.172058][T16072] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.3878: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 485.191682][T16072] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 485.193312][T16072] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3878: couldn't read orphan inode 11 (err -117) [ 485.215264][T16072] loop3: lost filesystem error report for type 5 error -117 [ 485.221707][T16072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.251561][T16074] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.379738][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.401970][T13600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.496351][T16081] syzkaller0: entered promiscuous mode [ 485.502292][T16081] syzkaller0: entered allmulticast mode [ 485.523167][T16085] lo speed is unknown, defaulting to 1000 [ 485.527211][T16081] netlink: 'syz.7.3881': attribute type 16 has an invalid length. [ 485.632999][T16081] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.641003][T16081] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.711453][T16081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.723550][T16081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.802756][T16085] ip6tnl0 speed is unknown, defaulting to 1000 [ 485.804728][ T30] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.823039][T12654] ip6tnl0 speed is unknown, defaulting to 1000 [ 485.840289][T12654] syz1: Port: 1 Link DOWN [ 485.852626][ T30] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.867670][T12654] ip6tnl0 speed is unknown, defaulting to 1000 [ 485.876177][ T30] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.901376][ T30] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.918589][T16085] xfrm0 speed is unknown, defaulting to 1000 [ 486.027661][T16103] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 486.083861][T11196] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 486.204443][T16113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.210698][T16116] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 486.213621][T16113] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.234311][T16113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.247217][T16116] FAULT_INJECTION: forcing a failure. [ 486.247217][T16116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.270317][T16116] CPU: 1 UID: 0 PID: 16116 Comm: syz.6.3895 Tainted: G W syzkaller #0 PREEMPT(full) [ 486.270352][T16116] Tainted: [W]=WARN [ 486.270359][T16116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.270374][T16116] Call Trace: [ 486.270383][T16116] [ 486.270394][T16116] __dump_stack+0x1d/0x30 [ 486.270470][T16116] dump_stack_lvl+0x95/0xd0 [ 486.270595][T16116] dump_stack+0x15/0x1b [ 486.270641][T16116] should_fail_ex+0x263/0x280 [ 486.270670][T16116] should_fail+0xb/0x20 [ 486.270695][T16116] should_fail_usercopy+0x1a/0x20 [ 486.270724][T16116] strncpy_from_user+0x27/0x250 [ 486.270788][T16116] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 486.270825][T16116] do_getname+0x59/0x1c0 [ 486.270846][T16116] __se_sys_unlinkat+0x4c/0x140 [ 486.270953][T16116] __x64_sys_unlinkat+0x43/0x50 [ 486.271004][T16116] x64_sys_call+0x1120/0x3020 [ 486.271030][T16116] do_syscall_64+0x12c/0x3b0 [ 486.271076][T16116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.271099][T16116] RIP: 0033:0x7fcf2a3ecdd9 [ 486.271119][T16116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.271140][T16116] RSP: 002b:00007fcf28e47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 486.271163][T16116] RAX: ffffffffffffffda RBX: 00007fcf2a665fa0 RCX: 00007fcf2a3ecdd9 [ 486.271242][T16116] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 486.271258][T16116] RBP: 00007fcf28e47090 R08: 0000000000000000 R09: 0000000000000000 [ 486.271272][T16116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.271286][T16116] R13: 00007fcf2a666038 R14: 00007fcf2a665fa0 R15: 00007ffcb82831c8 [ 486.271352][T16116] [ 486.310244][T16113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.467595][T16113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.468010][T11196] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 486.478217][T16113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 486.514112][T16113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.532045][T16113] veth1_vlan: left promiscuous mode [ 486.538448][T16113] veth0_vlan: left promiscuous mode [ 486.546774][T16113] veth0_vlan: entered promiscuous mode [ 486.574333][T16113] veth1_vlan: entered promiscuous mode [ 486.596180][T16113] veth1_macvtap: left promiscuous mode [ 486.614685][T16113] veth0_macvtap: left promiscuous mode [ 486.635075][T16113] veth0_macvtap: entered promiscuous mode [ 486.656867][T16113] veth1_macvtap: entered promiscuous mode [ 486.663049][T16127] set_capacity_and_notify: 8 callbacks suppressed [ 486.663145][T16127] loop3: detected capacity change from 0 to 128 [ 486.687727][T16113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.692322][T16127] FAT-fs (loop3): Directory bread(block 32) failed [ 486.696028][T16113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.708219][T16127] FAT-fs (loop3): Directory bread(block 33) failed [ 486.710400][T16113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 486.724674][T16113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 486.731243][T16127] FAT-fs (loop3): Directory bread(block 34) failed [ 486.734376][T16113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 486.746951][T16113] ip6gretap0: entered promiscuous mode [ 486.749510][T16127] FAT-fs (loop3): Directory bread(block 35) failed [ 486.755285][T16113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 486.767117][T16129] usb usb7: usbfs: process 16129 (syz.6.3899) did not claim interface 0 before use [ 486.767821][T16130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3897'. [ 486.778428][T16127] FAT-fs (loop3): Directory bread(block 36) failed [ 486.778457][T16127] FAT-fs (loop3): Directory bread(block 37) failed [ 486.778602][T16127] FAT-fs (loop3): Directory bread(block 38) failed [ 486.778624][T16127] FAT-fs (loop3): Directory bread(block 39) failed [ 486.778690][T16127] FAT-fs (loop3): Directory bread(block 40) failed [ 486.778710][T16127] FAT-fs (loop3): Directory bread(block 41) failed [ 486.850192][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.857385][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.866264][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.873543][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.946219][ T3954] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.961650][ T3954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.964048][T16141] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 486.970514][ T3954] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.970620][ T3954] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.999274][T16135] loop6: detected capacity change from 0 to 4096 [ 487.113288][ T28] kauditd_printk_skb: 89 callbacks suppressed [ 487.113643][ T28] audit: type=1326 audit(1277.090:6641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.4.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099c4cdd9 code=0x7ffc0000 [ 487.146023][ T28] audit: type=1326 audit(1277.090:6642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.4.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099c4cdd9 code=0x7ffc0000 [ 487.171609][ T28] audit: type=1326 audit(1277.090:6643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.4.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099c4cdd9 code=0x7ffc0000 [ 487.197008][ T28] audit: type=1326 audit(1277.090:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.4.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099c4cdd9 code=0x7ffc0000 [ 487.229282][ T28] audit: type=1326 audit(1277.090:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.4.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fd099c4cdd9 code=0x7ffc0000 [ 487.255778][ T28] audit: type=1326 audit(1277.090:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.4.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099c4cdd9 code=0x7ffc0000 [ 487.282471][ T28] audit: type=1326 audit(1277.090:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.4.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099c4cdd9 code=0x7ffc0000 [ 487.310158][ T28] audit: type=1326 audit(1277.090:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.4.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd099c4cdd9 code=0x7ffc0000 [ 487.320300][T16151] loop6: detected capacity change from 0 to 128 [ 487.338587][ T28] audit: type=1326 audit(1277.090:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.4.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd099c4cdd9 code=0x7ffc0000 [ 487.421891][ T28] audit: type=1326 audit(1277.400:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16152 comm="syz.2.3908" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51f3cdd9 code=0x7ffc0000 [ 487.553219][T16159] loop2: detected capacity change from 0 to 2048 [ 487.693116][T16165] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3912'. [ 487.770986][T16168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32792 sclass=netlink_route_socket pid=16168 comm=syz.2.3913 [ 487.793424][T16172] loop6: detected capacity change from 0 to 1024 [ 487.813257][T16172] EXT4-fs: Ignoring removed bh option [ 487.969622][T16168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3913'. [ 488.042965][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3919'. [ 488.052223][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3919'. [ 488.064805][T16186] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3918'. [ 488.198453][T16201] loop3: detected capacity change from 0 to 512 [ 488.219897][T16201] EXT4-fs (loop3): 1 orphan inode deleted [ 488.247494][T16205] dvmrp0: entered allmulticast mode [ 488.264839][T16205] dvmrp0: left allmulticast mode [ 488.435130][T16213] loop3: detected capacity change from 0 to 1024 [ 488.461575][T16213] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 488.501898][T16213] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.3928: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 488.522452][T16213] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 488.523950][T16213] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3928: couldn't read orphan inode 11 (err -117) [ 488.534310][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 488.534351][ C1] EXT4-fs (loop3): initial error at time 1278: ext4_ext_check_inode:521: inode 11 [ 488.534680][ C1] EXT4-fs (loop3): last error at time 1278: ext4_ext_check_inode:521: inode 11 [ 488.583657][T16213] loop3: lost filesystem error report for type 5 error -117 [ 489.700384][T16242] __nla_validate_parse: 5 callbacks suppressed [ 489.700414][T16242] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3937'. [ 489.869381][T16242] unsupported nlmsg_type 40 [ 490.536022][T16252] loop6: detected capacity change from 0 to 512 [ 490.569765][T16252] EXT4-fs error (device loop6): ext4_quota_enable:7221: comm syz.6.3940: Bad quota inum: 2, type: 1 [ 490.582366][T16252] loop6: lost filesystem error report for type 5 error -117 [ 490.583986][T16252] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 490.591495][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 490.591519][ C0] EXT4-fs (loop6): initial error at time 1280: ext4_quota_enable:7221 [ 490.591545][ C0] EXT4-fs (loop6): last error at time 1280: ext4_quota_enable:7221 [ 490.647815][T16252] EXT4-fs (loop6): mount failed [ 490.821823][T16259] team0: entered allmulticast mode [ 490.841616][T16259] team_slave_0: entered allmulticast mode [ 490.857843][T16259] team_slave_1: entered allmulticast mode [ 490.877311][T16259] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.937415][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3944'. [ 490.966227][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3944'. [ 491.139729][T16271] loop6: detected capacity change from 0 to 128 [ 491.574312][T16279] loop2: detected capacity change from 0 to 512 [ 491.612697][T16279] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.3951: Bad quota inum: 2, type: 1 [ 491.682534][T16279] loop2: lost filesystem error report for type 5 error -117 [ 491.682744][T16279] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 491.690385][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 491.690406][ C1] EXT4-fs (loop2): initial error at time 1281: ext4_quota_enable:7221 [ 491.690432][ C1] EXT4-fs (loop2): last error at time 1281: ext4_quota_enable:7221 [ 491.751135][T16279] EXT4-fs (loop2): mount failed [ 491.788102][T16283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3952'. [ 491.863557][T16283] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3952'. [ 491.993385][T16294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3956'. [ 492.031830][T16294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3956'. [ 492.452695][T16314] loop3: detected capacity change from 0 to 128 [ 492.771216][ T28] kauditd_printk_skb: 845 callbacks suppressed [ 492.771236][ T28] audit: type=1400 audit(1282.750:7496): avc: denied { mounton } for pid=16318 comm="syz.7.3966" path="/proc/536/task" dev="proc" ino=50437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 492.851412][T16328] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3970'. [ 492.870212][T16328] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3970'. [ 493.048407][T16338] loop7: detected capacity change from 0 to 128 [ 493.169157][T16331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3971'. [ 493.662878][T16345] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16345 comm=syz.4.3974 [ 494.345549][T16349] loop7: detected capacity change from 0 to 512 [ 494.414461][T16349] EXT4-fs: Ignoring removed oldalloc option [ 494.436550][T16349] EXT4-fs: Mount option(s) incompatible with ext3 [ 494.443408][T16355] loop3: detected capacity change from 0 to 1024 [ 494.482887][T16355] EXT4-fs: Ignoring removed nobh option [ 494.496621][T16355] EXT4-fs: Ignoring removed bh option [ 494.512074][T16355] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 494.575242][T16355] EXT4-fs mount: 8 callbacks suppressed [ 494.575266][T16355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.609447][ T28] audit: type=1400 audit(1284.590:7497): avc: denied { write } for pid=16354 comm="syz.3.3979" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 494.662034][T13600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.667733][T16367] loop7: detected capacity change from 0 to 128 [ 494.915019][T16386] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.922802][T16386] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.955082][T16386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.967909][T16386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.011948][T16385] xt_hashlimit: size too large, truncated to 1048576 [ 495.026022][ T60] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.043230][ T60] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.063329][ T60] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.080193][T16393] bond0: (slave veth1_macvtap): Error: Device is in use and cannot be enslaved [ 495.080289][T16396] loop7: detected capacity change from 0 to 1024 [ 495.105501][ T60] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.123047][T16396] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 495.151646][T16396] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.3993: Invalid block bitmap block 0 in block_group 0 [ 495.174288][T16396] loop7: lost filesystem error report for type 5 error -117 [ 495.175803][T16396] Quota error (device loop7): write_blk: dquota write failed [ 495.191117][T16396] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 495.197723][T16406] __nla_validate_parse: 8 callbacks suppressed [ 495.197742][T16406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3996'. [ 495.201499][T16396] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.3993: Failed to acquire dquot type 0 [ 495.224303][T16406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3996'. [ 495.230253][T16396] loop7: lost filesystem error report for type 5 error -117 [ 495.239547][T16396] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.3993: Freeing blocks not in datazone - block = 0, count = 4096 [ 495.260133][T16406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3996'. [ 495.260645][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 495.276558][ C0] EXT4-fs (loop7): initial error at time 1285: ext4_read_block_bitmap_nowait:483 [ 495.285899][ C0] EXT4-fs (loop7): last error at time 1285: ext4_acquire_dquot:7034 [ 495.297794][T16396] loop7: lost filesystem error report for type 5 error -117 [ 495.298042][T16396] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.3993: Invalid inode bitmap blk 0 in block_group 0 [ 495.319801][T16409] loop6: detected capacity change from 0 to 128 [ 495.326919][ T30] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-7 [ 495.336174][T16396] loop7: lost filesystem error report for type 5 error -117 [ 495.344828][T16396] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 495.356448][ T30] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 0 [ 495.365475][T16396] loop7: lost filesystem error report for type 5 error -117 [ 495.373777][T16396] EXT4-fs (loop7): 1 orphan inode deleted [ 495.374398][ T30] loop7: lost filesystem error report for type 5 error -117 [ 495.382847][T16396] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.432574][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.641483][T16419] loop6: detected capacity change from 0 to 128 [ 496.825453][T16457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4015'. [ 496.846570][T16457] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 496.955376][T16463] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.4016'. [ 496.977126][ T28] audit: type=1400 audit(1286.930:7498): avc: denied { getopt } for pid=16462 comm="syz.4.4016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 497.013240][T16450] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4012'. [ 497.422147][T16480] loop2: detected capacity change from 0 to 128 [ 497.483257][T16482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4025'. [ 497.615838][T16482] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4025'. [ 497.632910][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4029'. [ 497.833017][T16501] 9p: Could not find request transport: td [ 497.966534][T16515] loop6: detected capacity change from 0 to 128 [ 497.975462][T16515] msdos: Bad value for 'gid' [ 497.980461][T16515] msdos: Bad value for 'gid' [ 497.996279][T16515] loop6: detected capacity change from 0 to 512 [ 498.005341][T16515] EXT4-fs (loop6): orphan cleanup on readonly fs [ 498.012849][T16515] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4037: couldn't read orphan inode 26 (err -116) [ 498.025650][T16515] loop6: lost filesystem error report for type 5 error -116 [ 498.026115][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 498.030383][T16515] EXT4-fs (loop6): Remounting filesystem read-only [ 498.033643][ C1] EXT4-fs (loop6): initial error at time 1288: ext4_orphan_get:1402 [ 498.040782][T16515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 498.047172][ C1] [ 498.047183][ C1] EXT4-fs (loop6): last error at time 1288: ext4_orphan_get:1402 [ 498.083201][T16515] EXT4-fs (loop6): shut down requested (1) [ 498.092572][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4037'. [ 498.203255][T11196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.588411][T16532] loop3: detected capacity change from 0 to 1024 [ 498.604277][T16532] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 498.766146][T16532] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 498.807876][T16538] loop2: detected capacity change from 0 to 128 [ 498.821833][T16536] lo speed is unknown, defaulting to 1000 [ 498.829957][T16532] EXT4-fs (loop3): mount failed [ 498.941482][T16536] ip6tnl0 speed is unknown, defaulting to 1000 [ 498.980842][T16536] xfrm0 speed is unknown, defaulting to 1000 [ 499.144102][T16547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.177908][T16547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.429611][T16554] loop6: detected capacity change from 0 to 1024 [ 499.451661][T16554] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.471173][ T28] audit: type=1400 audit(1289.450:7499): avc: denied { write } for pid=16553 comm="syz.6.4050" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 499.505881][T16554] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 499.513731][ T28] audit: type=1400 audit(1289.450:7500): avc: denied { write } for pid=16553 comm="syz.6.4050" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 499.536141][ T28] audit: type=1400 audit(1289.450:7501): avc: denied { write } for pid=16553 comm="syz.6.4050" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 499.557968][ T28] audit: type=1400 audit(1289.450:7502): avc: denied { write } for pid=16553 comm="syz.6.4050" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 499.580631][ T28] audit: type=1400 audit(1289.450:7503): avc: denied { rename } for pid=16553 comm="syz.6.4050" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 499.603260][ T28] audit: type=1400 audit(1289.450:7504): avc: denied { reparent } for pid=16553 comm="syz.6.4050" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 499.606591][T16549] loop2: detected capacity change from 0 to 1024 [ 499.625667][ T28] audit: type=1400 audit(1289.450:7505): avc: denied { add_name } for pid=16553 comm="syz.6.4050" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 499.662580][T11196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.685877][T16549] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 499.716967][T16549] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.4048: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 499.737331][T16549] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 499.746098][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 499.756535][T16549] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4048: couldn't read orphan inode 11 (err -117) [ 499.762660][ C1] EXT4-fs (loop2): initial error at time 1289: ext4_ext_check_inode:521: inode 11 [ 499.762700][ C1] EXT4-fs (loop2): last error at time 1289: ext4_ext_check_inode:521: inode 11 [ 499.880593][T16549] loop2: lost filesystem error report for type 5 error -117 [ 499.881499][T16549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.917500][T16564] A link change request failed with some changes committed already. Interface sit3 may have been left with an inconsistent configuration, please check. [ 499.944189][T12299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.308841][T16575] loop3: detected capacity change from 0 to 128 [ 500.650478][T16585] bridge_slave_0: left allmulticast mode [ 500.675433][T16585] bridge_slave_0: left promiscuous mode [ 500.695057][T16585] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.776739][T16585] bridge_slave_1: left allmulticast mode [ 500.791364][T16585] bridge_slave_1: left promiscuous mode [ 500.798745][T16590] __nla_validate_parse: 7 callbacks suppressed [ 500.798796][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4063'. [ 500.829397][T16585] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.830425][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4059'. [ 500.863332][T16585] bond0: (slave bond_slave_0): Releasing backup interface [ 500.928898][T16585] bond0: (slave bond_slave_1): Releasing backup interface [ 500.995476][T16585] team0: Port device team_slave_0 removed [ 501.043637][T16585] team0: Port device team_slave_1 removed [ 501.053743][T16598] loop7: detected capacity change from 0 to 2048 [ 501.072181][T16585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.087465][T16585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.098653][T16598] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.112676][T16585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.120279][T16585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.129612][T16585] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 501.161366][ T3398] xfrm0 speed is unknown, defaulting to 1000 [ 501.254157][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.329890][T16609] loop6: detected capacity change from 0 to 512 [ 501.395815][T16609] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.408995][T16614] loop7: detected capacity change from 0 to 512 [ 501.411314][T16609] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 18: comm syz.6.4070: lblock 23 mapped to illegal pblock 18 (length 1) [ 501.415531][ T28] audit: type=1400 audit(1291.390:7506): avc: denied { write } for pid=16608 comm="syz.6.4070" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 501.432081][T16609] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 18: comm syz.6.4070: lblock 23 mapped to illegal pblock 18 (length 1) [ 501.453220][T16614] EXT4-fs: test_dummy_encryption option not supported [ 501.654575][T11196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.704554][T16613] lo speed is unknown, defaulting to 1000 [ 502.068867][T16613] ip6tnl0 speed is unknown, defaulting to 1000 [ 502.083720][T16624] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4074'. [ 502.117659][T16613] xfrm0 speed is unknown, defaulting to 1000 [ 502.294881][T16631] FAT-fs (loop3): Directory bread(block 64) failed [ 502.301644][T16631] FAT-fs (loop3): Directory bread(block 65) failed [ 502.308579][T16631] FAT-fs (loop3): Directory bread(block 66) failed [ 502.315399][T16631] FAT-fs (loop3): Directory bread(block 67) failed [ 502.322289][T16631] FAT-fs (loop3): Directory bread(block 68) failed [ 502.334460][T16631] FAT-fs (loop3): Directory bread(block 69) failed [ 502.347257][T16631] FAT-fs (loop3): Directory bread(block 70) failed [ 502.361415][T16631] FAT-fs (loop3): Directory bread(block 71) failed [ 502.375415][T16631] FAT-fs (loop3): Directory bread(block 72) failed [ 502.391918][T16631] FAT-fs (loop3): Directory bread(block 73) failed [ 502.557333][T16646] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 502.597300][T16646] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #11: comm syz.7.4081: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 502.637152][T16646] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 502.637280][T16646] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.4081: couldn't read orphan inode 11 (err -117) [ 502.658617][T16646] loop7: lost filesystem error report for type 5 error -117 [ 502.670892][T16646] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.882938][T16642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4080'. [ 502.906834][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.168125][T16663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=16663 comm=syz.7.4083 [ 503.185633][T16665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4085'. [ 503.572393][T16687] set_capacity_and_notify: 2 callbacks suppressed [ 503.572411][T16687] loop3: detected capacity change from 0 to 1024 [ 503.583039][T16692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4095'. [ 503.587037][T16687] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 503.607585][T16687] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.4093: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 503.626119][T16692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4095'. [ 503.627145][T16687] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 503.636659][T16687] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4093: couldn't read orphan inode 11 (err -117) [ 503.646510][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 503.646644][ C0] EXT4-fs (loop3): initial error at time 1293: ext4_ext_check_inode:521: inode 11 [ 503.646854][ C0] EXT4-fs (loop3): last error at time 1293: ext4_ext_check_inode:521: inode 11 [ 503.661050][T16692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4095'. [ 503.668330][T16687] loop3: lost filesystem error report for type 5 error -117 [ 503.706345][T16687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.854904][T13600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.902563][T16701] loop7: detected capacity change from 0 to 1024 [ 503.924526][T16701] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 503.957471][T16701] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 503.970041][T16701] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 503.978136][T16701] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 504.034853][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.176613][T16718] loop2: detected capacity change from 0 to 512 [ 504.196940][T16718] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4103: bg 0: block 393: padding at end of block bitmap is not set [ 504.218525][T16718] loop2: lost filesystem error report for type 5 error -117 [ 504.218689][T16718] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 504.226437][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 504.226465][ C0] EXT4-fs (loop2): initial error at time 1294: ext4_validate_block_bitmap:441 [ 504.226493][ C0] EXT4-fs (loop2): last error at time 1294: ext4_validate_block_bitmap:441 [ 504.261259][T16718] loop2: lost filesystem error report for type 5 error -117 [ 504.287467][T16718] EXT4-fs (loop2): 2 truncates cleaned up [ 504.331306][T16718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.363207][T16723] netlink: 'syz.4.4105': attribute type 9 has an invalid length. [ 504.419748][T12299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.651628][T16734] loop2: detected capacity change from 0 to 1024 [ 504.691854][T16734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.700917][T16707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4100'. [ 504.720623][ T28] audit: type=1400 audit(1294.700:7507): avc: denied { write } for pid=16733 comm="syz.2.4108" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 504.752866][ T28] audit: type=1400 audit(1294.700:7508): avc: denied { read } for pid=16733 comm="syz.2.4108" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 504.822331][T12299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.871446][T16739] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 505.003566][ T3398] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 505.011880][ T3398] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 505.068073][T16745] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4112'. [ 505.365561][T16758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=16758 comm=syz.4.4117 [ 505.440905][T16758] lo speed is unknown, defaulting to 1000 [ 505.495028][T16758] ip6tnl0 speed is unknown, defaulting to 1000 [ 505.515854][ T28] audit: type=1400 audit(1295.460:7509): avc: denied { ioctl } for pid=16766 comm="syz.2.4120" path="socket:[51726]" dev="sockfs" ino=51726 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 505.888527][T16758] xfrm0 speed is unknown, defaulting to 1000 [ 505.983223][T16770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4121'. [ 506.025238][T16785] loop6: detected capacity change from 0 to 128 [ 506.080655][T16785] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 506.080655][T16785] Please contact the netfilter-devel mailing list or update your nftables rules. [ 506.133422][T16785] loop6: detected capacity change from 0 to 512 [ 506.156586][T16785] EXT4-fs error (device loop6): ext4_free_inode:354: comm syz.6.4126: bit already cleared for inode 11 [ 506.168065][T16785] loop6: lost filesystem error report for type 5 error -117 [ 506.176744][T16785] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 506.215942][T16785] loop6: lost filesystem error report for type 5 error -117 [ 506.216833][T16785] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 506.219288][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 506.232911][T16785] loop6: lost filesystem error report for type 5 error -117 [ 506.234727][ C0] EXT4-fs (loop6): initial error at time 1296: ext4_free_inode:354 [ 506.251057][T16785] EXT4-fs (loop6): 1 orphan inode deleted [ 506.258999][ C0] EXT4-fs (loop6): last error at time 1296: ext4_free_inode:361 [ 506.294154][T16785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.323730][T11196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.364158][T16801] smc: net device vcan0 applied user defined pnetid SYZ1 [ 506.558521][T16821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4134'. [ 506.855594][T16852] loop3: detected capacity change from 0 to 512 [ 506.890113][T16852] EXT4-fs error (device loop3): ext4_quota_enable:7221: comm syz.3.4137: Bad quota inum: 2, type: 1 [ 506.906178][T16852] loop3: lost filesystem error report for type 5 error -117 [ 506.906399][T16852] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 506.929028][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 506.929063][ C0] EXT4-fs (loop3): initial error at time 1296: ext4_quota_enable:7221 [ 506.929086][ C0] EXT4-fs (loop3): last error at time 1296: ext4_quota_enable:7221 [ 506.953556][T16852] EXT4-fs (loop3): mount failed [ 507.050150][ T28] audit: type=1400 audit(1297.030:7510): avc: denied { read write } for pid=16862 comm="syz.4.4138" name="bus" dev="tmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 507.119786][ T28] audit: type=1400 audit(1297.030:7511): avc: denied { open } for pid=16862 comm="syz.4.4138" path="/241/bus" dev="tmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 507.159366][ T28] audit: type=1400 audit(1297.140:7512): avc: denied { unlink } for pid=13340 comm="syz-executor" name="bus" dev="tmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 507.429040][T16921] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4145'. [ 507.468072][T16923] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4146'. [ 507.486371][T16923] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4146'. [ 507.501706][T16923] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4146'. [ 507.817876][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4143'. [ 508.076252][ T28] audit: type=1400 audit(1297.980:7513): avc: denied { mounton } for pid=16932 comm="syz.4.4150" path="/file0" dev="autofs" ino=52288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 508.201344][ T28] audit: type=1400 audit(1297.990:7514): avc: denied { remount } for pid=16932 comm="syz.4.4150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 508.425286][T16942] syzkaller1: entered allmulticast mode [ 508.497620][T16946] loop7: detected capacity change from 0 to 2048 [ 508.536189][T16949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4156'. [ 508.605368][T16946] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.713272][T16961] loop3: detected capacity change from 0 to 512 [ 508.769901][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.780260][T16961] EXT4-fs error (device loop3): ext4_quota_enable:7221: comm syz.3.4160: Bad quota inum: 2, type: 1 [ 508.798216][T16961] loop3: lost filesystem error report for type 5 error -117 [ 508.798417][T16961] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 508.806338][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 508.806361][ C1] EXT4-fs (loop3): initial error at time 1298: ext4_quota_enable:7221 [ 508.806392][ C1] EXT4-fs (loop3): last error at time 1298: ext4_quota_enable:7221 [ 508.845180][T16961] EXT4-fs (loop3): mount failed [ 508.946414][T16966] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 509.055140][T16979] loop3: detected capacity change from 0 to 2048 [ 509.080389][T16979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.276496][T16984] loop7: detected capacity change from 0 to 1024 [ 509.283545][T16984] EXT4-fs: quotafile must be on filesystem root [ 509.290789][T16984] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4167'. [ 509.379019][T16970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4163'. [ 509.438451][T13600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.882116][T17002] loop3: detected capacity change from 0 to 2048 [ 510.071836][T17002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.094236][T17014] netlink: 'syz.4.4178': attribute type 4 has an invalid length. [ 510.159846][T17018] ´(Y}ñB: renamed from veth1_to_bridge [ 510.388152][T17031] xt_NFQUEUE: number of queues (65533) out of range (got 65539) [ 510.572176][T17034] loop7: detected capacity change from 0 to 128 [ 511.181256][T17059] __nla_validate_parse: 5 callbacks suppressed [ 511.181278][T17059] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4184'. [ 511.216374][T17059] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4184'. [ 511.402229][T13600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.632582][T17075] loop7: detected capacity change from 0 to 1024 [ 511.649926][T17075] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 511.686884][T17075] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #11: comm syz.7.4192: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 511.706984][T17075] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 511.712121][T17075] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.4192: couldn't read orphan inode 11 (err -117) [ 511.735180][T17075] loop7: lost filesystem error report for type 5 error -117 [ 511.736681][T17075] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.784879][T17088] loop6: detected capacity change from 0 to 2048 [ 511.888818][T17088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.011676][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.421789][T17099] loop7: detected capacity change from 0 to 1024 [ 512.471845][T17099] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.501788][ T28] audit: type=1400 audit(1302.480:7515): avc: denied { write } for pid=17098 comm="syz.7.4198" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 512.551245][T11196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.578154][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.653378][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4203'. [ 512.792598][T17121] netlink: 10 bytes leftover after parsing attributes in process `syz.7.4208'. [ 512.863532][T17131] loop6: detected capacity change from 0 to 128 [ 512.892519][T17134] loop7: detected capacity change from 0 to 512 [ 512.919639][T17131] vfat: Unknown parameter '000000000000000000000000xffffffffffffffff00000000000000000000000ÿÿÿÿÿÿÿÿ0xffffffffffffffff18446744073709551615ÿ' [ 512.953431][T17134] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.027074][T17134] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.113386][ T28] audit: type=1326 audit(1303.080:7516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17130 comm="syz.6.4210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 513.161552][T17122] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 513.183337][T17122] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.4209: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 513.183422][T17122] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 513.183635][T17122] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4209: couldn't read orphan inode 11 (err -117) [ 513.183669][T17122] loop3: lost filesystem error report for type 5 error -117 [ 513.184255][T17122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.229082][ T28] audit: type=1326 audit(1303.080:7517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17130 comm="syz.6.4210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 513.229138][ T28] audit: type=1326 audit(1303.120:7518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17130 comm="syz.6.4210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 513.229183][ T28] audit: type=1326 audit(1303.120:7519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17130 comm="syz.6.4210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 513.229289][ T28] audit: type=1326 audit(1303.120:7520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17130 comm="syz.6.4210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 513.229321][ T28] audit: type=1326 audit(1303.120:7521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17130 comm="syz.6.4210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 513.229354][ T28] audit: type=1326 audit(1303.120:7522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17130 comm="syz.6.4210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 513.229426][ T28] audit: type=1326 audit(1303.120:7523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17130 comm="syz.6.4210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 513.229475][ T28] audit: type=1326 audit(1303.120:7524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17130 comm="syz.6.4210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcf2a3ecdd9 code=0x7ffc0000 [ 513.313522][T13600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.365600][T17146] EXT4-fs error (device loop3): ext4_quota_enable:7221: comm syz.3.4214: Bad quota inum: 2, type: 1 [ 513.365707][T17146] loop3: lost filesystem error report for type 5 error -117 [ 513.365926][T17146] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 513.366054][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 513.366075][ C0] EXT4-fs (loop3): initial error at time 1303: ext4_quota_enable:7221 [ 513.366113][ C0] EXT4-fs (loop3): last error at time 1303: ext4_quota_enable:7221 [ 513.366412][T17146] EXT4-fs (loop3): mount failed [ 513.382474][T17111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4206'. [ 513.469363][T17143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4213'. [ 513.621157][T17151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4213'. [ 513.915093][T17154] set_capacity_and_notify: 2 callbacks suppressed [ 513.915112][T17154] loop7: detected capacity change from 0 to 1024 [ 513.964821][T17154] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.978648][T17162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4219'. [ 514.014121][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.116242][T17169] usb usb7: usbfs: process 17169 (syz.3.4222) did not claim interface 0 before use [ 514.157395][T17180] lo speed is unknown, defaulting to 1000 [ 514.163528][T17177] loop2: detected capacity change from 0 to 1024 [ 514.172765][T17177] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 514.193508][T17177] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.4224: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 514.228800][T17177] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 514.229863][T17177] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4224: couldn't read orphan inode 11 (err -117) [ 514.232454][T17184] loop3: detected capacity change from 0 to 512 [ 514.239983][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 514.265822][ C1] EXT4-fs (loop2): initial error at time 1304: ext4_ext_check_inode:521: inode 11 [ 514.274267][T17180] ip6tnl0 speed is unknown, defaulting to 1000 [ 514.275504][ C1] EXT4-fs (loop2): last error at time 1304: ext4_ext_check_inode:521: inode 11 [ 514.292863][T17177] loop2: lost filesystem error report for type 5 error -117 [ 514.327965][T17180] xfrm0 speed is unknown, defaulting to 1000 [ 514.417454][T17184] EXT4-fs error (device loop3): ext4_quota_enable:7221: comm syz.3.4228: Bad quota inum: 2, type: 1 [ 514.482750][T17177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.495840][T17184] loop3: lost filesystem error report for type 5 error -117 [ 514.496004][T17184] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 514.518385][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 514.518412][ C1] EXT4-fs (loop3): initial error at time 1304: ext4_quota_enable:7221 [ 514.518458][ C1] EXT4-fs (loop3): last error at time 1304: ext4_quota_enable:7221 [ 514.544045][T17184] EXT4-fs (loop3): mount failed [ 514.649036][T17196] loop3: detected capacity change from 0 to 1024 [ 514.689861][T17196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.845684][T13600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.897141][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4234'. [ 514.907461][T12299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.271033][T17221] loop3: detected capacity change from 0 to 512 [ 515.290562][T17221] EXT4-fs error (device loop3): ext4_quota_enable:7221: comm syz.3.4241: Bad quota inum: 2, type: 1 [ 515.323581][T17221] loop3: lost filesystem error report for type 5 error -117 [ 515.323805][T17221] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 515.331353][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 515.331372][ C1] EXT4-fs (loop3): initial error at time 1305: ext4_quota_enable:7221 [ 515.331397][ C1] EXT4-fs (loop3): last error at time 1305: ext4_quota_enable:7221 [ 515.446348][T17221] EXT4-fs (loop3): mount failed [ 515.621787][T17228] loop2: detected capacity change from 0 to 1024 [ 515.629109][T17232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45984 sclass=netlink_route_socket pid=17232 comm=syz.4.4244 [ 515.698090][T17228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.353188][T12299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.424569][T17239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4247'. [ 516.492109][T17239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4247'. [ 516.672555][T17253] loop3: detected capacity change from 0 to 512 [ 516.779013][T17253] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 516.801315][T17264] loop2: detected capacity change from 0 to 128 [ 516.812928][T17253] EXT4-fs (loop3): orphan cleanup on readonly fs [ 516.822702][T17262] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4255'. [ 516.840099][T17253] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 516.841358][T17262] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4255'. [ 516.907498][T17253] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 516.932514][T17253] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4251: bg 0: block 15: invalid block bitmap [ 516.945182][T17253] loop3: lost filesystem error report for type 5 error -117 [ 516.956492][T17253] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 516.992440][T17253] loop3: lost filesystem error report for type 5 error -117 [ 516.994571][T17253] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.4251: data will be lost [ 517.002050][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 517.002075][ C0] EXT4-fs (loop3): initial error at time 1306: ext4_validate_block_bitmap:432 [ 517.002103][ C0] EXT4-fs (loop3): last error at time 1306: ext4_mb_clear_bb:6679 [ 517.043246][T17253] EXT4-fs (loop3): 1 truncate cleaned up [ 517.049848][T17274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4261'. [ 517.052163][T17276] loop7: detected capacity change from 0 to 512 [ 517.066608][T17253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 517.086088][T17274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4261'. [ 517.106101][T17274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4261'. [ 517.125944][T17276] EXT4-fs error (device loop7): ext4_quota_enable:7221: comm syz.7.4262: Bad quota inum: 2, type: 1 [ 517.154270][T17276] loop7: lost filesystem error report for type 5 error -117 [ 517.156057][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 517.170294][ C1] EXT4-fs (loop7): initial error at time 1307: ext4_quota_enable:7221 [ 517.178684][ C1] EXT4-fs (loop7): last error at time 1307: ext4_quota_enable:7221 [ 517.187426][T13600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.197010][T17276] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 517.226708][T17276] EXT4-fs (loop7): mount failed [ 517.241014][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4263'. [ 517.261933][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4263'. [ 517.432745][T17290] loop7: detected capacity change from 0 to 512 [ 517.458150][T17294] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 517.608670][T17294] EXT4-fs (loop6): 1 truncate cleaned up [ 517.615031][T17294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.696871][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 517.696893][ T28] audit: type=1400 audit(1307.640:7541): avc: denied { write } for pid=17293 comm="syz.6.4269" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 517.831369][T11196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.854409][T17309] netlink: 'syz.2.4273': attribute type 16 has an invalid length. [ 517.888809][ T28] audit: type=1400 audit(1307.870:7542): avc: denied { read } for pid=17312 comm="syz.2.4275" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 517.942253][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4276'. [ 517.953553][ T28] audit: type=1400 audit(1307.870:7543): avc: denied { open } for pid=17312 comm="syz.2.4275" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 518.002908][ T28] audit: type=1400 audit(1307.890:7544): avc: denied { write } for pid=17312 comm="syz.2.4275" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 518.216657][ T28] audit: type=1400 audit(1308.200:7545): avc: denied { mount } for pid=17319 comm="syz.4.4278" name="/" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 518.286171][ T28] audit: type=1400 audit(1308.270:7546): avc: denied { search } for pid=17319 comm="syz.4.4278" name="/" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 518.335863][ T28] audit: type=1400 audit(1308.290:7547): avc: denied { search } for pid=17319 comm="syz.4.4278" name="/" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 518.360161][T17317] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.4277: Bad quota inum: 2, type: 1 [ 518.376463][T17300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.395168][T17317] loop2: lost filesystem error report for type 5 error -117 [ 518.395414][T17317] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 518.402881][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 518.402902][ C1] EXT4-fs (loop2): initial error at time 1308: ext4_quota_enable:7221 [ 518.402927][ C1] EXT4-fs (loop2): last error at time 1308: ext4_quota_enable:7221 [ 518.454854][T17317] EXT4-fs (loop2): mount failed [ 518.501756][T17324] netlink: 'syz.6.4274': attribute type 16 has an invalid length. [ 518.533696][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.645291][T17336] EXT4-fs error (device loop6): ext4_free_inode:354: comm syz.6.4284: bit already cleared for inode 11 [ 518.658750][T17336] loop6: lost filesystem error report for type 5 error -117 [ 518.659213][T17336] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 518.666998][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 518.667047][ C1] EXT4-fs (loop6): initial error at time 1308: ext4_free_inode:354 [ 518.667068][ C1] EXT4-fs (loop6): last error at time 1308: ext4_free_inode:354 [ 518.699019][T17336] loop6: lost filesystem error report for type 5 error -117 [ 518.699273][T17336] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 518.716770][T17336] loop6: lost filesystem error report for type 5 error -117 [ 518.716962][T17336] EXT4-fs (loop6): 1 orphan inode deleted [ 518.731705][T17336] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.984137][ T28] audit: type=1326 audit(1308.920:7548): auid=4294967295 uid=3327 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.4.4286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099c4cdd9 code=0x7ffc0000 [ 519.012021][ T28] audit: type=1326 audit(1308.920:7549): auid=4294967295 uid=3327 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.4.4286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099c4cdd9 code=0x7ffc0000 [ 519.053381][ T28] audit: type=1326 audit(1308.920:7550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.4.4286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099c4cdd9 code=0x7ffc0000 [ 519.096732][T11196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.153749][T17357] set_capacity_and_notify: 4 callbacks suppressed [ 519.153769][T17357] loop3: detected capacity change from 0 to 128 [ 519.191003][T17360] loop6: detected capacity change from 0 to 1024 [ 519.234248][T17354] lo speed is unknown, defaulting to 1000 [ 519.242622][T17360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.301612][T17367] netlink: 'syz.4.4293': attribute type 16 has an invalid length. [ 519.331558][T11196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.360516][T17369] netlink: 'syz.4.4294': attribute type 16 has an invalid length. [ 519.656256][T17354] ip6tnl0 speed is unknown, defaulting to 1000 [ 519.880885][T17400] netlink: 'syz.3.4304': attribute type 16 has an invalid length. [ 519.946906][T17404] loop2: detected capacity change from 0 to 512 [ 519.967109][T17404] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 0 [ 519.998547][T17408] netlink: 'syz.4.4308': attribute type 4 has an invalid length. [ 520.050202][T17409] loop2: detected capacity change from 0 to 512 [ 520.119217][T17409] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 520.161814][T17409] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 520.176879][T17409] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.4307: Failed to acquire dquot type 1 [ 520.188713][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 520.188736][ C1] EXT4-fs (loop2): initial error at time 1310: ext4_mb_generate_buddy:1317 [ 520.188758][ C1] EXT4-fs (loop2): last error at time 1310: ext4_mb_generate_buddy:1317 [ 520.213113][T17409] loop2: lost filesystem error report for type 5 error -28 [ 520.214696][T17409] EXT4-fs (loop2): 1 truncate cleaned up [ 520.229329][T17409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.259970][T17409] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.4307: iget: bad i_size value: 360287970189639690 [ 520.282430][T17409] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 520.293078][T17409] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 520.375000][T16895] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.384105][T16895] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.384110][T17354] xfrm0 speed is unknown, defaulting to 1000 [ 520.399942][T16895] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.425616][ T3340] xfrm0 speed is unknown, defaulting to 1000 [ 520.426439][T16895] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.442571][ T3340] syz0: Port: 1 Link DOWN [ 520.452139][T12299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.463015][ T3340] xfrm0 speed is unknown, defaulting to 1000 [ 520.545397][T17423] loop3: detected capacity change from 0 to 512 [ 520.564018][T17423] ext4: Unknown parameter 'measure' [ 520.819043][T16895] bond0: left allmulticast mode [ 520.824097][T16895] bond_slave_0: left allmulticast mode [ 520.829796][T16895] bond_slave_1: left allmulticast mode [ 520.849611][T16895] bridge0: port 3(bond0) entered disabled state [ 520.865291][T16895] bridge_slave_1: left allmulticast mode [ 520.882595][T16895] bridge_slave_1: left promiscuous mode [ 520.904888][T16895] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.932331][T16895] bridge_slave_0: left allmulticast mode [ 520.948084][T16895] bridge_slave_0: left promiscuous mode [ 520.967154][T16895] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.974489][T17434] loop2: detected capacity change from 0 to 1024 [ 520.992526][T17434] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 521.020930][T17434] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.4316: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 521.040756][T17434] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 521.041119][T17434] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4316: couldn't read orphan inode 11 (err -117) [ 521.066081][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 521.072784][ C0] EXT4-fs (loop2): initial error at time 1310: ext4_ext_check_inode:521: inode 11 [ 521.082313][ C0] EXT4-fs (loop2): last error at time 1310: ext4_ext_check_inode:521: inode 11 [ 521.093247][T17434] loop2: lost filesystem error report for type 5 error -117 [ 521.104756][T17434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.167165][T17450] loop6: detected capacity change from 0 to 1764 [ 521.285226][T17464] FAULT_INJECTION: forcing a failure. [ 521.285226][T17464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.308321][T16895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.317542][T16895] bond_slave_0: left promiscuous mode [ 521.319887][T17464] CPU: 0 UID: 0 PID: 17464 Comm: syz.6.4321 Tainted: G W syzkaller #0 PREEMPT(full) [ 521.319922][T17464] Tainted: [W]=WARN [ 521.319931][T17464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 521.319951][T17464] Call Trace: [ 521.319959][T17464] [ 521.319971][T17464] __dump_stack+0x1d/0x30 [ 521.319998][T17464] dump_stack_lvl+0x95/0xd0 [ 521.320062][T17464] dump_stack+0x15/0x1b [ 521.320163][T17464] should_fail_ex+0x263/0x280 [ 521.320193][T17464] should_fail+0xb/0x20 [ 521.320219][T17464] should_fail_usercopy+0x1a/0x20 [ 521.320320][T17464] _copy_to_user+0x20/0xa0 [ 521.320353][T17464] simple_read_from_buffer+0xb5/0x130 [ 521.320462][T17464] proc_fail_nth_read+0x10e/0x150 [ 521.320494][T17464] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 521.320525][T17464] vfs_read+0x1ab/0x7f0 [ 521.320554][T17464] ? __rcu_read_unlock+0x4e/0x70 [ 521.320582][T17464] ? __fget_files+0x184/0x1c0 [ 521.320689][T17464] ? mutex_lock+0x57/0x90 [ 521.320725][T17464] ksys_read+0xdc/0x1a0 [ 521.320754][T17464] __x64_sys_read+0x40/0x50 [ 521.320784][T17464] x64_sys_call+0x2886/0x3020 [ 521.320870][T17464] do_syscall_64+0x12c/0x3b0 [ 521.320978][T17464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.321007][T17464] RIP: 0033:0x7fcf2a3ad60e [ 521.321062][T17464] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 521.321083][T17464] RSP: 002b:00007fcf28e46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 521.321134][T17464] RAX: ffffffffffffffda RBX: 00007fcf28e476c0 RCX: 00007fcf2a3ad60e [ 521.321150][T17464] RDX: 000000000000000f RSI: 00007fcf28e470a0 RDI: 0000000000000005 [ 521.321165][T17464] RBP: 00007fcf28e47090 R08: 0000000000000000 R09: 0000000000000000 [ 521.321179][T17464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.321206][T17464] R13: 00007fcf2a666038 R14: 00007fcf2a665fa0 R15: 00007ffcb82831c8 [ 521.321226][T17464] [ 521.418956][T17467] loop3: detected capacity change from 0 to 128 [ 521.537301][T16895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.542299][T17454] __nla_validate_parse: 10 callbacks suppressed [ 521.542318][T17454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4319'. [ 521.549190][T12299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.572290][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4322'. [ 521.582470][T16895] bond_slave_1: left promiscuous mode [ 521.589460][T16895] bond0 (unregistering): Released all slaves [ 521.842940][T17483] usb usb7: usbfs: process 17483 (syz.6.4326) did not claim interface 0 before use [ 522.055089][T16895] hsr_slave_0: left promiscuous mode [ 522.082066][T16895] hsr_slave_1: left promiscuous mode [ 522.098098][T16895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.137676][T16895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.161367][T17509] loop3: detected capacity change from 0 to 1024 [ 522.174224][T16895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.195013][T16895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.231120][T16895] veth1_macvtap: left promiscuous mode [ 522.244632][T17523] x_tables: duplicate underflow at hook 1 [ 522.252229][T16895] veth0_macvtap: left promiscuous mode [ 522.259613][T17523] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4332'. [ 522.264712][T16895] veth1_vlan: left promiscuous mode [ 522.284772][T16895] veth0_vlan: left promiscuous mode [ 522.390099][T17525] EXT4-fs (loop3): shut down requested (2) [ 522.403943][T17525] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 522.433812][T17525] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 522.455579][T17525] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 522.465003][T16895] team0 (unregistering): Port device team_slave_1 removed [ 522.481622][T16895] team0 (unregistering): Port device team_slave_0 removed [ 522.653102][T17542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4334'. [ 522.723782][T17546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4335'. [ 522.876953][T17564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4338'. [ 522.921782][T17562] loop6: detected capacity change from 0 to 2048 [ 522.954542][ T28] kauditd_printk_skb: 202 callbacks suppressed [ 522.954562][ T28] audit: type=1400 audit(1312.890:7749): avc: denied { write } for pid=17544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.017211][T16895] IPVS: stop unused estimator thread 0... [ 523.046382][ T28] audit: type=1400 audit(1313.020:7750): avc: denied { write } for pid=17567 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.421258][ T28] audit: type=1400 audit(1313.400:7751): avc: denied { write } for pid=17573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.524986][ T28] audit: type=1400 audit(1313.500:7752): avc: denied { write } for pid=17595 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.637086][T17605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4347'. [ 523.728339][T17616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4349'. [ 523.762271][ T28] audit: type=1400 audit(1313.710:7753): avc: denied { write } for pid=17602 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.786357][T17616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4349'. [ 523.815281][ T28] audit: type=1400 audit(1313.760:7754): avc: denied { write } for pid=17623 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.966569][T17619] lo speed is unknown, defaulting to 1000 [ 524.046948][T17624] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 524.100144][ T28] audit: type=1400 audit(1314.060:7755): avc: denied { write } for pid=17628 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.109026][T17619] ip6tnl0 speed is unknown, defaulting to 1000 [ 524.141881][T17624] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.4351: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 524.179702][ T28] audit: type=1400 audit(1314.150:7756): avc: denied { write } for pid=17647 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.187558][T17624] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 524.226062][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 524.242421][ C1] EXT4-fs (loop6): initial error at time 1314: ext4_ext_check_inode:521: inode 11 [ 524.252078][ C1] EXT4-fs (loop6): last error at time 1314: ext4_ext_check_inode:521: inode 11 [ 524.263886][T17624] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4351: couldn't read orphan inode 11 (err -117) [ 524.277441][T17624] loop6: lost filesystem error report for type 5 error -117 [ 524.339846][T17619] xfrm0 speed is unknown, defaulting to 1000 [ 524.443474][T17657] set_capacity_and_notify: 3 callbacks suppressed [ 524.443495][T17657] loop2: detected capacity change from 0 to 512 [ 524.470332][T17657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 524.534286][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4359'. [ 524.741146][T13047] EXT4-fs unmount: 8 callbacks suppressed [ 524.741167][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.786067][T17683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.796896][T17683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.815615][T12299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.857458][T17689] loop2: detected capacity change from 0 to 256 [ 524.934270][T17689] FAT-fs (loop2): Directory bread(block 64) failed [ 524.949050][T17694] loop3: detected capacity change from 0 to 256 [ 524.957298][T17689] FAT-fs (loop2): Directory bread(block 65) failed [ 524.981316][T17689] FAT-fs (loop2): Directory bread(block 66) failed [ 525.004508][T17689] FAT-fs (loop2): Directory bread(block 67) failed [ 525.021977][T17689] FAT-fs (loop2): Directory bread(block 68) failed [ 525.037423][T17689] FAT-fs (loop2): Directory bread(block 69) failed [ 525.050086][T17692] loop7: detected capacity change from 0 to 1764 [ 525.055790][T17689] FAT-fs (loop2): Directory bread(block 70) failed [ 525.081128][T17689] FAT-fs (loop2): Directory bread(block 71) failed [ 525.093085][T17689] FAT-fs (loop2): Directory bread(block 72) failed [ 525.104360][T17689] FAT-fs (loop2): Directory bread(block 73) failed [ 525.130861][ T28] audit: type=1326 audit(1315.110:7757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17701 comm="syz.3.4372" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376fd5cdd9 code=0x7ffc0000 [ 525.192940][T17702] loop3: detected capacity change from 0 to 256 [ 525.209105][ T28] audit: type=1326 audit(1315.110:7758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17701 comm="syz.3.4372" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376fd5cdd9 code=0x7ffc0000 [ 525.216930][T17702] syz.3.4372 (17702): /proc/17701/oom_adj is deprecated, please use /proc/17701/oom_score_adj instead. [ 525.319242][T17702] 9p: Bad value for 'rfdno' [ 525.375929][T17702] loop3: detected capacity change from 0 to 512 [ 525.513791][T16895] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.543539][T16895] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.571717][T16895] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.594805][T16895] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.624050][T17735] loop7: detected capacity change from 0 to 512 [ 525.647737][T17735] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 525.661936][T17733] loop3: detected capacity change from 0 to 1024 [ 525.699584][T17735] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #13: comm syz.7.4379: inode has both inline data and extents flags [ 525.719004][T17733] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 525.821581][T17735] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 525.824518][T17735] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.4379: couldn't read orphan inode 13 (err -117) [ 525.834039][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 525.834064][ C1] EXT4-fs (loop7): initial error at time 1315: ext4_orphan_get:1397: inode 13 [ 525.834091][ C1] EXT4-fs (loop7): last error at time 1315: ext4_orphan_get:1397: inode 13 [ 525.883497][T17735] loop7: lost filesystem error report for type 5 error -117 [ 525.885090][T17735] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.908753][T17752] pim6reg2: entered allmulticast mode [ 525.924454][T17735] EXT4-fs warning (device loop7): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 526.018711][T17735] EXT4-fs warning (device loop7): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 526.087632][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.212947][T17761] usb usb7: usbfs: process 17761 (syz.3.4384) did not claim interface 0 before use [ 526.339518][T17770] loop3: detected capacity change from 0 to 1024 [ 526.362615][T17770] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 526.406467][T17770] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 526.439233][T17770] JBD2: no valid journal superblock found [ 526.443029][T17782] bond3: option miimon: invalid value (18446744073709551615) [ 526.458488][T17770] EXT4-fs (loop3): Could not load journal inode [ 526.465243][T17782] bond3: option miimon: allowed values 0 - 2147483647 [ 526.474979][T17784] loop2: detected capacity change from 0 to 512 [ 526.484067][T17782] bond3 (unregistering): Released all slaves [ 526.572080][T17787] __nla_validate_parse: 5 callbacks suppressed [ 526.572100][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4393'. [ 526.658422][T17791] pim6reg2: entered allmulticast mode [ 526.706244][T17794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4395'. [ 526.737361][T17784] iso9660: Unknown parameter ' ' [ 526.743729][T17794] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4395'. [ 526.880689][T17803] vfat: Unknown parameter '000000000000000000000000xffffffffffffffff00000000000000000000000ÿÿÿÿÿÿÿÿ0xffffffffffffffff18446744073709551615ÿ' [ 527.005606][T17814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 527.035909][T17814] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 527.054194][T17816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=17816 comm=syz.2.4402 [ 527.055870][T17817] netlink: 'syz.3.4403': attribute type 16 has an invalid length. [ 527.185430][T17824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.446607][T13600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.576317][T17838] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.591383][T17838] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.843653][T17864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4420'. [ 528.168966][T17870] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 528.268106][T17870] EXT4-fs error (device loop2): __ext4_fill_super:5596: inode #2: comm syz.2.4422: iget: special inode unallocated [ 528.316129][T17870] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 528.316339][T17870] EXT4-fs (loop2): get root inode failed [ 528.336059][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 528.341936][T17870] EXT4-fs (loop2): mount failed [ 528.342646][ C1] EXT4-fs (loop2): initial error at time 1318: __ext4_fill_super:5596: inode 2 [ 528.356543][ C1] EXT4-fs (loop2): last error at time 1318: __ext4_fill_super:5596: inode 2 [ 528.550502][ T28] kauditd_printk_skb: 145 callbacks suppressed [ 528.550523][ T28] audit: type=1400 audit(1318.530:7904): avc: denied { accept } for pid=17869 comm="syz.2.4422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 528.576304][T17877] usb usb7: usbfs: process 17877 (syz.6.4424) did not claim interface 0 before use [ 528.717562][T17880] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.763542][T17889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.786830][T17889] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.956906][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.067463][T17903] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.4432: Bad quota inum: 2, type: 1 [ 529.084763][T17903] loop2: lost filesystem error report for type 5 error -117 [ 529.085053][T17903] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 529.092699][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 529.092719][ C0] EXT4-fs (loop2): initial error at time 1319: ext4_quota_enable:7221 [ 529.092740][ C0] EXT4-fs (loop2): last error at time 1319: ext4_quota_enable:7221 [ 529.132259][T17903] EXT4-fs (loop2): mount failed [ 529.193806][T17912] netlink: 'syz.7.4434': attribute type 16 has an invalid length. [ 529.291392][T17916] usb usb7: usbfs: process 17916 (syz.2.4436) did not claim interface 0 before use [ 529.359881][T17920] FAULT_INJECTION: forcing a failure. [ 529.359881][T17920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.381205][T17920] CPU: 0 UID: 0 PID: 17920 Comm: syz.2.4438 Tainted: G W syzkaller #0 PREEMPT(full) [ 529.381240][T17920] Tainted: [W]=WARN [ 529.381247][T17920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 529.381260][T17920] Call Trace: [ 529.381268][T17920] [ 529.381276][T17920] __dump_stack+0x1d/0x30 [ 529.381352][T17920] dump_stack_lvl+0x95/0xd0 [ 529.381377][T17920] dump_stack+0x15/0x1b [ 529.381398][T17920] should_fail_ex+0x263/0x280 [ 529.381429][T17920] should_fail+0xb/0x20 [ 529.381496][T17920] should_fail_usercopy+0x1a/0x20 [ 529.381527][T17920] _copy_to_user+0x20/0xa0 [ 529.381560][T17920] simple_read_from_buffer+0xb5/0x130 [ 529.381613][T17920] proc_fail_nth_read+0x10e/0x150 [ 529.381642][T17920] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.381671][T17920] vfs_read+0x1ab/0x7f0 [ 529.381699][T17920] ? __rcu_read_unlock+0x4e/0x70 [ 529.381739][T17920] ? __fget_files+0x184/0x1c0 [ 529.381763][T17920] ? mutex_lock+0x57/0x90 [ 529.381810][T17920] ksys_read+0xdc/0x1a0 [ 529.381840][T17920] __x64_sys_read+0x40/0x50 [ 529.381867][T17920] x64_sys_call+0x2886/0x3020 [ 529.381892][T17920] do_syscall_64+0x12c/0x3b0 [ 529.381985][T17920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.382011][T17920] RIP: 0033:0x7fcd51efd60e [ 529.382031][T17920] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 529.382119][T17920] RSP: 002b:00007fcd5098efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 529.382143][T17920] RAX: ffffffffffffffda RBX: 00007fcd5098f6c0 RCX: 00007fcd51efd60e [ 529.382162][T17920] RDX: 000000000000000f RSI: 00007fcd5098f0a0 RDI: 0000000000000003 [ 529.382176][T17920] RBP: 00007fcd5098f090 R08: 0000000000000000 R09: 0000000000000000 [ 529.382281][T17920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.382296][T17920] R13: 00007fcd521b6038 R14: 00007fcd521b5fa0 R15: 00007ffdbc5d2ff8 [ 529.382370][T17920] [ 529.664869][T17927] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4437'. [ 529.893524][T17935] bond1: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 529.907187][T17935] bond1 (unregistering): Released all slaves [ 530.133536][T17947] set_capacity_and_notify: 8 callbacks suppressed [ 530.133558][T17947] loop2: detected capacity change from 0 to 1024 [ 530.199414][T17947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 530.233199][T17947] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4446: bg 0: block 112: padding at end of block bitmap is not set [ 530.248491][ T28] audit: type=1400 audit(1320.210:7905): avc: denied { write } for pid=17946 comm="syz.2.4446" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 530.320955][T12299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 530.355375][ T28] audit: type=1326 audit(1320.330:7906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.2.4449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51f3cdd9 code=0x7ffc0000 [ 530.497139][ T28] audit: type=1326 audit(1320.330:7907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.2.4449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcd51f3cdd9 code=0x7ffc0000 [ 530.522699][ T28] audit: type=1326 audit(1320.330:7908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.2.4449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51f3cdd9 code=0x7ffc0000 [ 530.549872][ T28] audit: type=1326 audit(1320.330:7909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.2.4449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51f3cdd9 code=0x7ffc0000 [ 530.594724][T17961] loop7: detected capacity change from 0 to 256 [ 530.605861][T17961] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 530.638466][ T28] audit: type=1326 audit(1320.330:7910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.2.4449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcd51f3cdd9 code=0x7ffc0000 [ 530.667296][ T28] audit: type=1326 audit(1320.330:7911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.2.4449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51f3cdd9 code=0x7ffc0000 [ 530.724050][ T28] audit: type=1326 audit(1320.330:7912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.2.4449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd51f3cdd9 code=0x7ffc0000 [ 530.767026][ T28] audit: type=1326 audit(1320.330:7913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.2.4449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51f3cdd9 code=0x7ffc0000 [ 530.798307][T17970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4455'. [ 530.813602][T17970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4455'. [ 530.823107][T17970] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4455'. [ 530.858973][T17970] loop2: detected capacity change from 0 to 164 [ 530.876036][T17970] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 530.907526][T17970] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 530.956604][T17975] loop3: detected capacity change from 0 to 512 [ 531.043138][T17975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.211753][T17987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4459'. [ 531.246113][T17987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4459'. [ 531.258300][T13600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.259171][T17985] netlink: 'syz.4.4458': attribute type 3 has an invalid length. [ 531.874655][T18013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.909970][T18012] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 531.955468][T18015] netlink: 'syz.4.4466': attribute type 11 has an invalid length. [ 531.964529][T18015] __nla_validate_parse: 1 callbacks suppressed [ 531.964546][T18015] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4466'. [ 532.000756][T18019] xt_hashlimit: size too large, truncated to 1048576 [ 532.038634][T18017] loop6: detected capacity change from 0 to 512 [ 532.056784][T18017] EXT4-fs (loop6): 1 truncate cleaned up [ 532.063514][T18017] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.151479][T18028] loop3: detected capacity change from 0 to 4096 [ 532.168355][T18028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.224007][T18030] bond2: option miimon: invalid value (18446744073709551615) [ 532.232265][T18030] bond2: option miimon: allowed values 0 - 2147483647 [ 532.251008][T18030] bond2 (unregistering): Released all slaves [ 532.263071][T18023] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4470'. [ 532.274521][T18032] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 532.473903][T11196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.775423][T18069] xt_limit: Overflow, try lower: 2147483649/3300 [ 532.819454][T18069] netlink: 'syz.6.4485': attribute type 3 has an invalid length. [ 532.824591][T18047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4477'. [ 532.835511][T18069] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4485'. [ 532.949927][T13600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.317221][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4493'. [ 533.380660][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4492'. [ 533.416988][T18094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4492'. [ 533.805956][T18118] SELinux: failed to load policy [ 534.559071][T18130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4504'. [ 534.606929][T18121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4502'. [ 534.758351][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 534.758419][ T28] audit: type=1400 audit(1324.740:7926): avc: denied { ioctl } for pid=18140 comm="syz.6.4507" path="socket:[55776]" dev="sockfs" ino=55776 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 534.799828][T18144] loop7: detected capacity change from 0 to 512 [ 534.842452][T18144] EXT4-fs error (device loop7): ext4_quota_enable:7221: comm syz.7.4509: Bad quota inum: 2, type: 1 [ 534.858195][ T28] audit: type=1400 audit(1324.820:7927): avc: denied { write } for pid=18146 comm="syz.3.4510" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 534.858872][T18151] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4511'. [ 534.895406][T18153] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 534.910359][T18144] loop7: lost filesystem error report for type 5 error -117 [ 534.912226][T18144] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 534.919891][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 534.919918][ C1] EXT4-fs (loop7): initial error at time 1324: ext4_quota_enable:7221 [ 534.919969][ C1] EXT4-fs (loop7): last error at time 1324: ext4_quota_enable:7221 [ 535.031518][T18144] EXT4-fs (loop7): mount failed [ 535.044373][T18165] FAULT_INJECTION: forcing a failure. [ 535.044373][T18165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.077066][T18165] CPU: 0 UID: 0 PID: 18165 Comm: syz.6.4518 Tainted: G W syzkaller #0 PREEMPT(full) [ 535.077189][T18165] Tainted: [W]=WARN [ 535.077197][T18165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 535.077254][T18165] Call Trace: [ 535.077262][T18165] [ 535.077272][T18165] __dump_stack+0x1d/0x30 [ 535.077374][T18165] dump_stack_lvl+0x95/0xd0 [ 535.077395][T18165] dump_stack+0x15/0x1b [ 535.077488][T18165] should_fail_ex+0x263/0x280 [ 535.077520][T18165] should_fail+0xb/0x20 [ 535.077554][T18165] should_fail_usercopy+0x1a/0x20 [ 535.077588][T18165] _copy_to_user+0x20/0xa0 [ 535.077694][T18165] simple_read_from_buffer+0xb5/0x130 [ 535.077742][T18165] proc_fail_nth_read+0x10e/0x150 [ 535.077776][T18165] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 535.077874][T18165] vfs_read+0x1ab/0x7f0 [ 535.077906][T18165] ? tty_wait_until_sent+0x23c/0x270 [ 535.077935][T18165] ? selinux_file_ioctl+0x338/0x3b0 [ 535.077963][T18165] ? __tty_check_change+0x54/0x200 [ 535.078067][T18165] ? tty_check_change+0xd/0x30 [ 535.078092][T18165] ? send_break+0x101/0x220 [ 535.078127][T18165] ksys_read+0xdc/0x1a0 [ 535.078189][T18165] __x64_sys_read+0x40/0x50 [ 535.078223][T18165] x64_sys_call+0x2886/0x3020 [ 535.078251][T18165] do_syscall_64+0x12c/0x3b0 [ 535.078341][T18165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.078369][T18165] RIP: 0033:0x7fcf2a3ad60e [ 535.078389][T18165] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 535.078420][T18165] RSP: 002b:00007fcf28e46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 535.078446][T18165] RAX: ffffffffffffffda RBX: 00007fcf28e476c0 RCX: 00007fcf2a3ad60e [ 535.078466][T18165] RDX: 000000000000000f RSI: 00007fcf28e470a0 RDI: 0000000000000004 [ 535.078483][T18165] RBP: 00007fcf28e47090 R08: 0000000000000000 R09: 0000000000000000 [ 535.078499][T18165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.078515][T18165] R13: 00007fcf2a666038 R14: 00007fcf2a665fa0 R15: 00007ffcb82831c8 [ 535.078591][T18165] [ 535.592612][T18190] loop6: detected capacity change from 0 to 1764 [ 535.734695][T18197] loop7: detected capacity change from 0 to 512 [ 535.757497][T18197] EXT4-fs: Ignoring removed nobh option [ 535.786713][T18197] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 535.843755][T18197] EXT4-fs (loop7): 1 truncate cleaned up [ 535.862216][T18197] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.905475][ T28] audit: type=1400 audit(1325.870:7928): avc: denied { write } for pid=18196 comm="syz.7.4528" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 535.985010][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.086403][T18208] loop7: detected capacity change from 0 to 512 [ 536.226221][T18208] EXT4-fs error (device loop7): ext4_quota_enable:7221: comm syz.7.4532: Bad quota inum: 2, type: 1 [ 536.299219][T18208] loop7: lost filesystem error report for type 5 error -117 [ 536.300056][T18208] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 536.326787][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 536.334230][ C1] EXT4-fs (loop7): initial error at time 1326: ext4_quota_enable:7221 [ 536.344201][ C1] EXT4-fs (loop7): last error at time 1326: ext4_quota_enable:7221 [ 536.406820][T18208] EXT4-fs (loop7): mount failed [ 536.550569][ T28] audit: type=1400 audit(1326.530:7929): avc: denied { write } for pid=18216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 536.574637][ T3283] ================================================================== [ 536.583197][ T3283] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 536.591644][ T3283] [ 536.593984][ T3283] write to 0xffff888103761388 of 2 bytes by interrupt on cpu 0: [ 536.602016][ T3283] virtqueue_disable_cb+0x75/0x2c0 [ 536.607942][ T3283] skb_xmit_done+0x67/0x1a0 [ 536.612728][ T3283] vring_interrupt+0x2d7/0x310 [ 536.617614][ T3283] __handle_irq_event_percpu+0x8b/0x480 [ 536.623696][ T3283] handle_irq_event+0x64/0xf0 [ 536.628649][ T3283] handle_edge_irq+0x154/0x450 [ 536.633895][ T3283] __common_interrupt+0x60/0xb0 [ 536.639544][ T3283] common_interrupt+0x7e/0x90 [ 536.644852][ T3283] asm_common_interrupt+0x26/0x40 [ 536.650170][ T3283] schedule+0x41/0xd0 [ 536.654334][ T3283] schedule_timeout+0xca/0x180 [ 536.659195][ T3283] ip_vs_estimation_kthread+0x1592/0x19f0 [ 536.665191][ T3283] kthread+0x22a/0x280 [ 536.669448][ T3283] ret_from_fork+0x146/0x330 [ 536.674729][ T3283] ret_from_fork_asm+0x1a/0x30 [ 536.679765][ T3283] [ 536.682270][ T3283] read to 0xffff888103761388 of 2 bytes by task 3283 on cpu 1: [ 536.689996][ T3283] virtqueue_disable_cb+0x4c/0x2c0 [ 536.695515][ T3283] start_xmit+0x107/0x1a60 [ 536.700109][ T3283] dev_hard_start_xmit+0x12a/0x3a0 [ 536.705498][ T3283] sch_direct_xmit+0x192/0x550 [ 536.710450][ T3283] __dev_queue_xmit+0xdb9/0x1ec0 [ 536.715797][ T3283] ip_finish_output2+0x705/0x8c0 [ 536.721404][ T3283] ip_finish_output+0x112/0x290 [ 536.726991][ T3283] ip_output+0xbd/0x1c0 [ 536.731271][ T3283] __ip_queue_xmit+0xb68/0xba0 [ 536.736508][ T3283] ip_queue_xmit+0x39/0x50 [ 536.741138][ T3283] __tcp_transmit_skb+0x1c2a/0x20b0 [ 536.747142][ T3283] tcp_write_xmit+0x129e/0x36a0 [ 536.752516][ T3283] __tcp_push_pending_frames+0x6d/0x1b0 [ 536.758873][ T3283] tcp_push+0x311/0x330 [ 536.763256][ T3283] tcp_sendmsg_locked+0x24bf/0x2cc0 [ 536.769435][ T3283] tcp_sendmsg+0x2f/0x50 [ 536.773866][ T3283] inet_sendmsg+0x76/0xd0 [ 536.778434][ T3283] sock_write_iter+0x2c7/0x320 [ 536.783660][ T3283] vfs_write+0x5a6/0x9f0 [ 536.788165][ T3283] ksys_write+0xdc/0x1a0 [ 536.792512][ T3283] __x64_sys_write+0x40/0x50 [ 536.797386][ T3283] x64_sys_call+0x27e1/0x3020 [ 536.802287][ T3283] do_syscall_64+0x12c/0x3b0 [ 536.807114][ T3283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.813939][ T3283] [ 536.816449][ T3283] value changed: 0x0000 -> 0x0001 [ 536.821747][ T3283] [ 536.824333][ T3283] Reported by Kernel Concurrency Sanitizer on: [ 536.830754][ T3283] CPU: 1 UID: 0 PID: 3283 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 536.842486][ T3283] Tainted: [W]=WARN [ 536.846291][ T3283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 536.856888][ T3283] ================================================================== [ 536.953719][ T28] audit: type=1400 audit(1326.920:7930): avc: denied { write } for pid=18237 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 536.990915][T18240] loop6: detected capacity change from 0 to 1024 [ 537.060931][T18240] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.091493][ T28] audit: type=1400 audit(1327.070:7931): avc: denied { write } for pid=18239 comm="syz.6.4538" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 537.131683][T11196] EXT4-fs error (device loop6): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /409/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 537.183415][T11196] EXT4-fs (loop6): Remounting filesystem read-only [ 537.195065][ T28] audit: type=1400 audit(1327.170:7932): avc: denied { write } for pid=11196 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 537.239970][ T28] audit: type=1400 audit(1327.200:7933): avc: denied { write } for pid=11196 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 537.272249][ T28] audit: type=1400 audit(1327.200:7934): avc: denied { write } for pid=11196 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 537.327869][ T28] audit: type=1400 audit(1327.200:7935): avc: denied { unlink } for pid=11196 comm="syz-executor" name="file1" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 537.499049][T13058] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.577649][T16891] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.627494][T16891] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.687479][T16891] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.737306][T16891] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.833866][T16891] bridge_slave_1: left allmulticast mode [ 537.840159][T16891] bridge_slave_1: left promiscuous mode [ 537.846665][T16891] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.855287][T16891] bridge_slave_0: left allmulticast mode [ 537.861510][T16891] bridge_slave_0: left promiscuous mode [ 537.867498][T16891] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.977949][T16891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.987991][T16891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.998081][T16891] bond0 (unregistering): Released all slaves [ 538.006414][T16891] bond1 (unregistering): Released all slaves [ 538.141812][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 538.276346][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 538.408794][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 538.542911][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 539.191588][T16891] hsr_slave_0: left promiscuous mode [ 539.198670][T16891] hsr_slave_1: left promiscuous mode [ 539.204593][T16891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.212736][T16891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.250377][T16891] team_slave_1 (unregistering): left allmulticast mode [ 539.258001][T16891] team0 (unregistering): Port device team_slave_1 removed [ 539.269348][T16891] team_slave_0 (unregistering): left allmulticast mode [ 539.277035][T16891] team0 (unregistering): Port device team_slave_0 removed [ 539.312153][T16891] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 539.321602][ T3932] smc: removing ib device lyz2 [ 539.568856][T16891] IPVS: stop unused estimator thread 0... [ 546.478621][T16893] bond1 (unregistering): (slave veth3): Releasing active interface [ 546.489560][T16893] bond1 (unregistering): Released all slaves [ 546.500451][T16893] bond2 (unregistering): (slave veth5): Releasing active interface [ 546.511977][T16893] bond2 (unregistering): Released all slaves [ 546.523374][T16893] bond3 (unregistering): Released all slaves [ 546.535143][T16893] bond5 (unregistering): Released all slaves