last executing test programs: 10m44.067753568s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r3, &(0x7f00000001c0)={0x2a, 0x1, 0x8000}, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000013, 0x4c032, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xe, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc5, 0x0, 0x1}}, 0x40) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x3d5, 0x4, {{0x11, 0x4, 0x3, 0x1b, 0x44, 0x64, 0x0, 0x6, 0x29, 0x0, @multicast2, @broadcast, {[@generic={0x44, 0xe, "d87bb5208a0ae836fec71cc7"}, @timestamp_prespec={0x44, 0x4, 0xaf, 0x3, 0x7}, @timestamp_addr={0x44, 0x1c, 0xe0, 0x1, 0x5, [{@broadcast, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffff000}, {@private=0xa010100, 0x4}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @void}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r5, 0x0, 0x0}, 0x10) syz_clone(0x44063100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) epoll_create1(0x0) 10m42.182779747s ago: executing program 4 (id=6): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80000000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x488a80, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ptrace$ARCH_GET_FS(0x1e, r4, &(0x7f0000000140), 0x1003) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 10m41.707148192s ago: executing program 4 (id=11): socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x24040010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x17, 0x0, 0x1b, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001200)=""/4072, 0xfe8}], 0x1) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {}, [], {}, [], {}, {0x20, 0x1}}, 0x24, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x104d, &(0x7f0000001080)="$eJzsz7EJAkEUBNDZU0RZLMOSLMIuzmoUAzswsSAzMVRWhdMCRA7eiz4zw8KGP1t+3NdFckvZJ6nHZ1J2m3fXnZPajnmLU1719OutviZdTtkmq6EaNn2Sy302SVskWR9++DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGI1HAAAA//9Y7AtD") bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() 10m39.489404562s ago: executing program 4 (id=17): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x20, 0xfff8, 0xbfff, 0x18, "ec28a144f13d7607"}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28491, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x800007}, 0x11a02, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x400, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pptp(0x18, 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000600)=ANY=[]) perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x80, 0xff, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000200), 0xc}, 0x2000, 0x6112, 0x4, 0x3, 0xd, 0xac3, 0x2, 0x0, 0x2, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4000, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6, 0x200000}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x5}, {}, {0x0, 0x10}, {0x5, 0x470a, 0x0, 0x8000000, 0x4000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x1, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xf, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {0x0, 0xfffffffe}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x80000}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x2}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, {0x1, 0xfffffffc, 0x200}, {0x5, 0x0, 0x0, 0x200}, {0x7}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x5, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x100000, 0x0, 0x0, 0xec33, 0x0, 0x4}, {0x3}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {0x3}, {}, {}, {}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x12, "1b09000040000080000000f678000000001000"}) r5 = syz_open_pts(r0, 0xca440) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x44) 10m34.290270495s ago: executing program 4 (id=29): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x20, 0xfff8, 0xbfff, 0x18, "ec28a144f13d7607"}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28491, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x800007}, 0x11a02, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x400, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pptp(0x18, 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000600)=ANY=[]) perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x80, 0xff, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000200), 0xc}, 0x2000, 0x6112, 0x4, 0x3, 0xd, 0xac3, 0x2, 0x0, 0x2, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ppoll(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)={[0x2]}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4000, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6, 0x200000}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x5}, {}, {0x0, 0x10}, {0x5, 0x470a, 0x0, 0x8000000, 0x4000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x1, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xf, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {0x0, 0xfffffffe}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x80000}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x2}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, {0x1, 0xfffffffc, 0x200}, {0x5, 0x0, 0x0, 0x200}, {0x7}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x5, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x100000, 0x0, 0x0, 0xec33, 0x0, 0x4}, {0x3}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {0x3}, {}, {}, {}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x12, "1b09000040000080000000f678000000001000"}) r4 = syz_open_pts(r0, 0xca440) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x44) 10m34.271248196s ago: executing program 32 (id=29): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x20, 0xfff8, 0xbfff, 0x18, "ec28a144f13d7607"}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28491, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x800007}, 0x11a02, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x400, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pptp(0x18, 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000600)=ANY=[]) perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x80, 0xff, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000200), 0xc}, 0x2000, 0x6112, 0x4, 0x3, 0xd, 0xac3, 0x2, 0x0, 0x2, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ppoll(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)={[0x2]}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4000, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6, 0x200000}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x5}, {}, {0x0, 0x10}, {0x5, 0x470a, 0x0, 0x8000000, 0x4000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x1, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xf, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {0x0, 0xfffffffe}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x80000}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x2}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, {0x1, 0xfffffffc, 0x200}, {0x5, 0x0, 0x0, 0x200}, {0x7}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x5, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x100000, 0x0, 0x0, 0xec33, 0x0, 0x4}, {0x3}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {0x3}, {}, {}, {}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x12, "1b09000040000080000000f678000000001000"}) r4 = syz_open_pts(r0, 0xca440) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x44) 3m3.312447925s ago: executing program 3 (id=3454): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x2, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) mkdirat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/route\x00') lseek(r2, 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f00000001c0), 0x5, 0x4c6, &(0x7f0000000840)="$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") chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x20, &(0x7f0000000340)="c5f57724d0e33b90b1c156936b696f2fcd0517ee9d8b5bf08d1f0bd7066b93c45f8c4b82e1c404f2f0a9f8f1ffafef7040371dde14e32b6e53b30cc20ce28f41fd4cfc2819867c21526edc34ff2cd9c62e7dab539a2420b5b3fa406ff5433a9babf24338728aaeb1b8dc02e5e20aa9e22d7ee88776a286fd207727d206c7ec3cc515ae8a7493d428683606bf1658e7f15283160416fdaf9047d47d876a975ce7ea00496a0f7d90a05d34290ebb9b79", 0xaf) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_audit(0x10, 0x3, 0x9) r4 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = socket(0x400000000010, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4}, 0x0, 0x3e, 0x0, 0x4, 0x2, 0x7ffdfffc, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) 3m2.999840885s ago: executing program 3 (id=3460): syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40042, 0x14) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x400000000000, 0x0) syz_usb_disconnect(r0) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000740)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES64=r1], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m1.796618392s ago: executing program 3 (id=3472): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048801) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f0000000640)=ANY=[], 0xff, 0x2b1, &(0x7f0000000100)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x0, 0x46, 0x0, 0x9}, 0x28) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8088, &(0x7f0000002480)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf82361822eb323a71384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084df56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8, @ANYRESOCT, @ANYRES64, @ANYRESDEC], 0x3, 0x232, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x880, 0x104, 0xa}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="180800000000000000000000b974000085108e991b47760800766f78db9bd59e98735e63c146d151baab701dbd604e", @ANYRES32, @ANYBLOB="00000000000000002e800000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000280), 0x6}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) fgetxattr(0xffffffffffffffff, &(0x7f0000000780)=@known='security.selinux\x00', &(0x7f0000000880)=""/138, 0xffffffffffffff98) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'veth0_vlan\x00', {0x2}, 0x3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x38}}, 0x0) r6 = socket(0x5, 0x5, 0x3) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 3m1.702147625s ago: executing program 3 (id=3476): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000001740)}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000002000)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r0}, @jmp={0x5, 0x1, 0xb, 0x6, 0x3, 0x8, 0x10}, @call={0x85, 0x0, 0x0, 0x8a}, @alu={0x4, 0x0, 0x3, 0x9, 0x0, 0xffffffffffffffff, 0x59a40bf8483a8968}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit], &(0x7f0000000240)='syzkaller\x00', 0xd, 0xe8, &(0x7f0000000340)=""/232, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xd, 0x0, 0x80000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x1f, 0x0, "fec34e77f1263643b52aa7beb3171ddb9cbe0cfef7c87cb4af8b03bc9f40e8d97a8de1e0af2e350dce1d05f076b9cb42ce8acf171c1499fd401e7e756a5653ea39b4ecd9805ee428eb40cef5df6ef362"}, 0xd8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff}, [@call={0x85, 0x0, 0x0, 0xa0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000140)="9b7d589f668f4113c16a6297df66", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) prctl$PR_SET_TIMERSLACK(0x1d, 0x1) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) set_mempolicy(0x4005, &(0x7f0000000000)=0x7e, 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) r8 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r8, &(0x7f0000001000)=""/4075, 0xfeb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001680)={r1, 0x0, 0x9, 0x40, &(0x7f00000005c0)="e03f07fa736baa3913", &(0x7f0000000600)=""/64, 0x41, 0x0, 0x8, 0x1000, &(0x7f0000000640)="8ea4e04adf95065c", &(0x7f0000000680)="5e9c35d76b2eb347c551ecdc63c8b3054cc903173c8ab02c0602ec431c8a26ac3576fb121cbcd5454fc8796b115c7e3b1f8a44774db58163c7d4ab3966a51f020179cc4c218f45b6336b76c9bfb8e5cdd39a2b65f3d2ce3242721345fcf70d598076893cce54f4e2d9a5b47f801f40661197a7279034ed0aed178a473afcdbfee63ed0e76c192e15055d98ad5453d1f55a0e93c9d2fb26c4560832818ee404a4e05c7b71cc75918d2528fa17ab8ce05d765ee0f72c42fee1732bf1a4067bf28d19117c92e72f7f7f4cb156e570cef5a238dc5040206d7ca10bf9f722072e36c6b5ed67a070e700c745d807a5a4afd700bcb0a47e50330f28b592b1f36a100e0a48abe984af6626938cf38c0c0d1206f577e861d1f253a11ec199db5282514cab1dee284624e66622c937f6e9c3e4963cdcfe0930d141e374768b2f3a703db32ba95027b98f7d421e2ff8db71fabb8d83911ac7222798ccfcaa06894592a3ecf232f447b46db91257d1ba74e7c3d9395cfd33f9b5fcd019be226943511f94946ca6f452a476284de9fbb4b22f72c01bd96d011434d09fa8271ab6f1c968e0875dba2b9553a3140f129e57f70447feb8475c4db17c0712ef36a1ec0b720c948b898148d1e65d8f3ae01760bd48e962cea051cc7e756b31862440252a746ab5f61cdf700ff37379f5ff4e7a088216fcff5c4fbb25b5c4275b13e411b41dead7d2d6d77cd30b3cd67b79ec907ecdc242b67ed252bad38126e4204b925a99f6b4110527c9213be5d1254cb4afd7d8df261d64dd4c00b44576edf3a6d25c1c8657ed777be3f97c9b7c7bf6f420cc061394da572732143047345d8cfec5fe38bc1d4eec1fc7f23250dae0924e97e2ed0d46a838bc360b843e1de6185abdfe9172ea866fd2f8461671d21568879cd455ad9dcfb3f7eb6ba059f88c15bea7ee19d592c21d53394e36c31655dc939080b1824dae5af7e690892671465284b29cf4fb555739bee68a7fd1fcf4c9dc566b8c914dfb9c202970611b4a9a27f7a1a7f844c461b5df22b4ea8e9a468c82d9d27ec83cab512b733ae1ef993e4b0780fc96671ba1e0b9ca2df22b56b4813bde2960a9ca354935b873ff4d3bb7eea5dd348548b4d0cf904fe5a10201a530d1a177cb68eb574ae1780941a861723045acd1df0616edd35245ec719c453e32cbae7801cc5e58aa28206249b0aaa53089a6133716219f220210b7c4976ec7e97f8ad20c4bc213c5d48098e486f1f9a12b2aea653e5af1c527e47c2f6ba440af4f50a6c2750926626edc29175755468cf4b6d6449360c879031fa5fa1d9c16bc0e9a18e8d5621654381a5b75ce8f1300e21dd513556f40e14f3f9afd4238c9180cf99960ce35b1556db79c864feabb16321fa78b2026b9a29073cde78a683496dca9d11ab8609eceb6f456858937c2604374a33b5f4f99657cc0c7ddf6ffacdca2ff8443941f63fe2d6a4734041b8c566d475035f43453b791069ed18f871bce4f63261de81754229c0ec451d28926e655fb16e2815e0737bbf16c7cbb9d61c0ab4e2fe8db06723c8f78fbb198f858224480cb62d99f352f26fb2b9e1f2b2491c10873d579cda07275bde339eb7b8e137cda24c8c15dc83b8ff5bc7db5ab3ead510202c98c5cbfcf112799c1a65898e682ac6d2d1a6380a1466758c494d24c3bacc1bde9d96eb8f0ab1850ed2f7a2815820dd3d406234e351b2a4dac50ae216197c50ae359fda8fc175ac4d91b285124d50b8a0b4a54a4844eb3ce0d59655342b207755528efd9b18efc1327df177ef23dcac2a6ad7a7ef208042a1a9bde1355f1c32626880daa904c0c49ed4f3d51308e3ff38099ec5921e4b7ea1831f9e468add9d3e283f0d174e00268b91c2aae1270f75b6be24acc344450f852eb1916a9c0287adf1e2cb033abf5d35b16f9e96840a7e496037de62c07bc6a26074d7994006de0752d0ee86ae79afb78dad719c96ff68dbc89499d30c15b5ee63a91ac60b4f3a68db419a7aab3993664df27db835a23e109df79301115fe983607e48b6494faae398c720da9c2a8b0086f3903d6e1c0f8d40b7991ba0063dde75bf664a8a0541a1e9719e923b6b40ed39d49504d8c812b493e4ac3cfe1948a307e5bd8a1747cce001571b7126077ca2563a0f148f9894c08b5f169dcd134f630c3f6d38c8d56b39809c3ceb60d637af9aaaedef672c7d67b95c8eff9d0e60a8c2618555e2a289fc1b54b42c6d9803e3a03ec1016885564f3083d9362e7aee9f22250c08abc411114cb811883299bd6828aad7a591d6463d92fb7922cf372d2c95ac3d58b67c5ea79b6667b14964ef16f4194a3e7db51a3d5aa80c57971866b8bfff5a5682d951376d4de6c393f86ac316f6177025ccbd528ebbc50639b1f16f20240e786d28a0bbd0f52b5bf8910af312e5f06d0e4605d87d8c2a233a4ed47d03393cbc4de559572a2aceb0678e49cc863ea0ae083c41ddb7c5f5579197232c47edbf7a14f8e4bb7a5fd1ad5f67a55308916425b4ee2a9e8639513fe79b93c5ff8b0db9e0ab67325766de114f5212126aaec0b5599602ab9bb58f8eae15a10cba8cc1076bb7daa2f793ec4075494c025b5773c2b69b434ea165ad09079a78e989f572ec31efdaa8de3e2ee215efbd5c809a043fe557fe8bf8e4973218854b571609d036b1c448aece7da48df393d5f2207abf364ca5b4684650f8760cc8066226826fd51c0ae3427c57cf5a67bd93f87b5ae07165f8801f6c0a113b08a37d9974a860a382ad6aaf3559ceffb586e7b2debeba9282db6200f3af67ebd7cf337b77ea7f3073ec4d58a96c02c8acea06521a74d5d3bba6c121fbc3fddad62d7cad75a0f4abed32a51d1f42309081250d611eb5a5f52c431982b30d60f2fd38fb05d15147ad656fc1b365b703fd5a62ac1ab99fb86bd5e028b7e9e0728e278d2087d1d0f95aca9b37fc2d3a57caf9ef02dad14f8199cf8e6c6e97a3c0da59bdec43e818e19b1a738b5495bce6c310844cdf238919f284c6a06607f4cbfbf55552b99bfdd2cd0540817f2825d008085034d601f3f937633f2c020b4d6d418c544ca863b5c091d8d6a1dfbcfa7d661e00bba690f783d85a624a23d6459dedd5465cb62d87538c458719dcc77d9243c4c60ba6345c5df289c8eafdaabe7c8e36d2b37d5f0c17711ee182fd775b50b150b6d63794b228ecf59e2997f0b5b3a9d10392b65164db58ad1cee2e6fe28791c330e083a38d111a68aa9523d8e4587a4282842d952d3e131dccfefa87ee695983f83c1debc1be55e37b383f4f8fda4e3c2edfbf53e64c06412f3742d2b8a0ea0c6159b6b6827ef1871c68ffb21281f9521d0b4ac890c99692b449e6be694110420f10f4d54c3e96794512118df6ecce6ea44a3c5a2142faadebf8f7cce6161b4e0777cd685ca32c6307fc1d34a7b47e2db95cef62c2fb64ff3de223a5e79dd28ad85697ffd788773d2c25434569f384f086fa35ac13e3b5b8351b2851f527a3dd82a2ed5021c748d4340302b16eafaad9002d21a004930fc6c267a96b4f3c60221cd4d3e81e326426c359c95e7fd15d795728fcb9f48734f7d8d095ffc0101b67650c1e0131e631513d2c4a38811d804540ca553c0420a3c7c349da7da7e40df13a3552dc4fcfc0fe8fdde299efca3118c773a3f86b02323230c3e19b525887284280fa3439c9f7ad02413306d0837707891ecf57ab2e6c342c398831f2b3131e6f8e29f07e95e5e9ac36fce42f6c3e593d14e2462cf994063b0877c891e437311acef3cc128d18dac6a3e2e84f743da86e9f599e51a77dc79b0419579c72ae6d20943e3ee45ccaf35b9c79c766b1f790671c4ea0d17292fab870caf02c3d04093d562dceb606688c58ab131d2de12d09304c3edb22eecc8965a33b389176b7fb0de62f15a94bf63ee2d472f6d880c8c46eb53889b8a01b3ac8a316c3cbd5ef6e350dc9f43dcce1a741fca6db8dade561b42b29a564ce3bb87b09f3c7cad4e25650e70eb18a06ba6ca2c0f488fa261ae0b4b7946ef3c0dea2717d454dfa911af7feff08662157f7c05bd8c4975f0c399acaf8d25f1f9267048b30b1159e7246b7e81cc25c78c59706c940026c9a6d05a5a28d13572e81b3a2d896bedb5d78f036854b00b40472dd1f3e7a4807a2d0206600da12ea1828de481219869b992980aef22555dc0d533e8a308ab62be985d4cb686b5ccef88aff7f3d425ae31886f3f6a16bf18aef77ebe80cca0eb1dcfa9ba84379b04f11a0b454755067f923392f34710da49b8e5f51d48582e7e2fd0f946147fd48e2110e3b3411167a5a94ab0b912b06a510123fed47600be870b740c676686aa9ddd7f38526b26a5eac03318b7804918b4b6cada26fcb7dbb626775adf2738297135499cd7cd45c2c33c56a5827c588afa29157e7a1fc4acbc52f581a7210ebb90cfd665fd0a0f1c884a77a739e96e90a044540e39430d56942331ec797824d48d68d1c8d6a5093cdaa40985e3fdb05696316ff704370cb30aea58e91c7aa29436bb636b51de31015aa502a0862e6fb0e5cb41fc5e0994520671f103109cdc17d00fa69876ab3c8cca8eefc943449926bcb64ee649bb63a267a4f56e0310b83a22e84737e26e0849290a6142bb6774735d2dc3a7b7af85848a77d60e19dd3ca9c0642fc26ecd89eda7455ab6cc4f5762c3d4edc0196c09adde11c8c4b72bd69b78682b53aa5c82afc14adbb5a03dc96395fe4307fedc1d5778c8d303acbb4337cbe3a39370812f6b64ce91f60bbd89298305f4ad8b0514752f4b48e2eb6dd0e126852bc92a045031e97ab1ec64f8fdaeff6d9ef0d91dd57cd56329cdc27c9c08e6ec271095e9e249d34172565287e810ed2dd3779302b451cb7d06b8912e77f646d23f5a1f1b0c6192b3fc08680c6b29f64c3be0710e6a7b764a689b4c36bb95a1def1b1451115a6abee965c82916801de5c6917050bac6255705e49246c15cf99a5d28814d32751583f33f8d658c0c37a6a16192bca1289c3560d67a3c809a315dfbaa729d948ee3d1d0fe0fd3c329969959717667778ecab3fa2a66d520524524b83e5b3ed92b7df6781082ecdebef496fe7e9d377fc6ecd90f49639d7d8cd55b009884e53e39ceaac5bc64bbc958cefb1d9c0dbc8afad9a35c7d80b8a91184b94e8a7ef9c6cba1e7afc01f59cd821e24984003f2bc2d83c5e871852eba29a8b7ea5f05bffc3bf3d087ce04d0c9451bfb1c64e0d4dc598704a9b517e8ab0594537c9ab45d9c4778e21228834e9b972205b50b97ae4c8c9b38835a42a77c7fbf8ccb239eb802bf3c6eef1a285bbc65cdaf6ec2bf55368a9caddda0fd5a666f56ab0253fbc0e4786075ff64147d4c3ab01089cd6c02187313bb0294f7379ecf77fded567f75dcb6d2ec6f793951378ee6e56dc18b0be2c4e602e211f7dd95302a9102d0ec2a204437a9b09e6ea0778c1dba032cda11690f95bd4d58419e7080dd891a7c957dcc025782ed3affdae4b36fb1858c138d4d86e13c0ba75a4886655f11e73478e65b656f3f5ec942763ec54ec39540214f84a4bcce73eb42dcc37508a0d9c2e5cc1da8322181327551b4f3899cf85a3cd78573b88100c299b91435f35624537cf3db82a660240a60e07b4345f3ae554b05a4ef4c3d6040ef604cbdff84c247bbecb15b2436474999c2726c66896bd8b56c0fd0057efbbb41e21c4ad4902078215d79c3bea3c342d96beb754233d28b841716012040e178770bfcb097d4062bcf2cd821ae538b9925bdea2e344bbbe467562d842b7976244ca", 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000001e40)={0x8, &(0x7f0000001d40)=[{0x9, 0xa0, &(0x7f0000001840)="701e08efa6b029b24df06d8218bc80c072f770a5582fa81416af4dff2ee9a4e9a258d4f7b01541e7e4d757e6301e33110e2320ff7eeb53602eda4c31a020ffc948e2d4f11d156d6fc0d8f9aace26ae297c4c63a680a35110ca7dc7853fc2b1440d87188b1a803a09d4cf09c1b372835e105014cfdb700d85868db2b84718fc8bece86d9206e9ee3327974c712a31eb64cefadca0ba9636a21adde30a23d99bb0", 0x1}, {0x1, 0x84, &(0x7f0000001900)="10b98bfd74926e2fb51705614a16db45e28452e44160f50dbaaa1a2d0216abd71a0484ea6828f9a39962df4126c9d22a614d55a1305fd7944a73192b8af0f5c0b7f2ce703fc7cf2244ad421e9105d9cbe01996f87cc44accfd9e7c86615fee63e0d23ec01e7fa00cfe88d20a548a269411683c4e4d667da8d7e8c6adfb4b65e4bc416390", 0x1, 0x1}, {0xc, 0x86, &(0x7f00000019c0)="b5d4de494dc202af1ef50d391e4af6cd3b68e155ae7405c6e21fb1bcc6aaa8248104c56a23f1d2e2d4785b81cab15491e355094a15fe6a9a0513a7e6a3471f518805d70fc62d9cba6c7c7736704198c8e0fbacc538368d503d0929378949b8a7b66cd99a16b4790b30e942316d824b6ac4a1ad8dec5e5809c33df786173ba0d411ce596cea45", 0x0, 0x1}, {0xffffff0c, 0x94, &(0x7f0000001a80)="cb0308a18f2bacb7e47c340ac120bf13f836a49f0b19d050f2046c3738df084cb066811ffea5e2cccf87387255110a19e0888668d99bcb34afe5000d9d82bc3bd0b8b3eafa2e6d5f3eb44dac7b9a7cc3fe116be5ab4ca3590b51021c7298875e15b9d8176a74e5a7a92e365d957d5726399d7d651a2f461bf71e8262e023b3365000542918dc1971f101cc7861fed99ea805a724", 0x1}, {0xd8, 0x66, &(0x7f0000001b40)="05e9125e3cda6c45bf194533b5dd4e6a6c9d31e05c77ec33a583ecef384a087da317dd39b9cee12e50b8860e65ebffaa825cf51f0c7b469c07d72c0b7b451e53e0fa9dfde437fef6eb6b78cf9a3f91a721b21da4b51db985f7125961314e20e5f9b936fe5df9", 0x0, 0x1}, {0x1, 0x55, &(0x7f0000001bc0)="231e319a09dfb21abc31ed8e115c8ed9a9bf0fcee532108c5995f48108822a013b7a0c5a79b82a6eead85d6b2f8f47356d4898ea2ea90e636d68ec02c5e08e29588ec2ea102acdfd8b2f80dada03a41509f06c0909", 0x1}, {0x7, 0x48, &(0x7f0000001c40)="5f0284b77efd0001a2c76d3c66b135a3616a477824d027df479d4d3022c88aa90cbb4bfd721b26b3c8ebc27c31e7a563090f136f1ebfa418e1a3f8c27c28a9f9502c11703d1072a1", 0x1}, {0x0, 0x4a, &(0x7f0000001cc0)="c080c790241f232d404ff77d94811c2e1a0d96586a60af35672d0440af95eb56df57406ee2bf47f10e40ca00179e27bbfcae33412e473c95cb912634200d0734be97bd9d7ab1213f32b6", 0x1}]}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000100)='./file0/file1\x00', &(0x7f0000001700), 0x10040, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@version_L}, {@nodevmap}, {@mmap}], [{@uid_lt={'uid<', r10}}, {@obj_role={'obj_role', 0x3d, '\\].-!'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}}) ioctl$USBDEVFS_RELEASE_PORT(r8, 0x80045519, &(0x7f00000020c0)=0x1000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000002080)=0x2) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) ioperm(0x0, 0x3, 0x6) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) 3m1.560347829s ago: executing program 3 (id=3479): socket$inet(0x2, 0x2, 0x1) r0 = semget$private(0x0, 0x4000000009, 0x0) semctl$GETALL(r0, 0x0, 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$pptp(0x18, 0x1, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70000000020605021c0000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000001c02080006400000000005000500020000000500010006"], 0x70}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3m1.302845998s ago: executing program 3 (id=3482): syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40042, 0x14) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x400000000000, 0x0) syz_usb_disconnect(r0) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000740)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES64], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m0.852977881s ago: executing program 33 (id=3482): syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40042, 0x14) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x400000000000, 0x0) syz_usb_disconnect(r0) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000740)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES64], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m41.279399632s ago: executing program 5 (id=3670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) 2m41.197373245s ago: executing program 5 (id=3671): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x31e204, 0x1000, 0x40, 0x0, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r3, 0x7, '\x00', 0x0, r2, 0x0, 0x5}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xf21e4000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x4, 0x5, 0x3) ioperm(0x8, 0x4, 0x7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000004c0), 0xd0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/201}, 0x20) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001e40)={r5, 0x1000, "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"}, &(0x7f0000001e00)=0x1008) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$netlink(0x10, 0x3, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @multicast}, 0x10) bind$netlink(r6, &(0x7f00000006c0)={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x12000) 2m40.832148306s ago: executing program 5 (id=3676): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40440, 0x3) socket$phonet_pipe(0x23, 0x5, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe"], 0x408100) 2m40.666476131s ago: executing program 5 (id=3681): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x48341, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1a00048, &(0x7f00000000c0)={[{@shortname_win95}, {@shortname_mixed}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@numtail}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@utf8no}, {@shortname_lower}, {@shortname_mixed}, {@utf8}, {@shortname_mixed}, {@utf8no}, {@shortname_win95}]}, 0x3, 0x35a, &(0x7f0000000380)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', &(0x7f0000000300)=""/187, 0xbb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r5, 0x4) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') pread64(r6, &(0x7f00000000c0)=""/102379, 0x18feb, 0x94d) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x30, &(0x7f0000000400)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704adea8eddbc4d7200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m40.562953414s ago: executing program 5 (id=3684): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, 0x0, 0x40) 2m39.166353228s ago: executing program 5 (id=3694): r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x800, {0x0, 0x0, 0x0, 0x1, 0x8002, 0x0, 0x0, 0x20, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) 2m39.144381818s ago: executing program 34 (id=3694): r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x800, {0x0, 0x0, 0x0, 0x1, 0x8002, 0x0, 0x0, 0x20, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) 1.904382251s ago: executing program 2 (id=5045): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="09000000e7001400000000803500df8000000088a8000800274e88a8000000", 0x1f, 0x4044800, &(0x7f00000000c0)={0x11, 0x88a8, r2, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x48}}, 0x14) 1.886382311s ago: executing program 2 (id=5046): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2e22, 0x20000000, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet6(r2, &(0x7f0000000600)={0x2, 0x6e23, 0x0, @private0, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x5c}}, 0x24040084) 1.810803894s ago: executing program 2 (id=5047): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x31e204, 0x1000, 0x40, 0x0, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbc4252c0000002000018008000100", @ANYRES32=r1, @ANYBLOB="140002"], 0x34}, 0x1, 0x0, 0x0, 0x8811}, 0xc080) 1.798301544s ago: executing program 2 (id=5048): accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x80000) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000d40)='ns/time\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x2, 0x9, 0xf07, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffffa}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20002010}, 0x24000880) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$phonet_pipe(0x23, 0x5, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8e, 0x80000000000000}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fgetxattr(r3, &(0x7f0000000200)=@known='system.posix_acl_access\x00', &(0x7f0000000440)=""/65, 0x41) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r4, 0xfff) accept4(r4, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16, @ANYRESHEX], 0x15) 1.522662932s ago: executing program 6 (id=5051): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000090c0)=[{{&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000002340)=[{&(0x7f0000000480)=""/207, 0xcf}, {&(0x7f0000000b40)=""/222, 0xde}, {&(0x7f0000000f00)=""/121, 0x79}, {&(0x7f0000000f80)=""/95, 0x5f}, {&(0x7f0000001000)=""/75, 0x4b}, {&(0x7f0000001080)=""/44, 0x2c}, {&(0x7f00000010c0)=""/123, 0x7b}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x8, &(0x7f00000023c0)=""/56, 0x38}, 0xb}, {{&(0x7f0000002400)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000004580)=[{&(0x7f0000002480)=""/238, 0xee}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f00000045c0)=""/206, 0xce}, 0x9}, {{&(0x7f00000046c0)=@generic, 0x80, &(0x7f0000004900)=[{&(0x7f0000004740)=""/108, 0x6c}, {&(0x7f00000047c0)=""/33, 0x21}, {&(0x7f0000004800)=""/20, 0x14}, {&(0x7f0000004840)=""/152, 0x98}], 0x4, &(0x7f0000004940)=""/38, 0x26}, 0x80000000}, {{&(0x7f0000004980)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000004a00)=""/43, 0x2b}, {&(0x7f0000004a40)=""/108, 0x6c}], 0x2, &(0x7f0000004b00)=""/142, 0x8e}, 0x7}, {{&(0x7f0000004bc0)=@can, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004c40)=""/98, 0x62}, {&(0x7f0000004cc0)=""/216, 0xd8}, {&(0x7f0000004dc0)=""/79, 0x4f}, {&(0x7f0000004e40)=""/104, 0x68}, {&(0x7f0000004ec0)=""/32, 0x20}, {&(0x7f0000004f00)=""/5, 0x5}], 0x6, &(0x7f0000004fc0)=""/252, 0xfc}, 0x200}, {{&(0x7f0000006500)=@rc={0x1f, @none}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006580)=""/47, 0x2f}], 0x1, &(0x7f0000006600)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007600)=@caif=@dgm, 0x80, &(0x7f0000007c80)=[{&(0x7f0000007680)=""/3, 0x3}, {0x0}, {&(0x7f00000077c0)=""/200, 0xc8}, {&(0x7f00000078c0)=""/199, 0xc7}, {&(0x7f0000007a40)=""/123, 0x7b}, {&(0x7f0000007ac0)=""/134, 0x86}, {&(0x7f0000007b80)=""/195, 0xc3}], 0x7, &(0x7f0000007d00)=""/122, 0x7a}, 0x3}, {{0x0, 0x0, &(0x7f0000008080), 0x0, &(0x7f00000080c0)=""/4096, 0x1000}, 0x6}], 0x8, 0x40000122, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 1.2919734s ago: executing program 0 (id=5052): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x31e204, 0x1000, 0x40, 0x0, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) gettid() sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbc4252c0000002000018008000100", @ANYRES32=r1, @ANYBLOB="140002"], 0x34}, 0x1, 0x0, 0x0, 0x8811}, 0xc080) 1.248027711s ago: executing program 6 (id=5053): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000527000/0x2000)=nil) r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) 1.181724563s ago: executing program 0 (id=5055): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netstat\x00') lseek(r0, 0x1000000, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) fallocate(r1, 0x0, 0x8000000000000, 0x8) r2 = perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0xe8060, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x2002, 0x32, 0x7, 0x4, 0x9, 0x2, 0x0, 0x0, 0x7ff, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x30, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20) r6 = socket$inet(0x2, 0x5, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000040)=""/140, 0x8c}, {0x0}], 0x2, 0x2fd, 0x4) recvfrom$unix(r7, &(0x7f0000000000)=""/237, 0xed, 0x100, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 1.172023704s ago: executing program 6 (id=5056): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="09000000e7001400000000803500df8000000088a8000800274e88a8000000", 0x1f, 0x4044800, &(0x7f00000000c0)={0x11, 0x88a8, r2, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x48}}, 0x14) 1.148763044s ago: executing program 0 (id=5057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xd, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) r4 = socket(0x1d, 0x4, 0x7ff) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="10000080", @ANYRES16=r1, @ANYBLOB="010825bd7000ffdbdf250c00000004000580"], 0x18}, 0x1, 0x0, 0x0, 0x4008800}, 0x2400c000) 1.090803636s ago: executing program 6 (id=5058): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000080)=0xfd, 0x4) 1.090495086s ago: executing program 0 (id=5059): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000811004000000000095"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x11}], 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0xff, 0x10001}, 0xd, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001440)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100a0, 0x14100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}]}}}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) getpid() r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x4, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0x8b, 0x7, 0x8, 0x8, 0xfe, 0x8}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xfffffff7, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r1, 0x2, 0xff, 0xff}, &(0x7f0000000080)=0x10) 1.086842717s ago: executing program 6 (id=5060): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7ecbc13c, 0xc87b}, 0x0, 0x0, 0x784, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x1, 0x282800) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) 941.759741ms ago: executing program 1 (id=5061): syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x24094, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000180)=0x808, 0x21) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x0, 0x0, 0x1, 0x0, 0xdcc0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, @perf_config_ext={0x3, 0xa}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r1 = socket(0x1e, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback, 0xffffffffffffffff, 0x25}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x30000011}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x1a) write$binfmt_misc(r1, &(0x7f0000000400), 0x2000011a) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1}, 0x74e96c96}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x40, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000), 0x5, 0x4ba, &(0x7f00000002c0)="$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") 772.792506ms ago: executing program 2 (id=5064): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000090c0)=[{{&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000002340)=[{&(0x7f0000000480)=""/207, 0xcf}, {&(0x7f0000000b40)=""/222, 0xde}, {&(0x7f0000000f00)=""/121, 0x79}, {&(0x7f0000000f80)=""/95, 0x5f}, {&(0x7f0000001000)=""/75, 0x4b}, {&(0x7f0000001080)=""/44, 0x2c}, {&(0x7f00000010c0)=""/123, 0x7b}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x8, &(0x7f00000023c0)=""/56, 0x38}, 0xb}, {{&(0x7f0000002400)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000004580)=[{&(0x7f0000002480)=""/238, 0xee}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f00000045c0)=""/206, 0xce}, 0x9}, {{&(0x7f00000046c0)=@generic, 0x80, &(0x7f0000004900)=[{&(0x7f0000004740)=""/108, 0x6c}, {&(0x7f00000047c0)=""/33, 0x21}, {&(0x7f0000004800)=""/20, 0x14}, {&(0x7f0000004840)=""/152, 0x98}], 0x4, &(0x7f0000004940)=""/38, 0x26}, 0x80000000}, {{&(0x7f0000004980)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000004a00)=""/43, 0x2b}, {&(0x7f0000004a40)=""/108, 0x6c}], 0x2, &(0x7f0000004b00)=""/142, 0x8e}, 0x7}, {{&(0x7f0000004bc0)=@can, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004c40)=""/98, 0x62}, {&(0x7f0000004cc0)=""/216, 0xd8}, {&(0x7f0000004dc0)=""/79, 0x4f}, {&(0x7f0000004e40)=""/104, 0x68}, {&(0x7f0000004ec0)=""/32, 0x20}, {&(0x7f0000004f00)=""/5, 0x5}], 0x6, &(0x7f0000004fc0)=""/252, 0xfc}, 0x200}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000064c0)=""/55, 0x37}, 0x2}, {{&(0x7f0000006500)=@rc={0x1f, @none}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006580)=""/47, 0x2f}], 0x1, &(0x7f0000006600)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007600)=@caif=@dgm, 0x80, &(0x7f0000007c80)=[{&(0x7f0000007680)=""/3, 0x3}, {0x0}, {&(0x7f00000077c0)=""/200, 0xc8}, {&(0x7f00000078c0)=""/199, 0xc7}, {&(0x7f0000007a40)=""/123, 0x7b}, {&(0x7f0000007ac0)=""/134, 0x86}, {&(0x7f0000007b80)=""/195, 0xc3}], 0x7, &(0x7f0000007d00)=""/122, 0x7a}, 0x3}, {{0x0, 0x0, &(0x7f0000008080), 0x0, &(0x7f00000080c0)=""/4096, 0x1000}, 0x6}], 0x9, 0x40000122, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 716.559898ms ago: executing program 1 (id=5065): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) listns(&(0x7f0000000500)={0x20, 0x0, 0x9, 0x20000}, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) lseek(r1, 0x80007, 0x4) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000023c0)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x64008000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x36}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) 700.486949ms ago: executing program 2 (id=5066): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) clock_adjtime(0x0, &(0x7f0000003f00)={0xf79e, 0x6, 0x7fff, 0x6, 0x5, 0x1, 0x7, 0xd, 0x26bb, 0x4, 0x9, 0x5, 0x7fffffffffffffff, 0x2, 0x9, 0x6, 0xffffffffffff0000, 0x5, 0x5, 0x3ff, 0x494, 0x7, 0x5, 0x6ae, 0x10000, 0x9}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, &(0x7f0000000240)=0x8) openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x8}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="640000003100010027bd7000000000000400000004000e80ca91f0a46d7b93f7661b80de397bea7dbc836887a6e62b5db0d941b44fbb3afee1c02d3dc0e42a5437e37fc9217584fb95ec06c6e0e9bf9ee2a1168ef8dd56478901c8000000000000000000be5c0e1c327b3ef124cb01e41e5756f34d2a5b32221f38bd15081b1ff4c5ed7a7126bdf6d348e3074190aab0497199c9e9cda5266a732227324e6be8be985392345f5ed191fe27e5e428862de414d323268d8718f316a9d29b1ccd2b6d53c1a75926400b3bc89025d65ca33c9724e1bd8bcf1a90a4a593"], 0x64}, 0x1, 0x0, 0x0, 0x42804}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x404c084}, 0x4011) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000005c0)={&(0x7f0000000140), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r5, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0xc040}, 0x20004800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xe9}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xc00}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xc17}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) listen(r1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r9, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 635.80369ms ago: executing program 7 (id=5067): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000527000/0x2000)=nil) r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) 635.4469ms ago: executing program 1 (id=5068): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendto$packet(r0, &(0x7f0000000240)="09000000e7001400000000803500df8000000088a8000800274e88a800000000", 0x20, 0x4044800, 0x0, 0x0) 635.006811ms ago: executing program 7 (id=5069): unshare(0x26020480) socket(0x28, 0x5, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x4c, 0x114, 0x8, {{0x8, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x400000000000008, 0x7c0d08a8, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58}, 0x40) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x2, 0x1002, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) getpeername$packet(r6, 0x0, &(0x7f0000000c00)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f0000000300)={{r1}, 0x3, &(0x7f0000000000)=[0xfffffffffffffc01, 0x401, 0x8000000000000000], 0x3, 0x8, 0x1}) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000023892) r7 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r8, 0x89f1, &(0x7f00000000c0)="42eb6070b86f6cf09990cf2685585ad63fa49487f4be2dcdedc034a99356c33f445dbf301693d2310888a08be7dd1fed7527171f969113d0f4ababab8581ec5579f54cecb7d6c08f41aaaf2204426cbc0ca401a7309c3ea35ff72f2c24015175fd416c23726e56995d8689b35526d607779440c50e4b3a02fc6095a3d8fd9844bc") sendmsg$netlink(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f00010300"], 0x114}], 0x1}, 0x24044010) 574.756842ms ago: executing program 1 (id=5070): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0xfffffff7, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x900) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000040)=0x3, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000100)={{{@in=@remote, @in6=@private1}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000080)=0x1) 540.692634ms ago: executing program 1 (id=5071): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x600, 0x41, 0x0, 0x44) 537.467043ms ago: executing program 7 (id=5072): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = io_uring_setup(0x2f93, &(0x7f0000001100)={0x0, 0x1, 0x1, 0x3, 0x5a}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xb}}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x68}}, 0x0) 516.486354ms ago: executing program 7 (id=5073): unshare(0x26020480) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x7) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r1, 0x0, 0x0, 0x0) (fail_nth: 2) 462.671466ms ago: executing program 1 (id=5074): accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x80000) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000d40)='ns/time\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x2, 0x9, 0xf07, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffffa}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20002010}, 0x24000880) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$phonet_pipe(0x23, 0x5, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8e, 0x80000000000000}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fgetxattr(r3, &(0x7f0000000200)=@known='system.posix_acl_access\x00', &(0x7f0000000440)=""/65, 0x41) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r4, 0xfff) accept4(r4, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r6, @ANYRESHEX=r7], 0x15) 272.982151ms ago: executing program 7 (id=5075): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x9}, 0x501a, 0x2, 0x0, 0x6, 0xfff, 0x8001, 0x6fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 224.354793ms ago: executing program 7 (id=5076): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000090c0)=[{{&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000002340)=[{&(0x7f0000000480)=""/207, 0xcf}, {&(0x7f0000000b40)=""/222, 0xde}, {&(0x7f0000000f00)=""/121, 0x79}, {&(0x7f0000000f80)=""/95, 0x5f}, {&(0x7f0000001000)=""/75, 0x4b}, {&(0x7f0000001080)=""/44, 0x2c}, {&(0x7f00000010c0)=""/123, 0x7b}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x8, &(0x7f00000023c0)=""/56, 0x38}, 0xb}, {{&(0x7f0000002400)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000004580)=[{&(0x7f0000002480)=""/238, 0xee}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f00000045c0)=""/206, 0xce}, 0x9}, {{&(0x7f00000046c0)=@generic, 0x80, &(0x7f0000004900)=[{&(0x7f0000004740)=""/108, 0x6c}, {&(0x7f00000047c0)=""/33, 0x21}, {&(0x7f0000004800)=""/20, 0x14}, {&(0x7f0000004840)=""/152, 0x98}], 0x4, &(0x7f0000004940)=""/38, 0x26}, 0x80000000}, {{&(0x7f0000004980)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000004a00)=""/43, 0x2b}, {&(0x7f0000004a40)=""/108, 0x6c}], 0x2, &(0x7f0000004b00)=""/142, 0x8e}, 0x7}, {{&(0x7f0000004bc0)=@can, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004c40)=""/98, 0x62}, {&(0x7f0000004cc0)=""/216, 0xd8}, {&(0x7f0000004dc0)=""/79, 0x4f}, {&(0x7f0000004e40)=""/104, 0x68}, {&(0x7f0000004ec0)=""/32, 0x20}, {&(0x7f0000004f00)=""/5, 0x5}], 0x6, &(0x7f0000004fc0)=""/252, 0xfc}, 0x200}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000064c0)=""/55, 0x37}, 0x2}, {{&(0x7f0000006500)=@rc={0x1f, @none}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006580)=""/47, 0x2f}], 0x1, &(0x7f0000006600)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007600)=@caif=@dgm, 0x80, &(0x7f0000007c80)=[{&(0x7f0000007680)=""/3, 0x3}, {0x0}, {&(0x7f00000077c0)=""/200, 0xc8}, {&(0x7f00000078c0)=""/199, 0xc7}, {&(0x7f0000007a40)=""/123, 0x7b}, {&(0x7f0000007ac0)=""/134, 0x86}, {&(0x7f0000007b80)=""/195, 0xc3}], 0x7, &(0x7f0000007d00)=""/122, 0x7a}, 0x3}, {{0x0, 0x0, &(0x7f0000008080), 0x0, &(0x7f00000080c0)=""/4096, 0x1000}, 0x6}], 0x9, 0x40000122, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 119.907386ms ago: executing program 0 (id=5077): syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x24094, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000180)=0x808, 0x21) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x0, 0x0, 0x1, 0x0, 0xdcc0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, @perf_config_ext={0x3, 0xa}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r1 = socket(0x1e, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback, 0xffffffffffffffff, 0x25}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x30000011}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x1a) write$binfmt_misc(r1, &(0x7f0000000400), 0x2000011a) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000), 0x5, 0x4ba, &(0x7f00000002c0)="$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") 265.98µs ago: executing program 6 (id=5078): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000006c0)='./file1\x00', 0x1800892, &(0x7f0000000040)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c757466383d302c757466383d312c756e695f786c6174653d302c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c6e66733d6e6f7374616c655f726f2c756e695f786c6174653d312c73686f72746e616d653d77696e39352c646973636172642c004338cb8631b26441e86414f461975e105d02960776fcb7ddfd80b96c1b2ffd13d5cc37784797dbc9e26b7c39310b49940995ce6e6ce1c218890b59506de99e2dd234abcde0be50d3de656741fee78f74e94ee73bd6d7162f0d2a8275e0a6125615ce223c21fe303d561d81b2681dce1c0b7061c5a347b2040e7b6c9210507527467dad005f3e38c47d4daa9d76c69f51ffeb2f81123fe54df14c6c02413e51ba63c35f11"], 0x1, 0x2be, &(0x7f0000000740)="$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") sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') epoll_create1(0x80000) (async) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xc0000011}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xc0000011}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000280)={[{@noquota}, {@grpjquota}, {@nobarrier}, {@inlinecrypt}, {@dioread_nolock}, {@discard}, {}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") syz_create_resource$binfmt(&(0x7f0000000000)='./bus\x00') mount(0x0, &(0x7f0000000340)='.\x00', 0x0, 0x2390024, 0x0) 0s ago: executing program 0 (id=5079): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000527000/0x2000)=nil) r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) kernel console output (not intermixed with test programs): until 2038-01-19 (0x7fffffff) [ 588.985138][T19366] __nla_validate_parse: 3 callbacks suppressed [ 588.985155][T19366] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4263'. [ 588.989650][T19362] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 588.991455][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 588.991470][ T28] audit: type=1400 audit(2000000382.740:11394): avc: denied { write } for pid=19359 comm="syz.1.4262" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 589.002105][T19362] bond5: (slave gre1): Error -95 calling set_mac_address [ 589.032181][T19370] netlink: 'syz.7.4258': attribute type 10 has an invalid length. [ 589.075172][T19355] gretap1: entered promiscuous mode [ 589.084235][T19355] bond5: (slave gretap1): making interface the new active one [ 589.092261][T19355] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 589.107258][ T28] audit: type=1400 audit(2000000382.870:11395): avc: denied { audit_read } for pid=19353 comm="syz.0.4259" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 589.222703][ T28] audit: type=1326 audit(2000000382.980:11396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.0.4266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 589.337574][ T28] audit: type=1326 audit(2000000382.980:11397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.0.4266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 589.404798][T19370] loop7: detected capacity change from 0 to 128 [ 589.443585][T19370] vfat: Unknown parameter '000000000000000000000050xffffffffffffffff' [ 589.509793][ T28] audit: type=1326 audit(2000000383.010:11398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.0.4266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 589.685991][ T28] audit: type=1326 audit(2000000383.010:11399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.0.4266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 589.712011][ T28] audit: type=1326 audit(2000000383.010:11400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.0.4266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 589.745662][ T28] audit: type=1326 audit(2000000383.010:11401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.0.4266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 590.166610][ T28] audit: type=1326 audit(2000000383.010:11403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.0.4266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 590.192586][ T28] audit: type=1326 audit(2000000383.010:11402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.0.4266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 590.241772][T19394] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4270'. [ 590.265055][T19396] loop7: detected capacity change from 0 to 1024 [ 590.285652][T19396] EXT4-fs: test_dummy_encryption option not supported [ 590.355058][T19396] loop7: detected capacity change from 0 to 512 [ 590.379535][T19396] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 590.434700][T19403] xt_hl: Unknown Hop Limit match mode: 221 [ 590.464195][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4273'. [ 590.486541][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4273'. [ 590.500351][T19405] 9p: Bad value for 'version' [ 590.644841][T14345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.873914][T19418] loop1: detected capacity change from 0 to 128 [ 590.884278][T19418] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 591.236975][T19439] loop7: detected capacity change from 0 to 512 [ 591.260407][T19439] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.273940][T19439] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.341565][T19453] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4291'. [ 592.364213][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.613609][T19471] loop7: detected capacity change from 0 to 1024 [ 592.625964][T19471] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 592.670317][T19471] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #3: block 3: comm syz.7.4295: lblock 3 mapped to illegal pblock 3 (length 1) [ 592.684325][T19471] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 592.684597][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 592.700058][ C1] EXT4-fs (loop7): initial error at time 2000000386: ext4_map_blocks:833: inode 3: block 3 [ 592.710086][ C1] EXT4-fs (loop7): last error at time 2000000386: ext4_map_blocks:833: inode 3: block 3 [ 592.725374][T19471] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4295: Failed to acquire dquot type 0 [ 592.736652][T19471] loop7: lost filesystem error report for type 5 error -117 [ 592.740414][T19471] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 3: comm syz.7.4295: lblock 3 mapped to illegal pblock 3 (length 1) [ 592.761801][T19471] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 592.782402][T19471] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4295: Failed to acquire dquot type 0 [ 592.802856][T19471] loop7: lost filesystem error report for type 5 error -117 [ 592.803232][T19471] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.4295: Freeing blocks not in datazone - block = 0, count = 4096 [ 592.824000][T19471] loop7: lost filesystem error report for type 5 error -117 [ 592.825344][T19471] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 3: comm syz.7.4295: lblock 3 mapped to illegal pblock 3 (length 1) [ 592.846632][T19471] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 592.850434][T19471] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4295: Failed to acquire dquot type 0 [ 592.870757][T19471] loop7: lost filesystem error report for type 5 error -117 [ 592.871113][T19471] EXT4-fs (loop7): 1 orphan inode deleted [ 592.884991][T19471] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.941148][T19480] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4301'. [ 593.962024][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.007057][ T28] kauditd_printk_skb: 238 callbacks suppressed [ 594.007081][ T28] audit: type=1326 audit(2000000387.770:11637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19491 comm="syz.2.4306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2f616ace59 code=0x7ffc0000 [ 594.131088][ T28] audit: type=1326 audit(2000000387.840:11638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19491 comm="syz.2.4306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2f616ace59 code=0x7ffc0000 [ 594.261663][T19504] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4311'. [ 594.291521][T19500] loop6: detected capacity change from 0 to 256 [ 594.376235][T19512] loop1: detected capacity change from 0 to 256 [ 594.405807][T19512] vfat: Unknown parameter '' [ 594.457528][T19512] loop1: detected capacity change from 0 to 1764 [ 594.716884][T19532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4320'. [ 595.792970][ T28] audit: type=1326 audit(2000000389.550:11639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19537 comm="syz.0.4321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 595.892480][T19545] loop6: detected capacity change from 0 to 2048 [ 595.921344][ T28] audit: type=1326 audit(2000000389.550:11640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19537 comm="syz.0.4321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 595.993845][ T28] audit: type=1326 audit(2000000389.550:11641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19537 comm="syz.0.4321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 596.020138][ T28] audit: type=1326 audit(2000000389.550:11642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19537 comm="syz.0.4321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 596.046148][ T28] audit: type=1326 audit(2000000389.550:11643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19537 comm="syz.0.4321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 596.061053][T19549] FAULT_INJECTION: forcing a failure. [ 596.061053][T19549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.072084][ T28] audit: type=1326 audit(2000000389.550:11644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19537 comm="syz.0.4321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 596.115967][ T28] audit: type=1326 audit(2000000389.550:11645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19537 comm="syz.0.4321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 596.142336][ T28] audit: type=1326 audit(2000000389.550:11646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19537 comm="syz.0.4321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde8bf5d68e code=0x7ffc0000 [ 596.143921][T19549] CPU: 1 UID: 0 PID: 19549 Comm: syz.7.4324 Not tainted syzkaller #0 PREEMPT(lazy) [ 596.143950][T19549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 596.143965][T19549] Call Trace: [ 596.143972][T19549] [ 596.143980][T19549] __dump_stack+0x1d/0x30 [ 596.144006][T19549] dump_stack_lvl+0x95/0xd0 [ 596.144030][T19549] dump_stack+0x15/0x1b [ 596.144051][T19549] should_fail_ex+0x263/0x280 [ 596.144074][T19549] should_fail+0xb/0x20 [ 596.144093][T19549] should_fail_usercopy+0x1a/0x20 [ 596.144121][T19549] _copy_from_user+0x1c/0xb0 [ 596.144202][T19549] __sys_connect+0xd0/0x2a0 [ 596.144231][T19549] __x64_sys_connect+0x3f/0x50 [ 596.144266][T19549] x64_sys_call+0x2df0/0x3020 [ 596.144400][T19549] do_syscall_64+0x12c/0x3b0 [ 596.144435][T19549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.144459][T19549] RIP: 0033:0x7efdbf4dce59 [ 596.144476][T19549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.144496][T19549] RSP: 002b:00007efdbdf2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 596.144566][T19549] RAX: ffffffffffffffda RBX: 00007efdbf755fa0 RCX: 00007efdbf4dce59 [ 596.144582][T19549] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 596.144596][T19549] RBP: 00007efdbdf2f090 R08: 0000000000000000 R09: 0000000000000000 [ 596.144611][T19549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.144625][T19549] R13: 00007efdbf756038 R14: 00007efdbf755fa0 R15: 00007ffe71683d38 [ 596.144647][T19549] [ 596.247163][T19545] Alternate GPT is invalid, using primary GPT. [ 596.338042][T19545] loop6: p1 p2 p3 [ 596.440663][T19560] loop7: detected capacity change from 0 to 256 [ 596.466318][T19564] netlink: 'syz.0.4330': attribute type 1 has an invalid length. [ 596.484115][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4327'. [ 596.699315][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4334'. [ 596.774523][T19582] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4335'. [ 596.851913][ T23] IPVS: starting estimator thread 0... [ 596.888962][T19585] netlink: 'syz.2.4336': attribute type 6 has an invalid length. [ 596.902942][T19585] netlink: 'syz.2.4336': attribute type 7 has an invalid length. [ 596.913090][T19585] netlink: 'syz.2.4336': attribute type 8 has an invalid length. [ 596.921347][T19585] netlink: 'syz.2.4336': attribute type 15 has an invalid length. [ 596.932461][T19585] netlink: 'syz.2.4336': attribute type 1 has an invalid length. [ 596.955189][T19594] IPVS: using max 2496 ests per chain, 124800 per kthread [ 596.996590][ T361] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.051113][T19606] loop7: detected capacity change from 0 to 128 [ 597.060707][T19606] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 597.082577][T19606] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 597.094526][T19610] netlink: 'syz.2.4339': attribute type 1 has an invalid length. [ 597.113215][T17147] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 597.137675][T19613] loop7: detected capacity change from 0 to 512 [ 597.166260][T19613] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.179343][T19613] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.887240][T19642] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4351'. [ 597.898411][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4351'. [ 597.961833][T12689] tipc: Subscription rejected, illegal request [ 598.035540][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.128659][T19661] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4359'. [ 598.327150][T19675] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4360'. [ 598.358406][T19677] netlink: 'syz.7.4361': attribute type 58 has an invalid length. [ 598.366594][T19677] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4361'. [ 598.527676][T19696] loop7: detected capacity change from 0 to 512 [ 598.549039][T19696] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.562108][T19696] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.812584][T19703] bridge4: entered promiscuous mode [ 598.820832][T19703] bridge4: entered allmulticast mode [ 599.095346][T19711] FAULT_INJECTION: forcing a failure. [ 599.095346][T19711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.120905][T19712] netlink: 'syz.1.4374': attribute type 3 has an invalid length. [ 599.157371][T19711] CPU: 0 UID: 0 PID: 19711 Comm: syz.6.4373 Not tainted syzkaller #0 PREEMPT(lazy) [ 599.157398][T19711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 599.157413][T19711] Call Trace: [ 599.157421][T19711] [ 599.157430][T19711] __dump_stack+0x1d/0x30 [ 599.157481][T19711] dump_stack_lvl+0x95/0xd0 [ 599.157501][T19711] dump_stack+0x15/0x1b [ 599.157526][T19711] should_fail_ex+0x263/0x280 [ 599.157569][T19711] should_fail+0xb/0x20 [ 599.157640][T19711] should_fail_usercopy+0x1a/0x20 [ 599.157665][T19711] _copy_from_user+0x1c/0xb0 [ 599.157689][T19711] do_ip_vs_set_ctl+0x1a7/0xae0 [ 599.157713][T19711] ? _raw_spin_unlock+0x9/0x30 [ 599.157732][T19711] ? finish_task_switch+0x128/0x320 [ 599.157825][T19711] ? do_ip_setsockopt+0x1af1/0x2290 [ 599.157868][T19711] nf_setsockopt+0x199/0x1b0 [ 599.157894][T19711] ip_setsockopt+0x102/0x110 [ 599.157921][T19711] sctp_setsockopt+0x126/0xea0 [ 599.157946][T19711] sock_common_setsockopt+0x69/0x80 [ 599.158012][T19711] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 599.158045][T19711] __sys_setsockopt+0x184/0x200 [ 599.158142][T19711] __x64_sys_setsockopt+0x64/0x80 [ 599.158169][T19711] x64_sys_call+0x2327/0x3020 [ 599.158268][T19711] do_syscall_64+0x12c/0x3b0 [ 599.158306][T19711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.158383][T19711] RIP: 0033:0x7faf34f8ce59 [ 599.158399][T19711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.158418][T19711] RSP: 002b:00007faf339df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 599.158437][T19711] RAX: ffffffffffffffda RBX: 00007faf35205fa0 RCX: 00007faf34f8ce59 [ 599.158488][T19711] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000003 [ 599.158596][T19711] RBP: 00007faf339df090 R08: 0000000000000044 R09: 0000000000000000 [ 599.158613][T19711] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.158644][T19711] R13: 00007faf35206038 R14: 00007faf35205fa0 R15: 00007ffdaba5f0b8 [ 599.158667][T19711] [ 599.586838][T19714] bond7: Removing last ns target with arp_interval on [ 599.663958][T19731] __nla_validate_parse: 1 callbacks suppressed [ 599.664016][T19731] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4380'. [ 599.783184][ T28] kauditd_printk_skb: 527 callbacks suppressed [ 599.783201][ T28] audit: type=1326 audit(2000000393.540:12174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19727 comm="syz.1.4379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 599.791990][T19740] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4383'. [ 599.814977][ T28] audit: type=1326 audit(2000000393.540:12175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19727 comm="syz.1.4379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 599.852816][ T28] audit: type=1326 audit(2000000393.540:12176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19727 comm="syz.1.4379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 599.885997][ T28] audit: type=1326 audit(2000000393.540:12177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19727 comm="syz.1.4379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 599.919127][ T28] audit: type=1326 audit(2000000393.540:12178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19727 comm="syz.1.4379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 599.954150][ T28] audit: type=1326 audit(2000000393.550:12179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19727 comm="syz.1.4379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 600.049293][ T28] audit: type=1326 audit(2000000393.550:12180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19727 comm="syz.1.4379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 600.102298][ T28] audit: type=1326 audit(2000000393.550:12181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19727 comm="syz.1.4379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 600.156996][ T28] audit: type=1326 audit(2000000393.580:12182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19727 comm="syz.1.4379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 600.211676][ T28] audit: type=1326 audit(2000000393.580:12184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19727 comm="syz.1.4379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc135d0d68e code=0x7ffc0000 [ 600.734910][T19760] loop1: detected capacity change from 0 to 128 [ 600.832676][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.857818][T19760] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 600.913123][T19760] ext4 filesystem being mounted at /241/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 600.927458][T19766] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4388'. [ 601.053047][T14345] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 601.076790][T19772] loop6: detected capacity change from 0 to 512 [ 601.098944][T19772] ------------[ cut here ]------------ [ 601.104478][T19772] EA inode 11 i_nlink=2 [ 601.104500][T19772] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.6.4389/19772 [ 601.120045][T19772] Modules linked in: [ 601.124123][T19772] CPU: 0 UID: 0 PID: 19772 Comm: syz.6.4389 Not tainted syzkaller #0 PREEMPT(lazy) [ 601.133657][T19772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 601.143954][T19772] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 601.150601][T19772] Code: 94 52 98 ff 4c 8d 2d bd 5f 5c 05 49 8d 7e 40 e8 54 15 b6 ff 49 8b 6e 40 4c 89 e7 e8 88 10 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff 94 d8 03 66 66 66 66 66 66 2e [ 601.170354][T19772] RSP: 0018:ffffc900024b3778 EFLAGS: 00010246 [ 601.176504][T19772] RAX: ffff88810513cf00 RBX: ffff888107e45e58 RCX: ffffffff81c0e248 [ 601.184564][T19772] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d41f0 [ 601.192586][T19772] RBP: 000000000000000b R08: 0001888107e45e0b R09: 0000000000000000 [ 601.201262][T19772] R10: ffffc900024b36a8 R11: 0001c900024b36a8 R12: ffff888107e45e08 [ 601.209513][T19772] R13: ffffffff871d41f0 R14: ffff888107e45dc0 R15: 0000000000000001 [ 601.217528][T19772] FS: 00007faf3357a6c0(0000) GS:ffff8882ae8f6000(0000) knlGS:0000000000000000 [ 601.226510][T19772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 601.233192][T19772] CR2: 00002000000e2030 CR3: 0000000180700000 CR4: 00000000003506f0 [ 601.241196][T19772] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 601.249259][T19772] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 601.257274][T19772] Call Trace: [ 601.260569][T19772] [ 601.263544][T19772] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 601.269506][T19772] ? errseq_check+0x2c/0x50 [ 601.274106][T19772] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 601.279602][T19772] ? ext4_truncate+0x89f/0xa10 [ 601.284408][T19772] ext4_evict_inode+0xb16/0xe30 [ 601.289339][T19772] ? __pfx_ext4_evict_inode+0x10/0x10 [ 601.294824][T19772] evict+0x2af/0x510 [ 601.298792][T19772] ? __dquot_initialize+0x146/0x7c0 [ 601.304011][T19772] iput+0x41a/0x580 [ 601.307898][T19772] ext4_process_orphan+0x1a9/0x1c0 [ 601.313115][T19772] ext4_orphan_cleanup+0x69c/0x9f0 [ 601.318267][T19772] ext4_fill_super+0x3408/0x37c0 [ 601.323217][T19772] ? set_blocksize+0x14c/0x270 [ 601.328112][T19772] ? setup_bdev_super+0x30e/0x370 [ 601.333194][T19772] ? __pfx_ext4_fill_super+0x10/0x10 [ 601.338583][T19772] get_tree_bdev_flags+0x291/0x300 [ 601.343704][T19772] ? __pfx_ext4_fill_super+0x10/0x10 [ 601.349010][T19772] get_tree_bdev+0x1f/0x30 [ 601.353452][T19772] ext4_get_tree+0x1c/0x30 [ 601.357937][T19772] vfs_get_tree+0x57/0x1d0 [ 601.362375][T19772] do_new_mount+0x288/0x8d0 [ 601.367093][T19772] path_mount+0x4d0/0xbc0 [ 601.371550][T19772] __se_sys_mount+0x28c/0x2e0 [ 601.376405][T19772] __x64_sys_mount+0x67/0x80 [ 601.381036][T19772] x64_sys_call+0x2d61/0x3020 [ 601.385741][T19772] do_syscall_64+0x12c/0x3b0 [ 601.390383][T19772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.396387][T19772] RIP: 0033:0x7faf34f8e0ca [ 601.400859][T19772] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.420600][T19772] RSP: 002b:00007faf33579e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 601.429045][T19772] RAX: ffffffffffffffda RBX: 00007faf33579ee0 RCX: 00007faf34f8e0ca [ 601.437175][T19772] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007faf33579ea0 [ 601.445288][T19772] RBP: 00002000000009c0 R08: 00007faf33579ee0 R09: 0000000000800718 [ 601.453287][T19772] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 601.461410][T19772] R13: 00007faf33579ea0 R14: 000000000000048d R15: 0000200000000200 [ 601.469431][T19772] [ 601.472564][T19772] ---[ end trace 0000000000000000 ]--- [ 601.478476][T19772] EXT4-fs (loop6): 1 orphan inode deleted [ 601.485683][T19772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.873614][T16213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.896761][T19784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19784 comm=syz.0.4396 [ 601.930235][T19787] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4397'. [ 602.060067][T19802] loop1: detected capacity change from 0 to 512 [ 602.104946][T19802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.118410][T19802] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.185194][T19810] loop7: detected capacity change from 0 to 256 [ 602.219370][T19810] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 602.317250][T19810] bridge1: entered promiscuous mode [ 602.323473][T19810] bridge1: entered allmulticast mode [ 602.594872][T19812] : option downdelay: invalid value (18446744073709547007) [ 602.625769][T19812] : option downdelay: allowed values 0 - 2147483647 [ 602.863016][T19812]  (unregistering): Released all slaves [ 602.986985][T19821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19821 comm=syz.2.4404 [ 603.115464][T19816] loop6: detected capacity change from 0 to 512 [ 603.189963][T19816] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.4402: corrupted in-inode xattr: invalid ea_ino [ 603.238110][T19816] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 603.239342][T19816] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4402: couldn't read orphan inode 15 (err -117) [ 603.248832][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 603.248902][ C0] EXT4-fs (loop6): initial error at time 2000000397: ext4_iget_extra_inode:5128: inode 15 [ 603.249021][ C0] EXT4-fs (loop6): last error at time 2000000397: ext4_iget_extra_inode:5128: inode 15 [ 603.458733][T19816] loop6: lost filesystem error report for type 5 error -117 [ 603.464389][T19816] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.559407][T19816] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.4402: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 603.606328][T19816] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.4402: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 603.685680][T19798] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 603.693705][T19798] FAT-fs (loop7): Filesystem has been set read-only [ 603.700499][T19798] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 603.708691][T19798] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 603.716908][T19798] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 604.093096][T19856] loop7: detected capacity change from 0 to 256 [ 604.129334][T16213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.157989][T14345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.181698][T19853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4414'. [ 604.242567][T19862] loop6: detected capacity change from 0 to 128 [ 604.295270][T19867] loop7: detected capacity change from 0 to 256 [ 604.309514][T19867] msdos: Bad value for 'fmask' [ 604.317558][T19869] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4418'. [ 604.347518][T19853] hsr_slave_1 (unregistering): left promiscuous mode [ 604.358927][T19873] loop6: detected capacity change from 0 to 512 [ 604.370359][T19867] loop7: detected capacity change from 0 to 2048 [ 604.386052][T19873] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 604.408478][T19873] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.4420: Unimplemented hash flags: 0x0001 [ 604.421694][T19873] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4420: Corrupt directory, running e2fsck is recommended [ 604.553385][T19878] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.4420: Unimplemented hash flags: 0x0001 [ 604.554996][T19867] loop7: p1 p3 p4 [ 604.564996][T19878] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4420: Corrupt directory, running e2fsck is recommended [ 604.568776][T19879] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.4420: Unimplemented hash flags: 0x0001 [ 604.593180][T19879] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4420: Corrupt directory, running e2fsck is recommended [ 604.610242][T19867] loop7: p4 size 589824 extends beyond EOD, truncated [ 604.656163][T16213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.668177][T19883] netlink: 'syz.1.4423': attribute type 1 has an invalid length. [ 604.712417][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 604.724869][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 604.743491][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 605.001298][T19912] netlink: 'syz.1.4436': attribute type 1 has an invalid length. [ 605.425646][ T28] kauditd_printk_skb: 539 callbacks suppressed [ 605.425659][ T28] audit: type=1326 audit(2000000399.100:12723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.4440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7fc00000 [ 605.470453][ T28] audit: type=1326 audit(2000000399.100:12724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.4440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7fc00000 [ 605.496353][ T28] audit: type=1326 audit(2000000399.100:12725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.4440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7fc00000 [ 605.522254][ T28] audit: type=1326 audit(2000000399.100:12726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.4440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7fc00000 [ 605.548402][ T28] audit: type=1326 audit(2000000399.100:12727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.4440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7fc00000 [ 605.574233][ T28] audit: type=1326 audit(2000000399.100:12728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.4440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7fc00000 [ 605.599895][ T28] audit: type=1326 audit(2000000399.100:12729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.4440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7fc00000 [ 605.625596][ T28] audit: type=1326 audit(2000000399.100:12730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.4440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7fc00000 [ 605.651585][ T28] audit: type=1326 audit(2000000399.100:12731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.4440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7fc00000 [ 605.677754][ T28] audit: type=1326 audit(2000000399.100:12732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.4440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7fc00000 [ 605.767000][T19931] batman_adv: batadv0: Adding interface: dummy0 [ 605.781664][T19931] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.823580][T19931] batman_adv: batadv0: Interface activated: dummy0 [ 606.081817][T19953] netlink: 'syz.0.4450': attribute type 1 has an invalid length. [ 606.120355][T19958] netlink: 830 bytes leftover after parsing attributes in process `syz.6.4451'. [ 607.335000][T19966] set_capacity_and_notify: 2 callbacks suppressed [ 607.335135][T19966] loop1: detected capacity change from 0 to 256 [ 607.380620][T19967] loop6: detected capacity change from 0 to 256 [ 608.443885][T19967] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 608.461950][T19966] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 609.467294][T19969] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.474512][T19969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.481851][T19969] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.488911][T19969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.595538][T19967] bridge1: entered promiscuous mode [ 609.600946][T19967] bridge1: entered allmulticast mode [ 609.609381][T19962] bridge2: entered promiscuous mode [ 609.614614][T19962] bridge2: entered allmulticast mode [ 609.659838][T19967] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 609.667927][T19967] FAT-fs (loop6): Filesystem has been set read-only [ 609.674780][T19967] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 609.682847][T19967] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 609.690859][T19967] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 609.729180][T19966] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 609.737429][T19966] FAT-fs (loop1): Filesystem has been set read-only [ 609.744200][T19966] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 609.752294][T19966] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 609.760435][T19966] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 609.777947][T19987] loop7: detected capacity change from 0 to 512 [ 609.795305][T19987] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.808105][T19987] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 609.881148][T20001] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4468'. [ 609.907623][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.119391][T20003] loop6: detected capacity change from 0 to 1024 [ 610.275650][T20003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 610.405859][T20003] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 611.845069][T20031] loop1: detected capacity change from 0 to 256 [ 612.627233][T20031] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 612.676814][ T28] kauditd_printk_skb: 2196 callbacks suppressed [ 612.676831][ T28] audit: type=1326 audit(2000000405.891:14929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20039 comm="syz.0.4478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 612.933604][T20031] bridge3: entered promiscuous mode [ 612.939802][T20031] bridge3: entered allmulticast mode [ 612.984062][T16213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 613.000645][ T28] audit: type=1326 audit(2000000406.144:14930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20039 comm="syz.0.4478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 613.026891][ T28] audit: type=1326 audit(2000000406.144:14931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20039 comm="syz.0.4478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 613.053858][ T28] audit: type=1326 audit(2000000406.144:14932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20039 comm="syz.0.4478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 613.144726][ T28] audit: type=1326 audit(2000000406.144:14933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20039 comm="syz.0.4478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 613.258933][ T28] audit: type=1326 audit(2000000406.153:14934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20039 comm="syz.0.4478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 613.294984][ T28] audit: type=1326 audit(2000000406.153:14935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20039 comm="syz.0.4478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 613.320858][ T28] audit: type=1326 audit(2000000406.153:14936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20039 comm="syz.0.4478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 613.346570][ T28] audit: type=1326 audit(2000000406.153:14937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20039 comm="syz.0.4478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 613.372579][ T28] audit: type=1326 audit(2000000406.153:14938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20039 comm="syz.0.4478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 613.428084][T20031] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 613.436165][T20031] FAT-fs (loop1): Filesystem has been set read-only [ 613.442800][T20031] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 613.450962][T20031] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 613.459104][T20031] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 613.565358][T20061] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4486'. [ 613.872517][T20070] bridge5: entered promiscuous mode [ 613.872754][T20070] bridge5: entered allmulticast mode [ 613.966115][T20072] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4490'. [ 614.096556][T20074] loop6: detected capacity change from 0 to 512 [ 614.152389][T20074] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 614.178153][T20066] loop1: detected capacity change from 0 to 1024 [ 614.196564][T20074] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 614.223918][T20066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 614.244043][T20066] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 614.303635][T20080] xt_limit: Overflow, try lower: 7/0 [ 614.769005][T14345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 614.788162][T16213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 614.995708][T20106] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4501'. [ 615.367326][T20111] loop6: detected capacity change from 0 to 1764 [ 616.770095][T20138] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4512'. [ 618.338661][T20149] loop1: detected capacity change from 0 to 1024 [ 618.371662][T20149] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 618.434052][T20149] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 618.442564][T20149] EXT4-fs (loop1): orphan cleanup on readonly fs [ 618.450040][T20149] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 3: comm syz.1.4511: lblock 3 mapped to illegal pblock 3 (length 1) [ 618.464116][T20149] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 618.464266][T20149] __quota_error: 154 callbacks suppressed [ 618.464281][T20149] Quota error (device loop1): write_blk: dquota write failed [ 618.473375][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 618.473401][ C0] EXT4-fs (loop1): initial error at time 2000000411: ext4_map_blocks:833: inode 3: block 3 [ 618.473444][ C0] EXT4-fs (loop1): last error at time 2000000411: ext4_map_blocks:833: inode 3: block 3 [ 618.513492][T20149] Quota error (device loop1): find_free_dqentry: Can't write quota data block 3 [ 618.522761][T20149] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 618.532795][T20149] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.4511: Failed to acquire dquot type 0 [ 618.544476][T20149] loop1: lost filesystem error report for type 5 error -117 [ 618.544867][T20149] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 3: comm syz.1.4511: lblock 3 mapped to illegal pblock 3 (length 1) [ 618.566408][T20149] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 618.566586][T20149] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 618.585795][T20149] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.4511: Failed to acquire dquot type 0 [ 618.597040][T20149] loop1: lost filesystem error report for type 5 error -117 [ 618.597360][T20149] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.4511: Freeing blocks not in datazone - block = 0, count = 4096 [ 618.618067][T20149] loop1: lost filesystem error report for type 5 error -117 [ 618.618349][T20149] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 3: comm syz.1.4511: lblock 3 mapped to illegal pblock 3 (length 1) [ 618.639827][T20149] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 618.640102][T20149] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 618.659091][T20149] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.4511: Failed to acquire dquot type 0 [ 618.670353][T20149] loop1: lost filesystem error report for type 5 error -117 [ 618.670998][T20149] EXT4-fs (loop1): 1 orphan inode deleted [ 618.685001][T20149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 618.772651][T20180] loop6: detected capacity change from 0 to 512 [ 618.781986][T20180] EXT4-fs: journaled quota format not specified [ 618.809145][T20182] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4525'. [ 618.891874][T14345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.041534][T20178] loop7: detected capacity change from 0 to 1024 [ 619.154135][T20178] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 619.167135][T20178] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.211221][ T40] tipc: Subscription rejected, illegal request [ 619.377489][T20201] bridge6: entered promiscuous mode [ 619.383359][T20201] bridge6: entered allmulticast mode [ 619.514246][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 620.362451][T20224] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4538'. [ 620.460093][T20228] loop6: detected capacity change from 0 to 512 [ 620.493121][T20228] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.545523][T20228] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.558213][ T28] audit: type=1400 audit(2000000413.272:15093): avc: denied { write } for pid=20227 comm="syz.6.4539" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 620.857924][ T28] audit: type=1326 audit(2000000413.534:15094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.6.4539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf34f8ce59 code=0x7ffc0000 [ 621.045306][ T28] audit: type=1326 audit(2000000413.534:15095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.6.4539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf34f8ce59 code=0x7ffc0000 [ 621.198878][T20237] loop7: detected capacity change from 0 to 1024 [ 621.222872][ T28] audit: type=1326 audit(2000000413.534:15096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.6.4539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf34f8ce59 code=0x7ffc0000 [ 621.250037][ T28] audit: type=1326 audit(2000000413.534:15097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.6.4539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf34f8ce59 code=0x7ffc0000 [ 621.325067][T20237] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 621.346752][T20237] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.416476][T20262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4550'. [ 621.432820][T16213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.492429][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 622.196362][T20280] loop1: detected capacity change from 0 to 128 [ 622.208137][T20280] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 622.220729][T20280] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.242095][T14345] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 622.487251][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.605169][T20302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2840 sclass=netlink_route_socket pid=20302 comm=syz.6.4560 [ 622.733328][T20299] loop1: detected capacity change from 0 to 512 [ 622.800784][T20299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 622.908702][T20299] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.071044][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.171897][T14345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 623.242889][T12669] tipc: Subscription rejected, illegal request [ 623.331651][T20327] SET target dimension over the limit! [ 623.574228][T17254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.607986][T20352] loop7: detected capacity change from 0 to 1024 [ 623.615931][T20359] netlink: 'syz.1.4584': attribute type 5 has an invalid length. [ 623.632860][T20359] netlink: 1100 bytes leftover after parsing attributes in process `syz.1.4584'. [ 623.710234][T20352] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 623.725784][T20352] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.877586][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 623.890616][T20383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.898912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.960647][T20370] loop1: detected capacity change from 0 to 512 [ 623.969404][T20370] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 624.014648][ T28] kauditd_printk_skb: 136 callbacks suppressed [ 624.014662][ T28] audit: type=1400 audit(2000000416.499:15234): avc: denied { create } for pid=20393 comm="syz.2.4597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 624.047061][T20370] EXT4-fs (loop1): 1 truncate cleaned up [ 624.062627][T20370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.203332][ T28] audit: type=1400 audit(2000000416.676:15235): avc: denied { write } for pid=20369 comm="syz.1.4588" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 624.249648][T20404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4597'. [ 624.289377][ T28] audit: type=1400 audit(2000000416.751:15236): avc: denied { create } for pid=20398 comm="syz.0.4598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 624.313458][T20406] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4601'. [ 624.374605][T14345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.541281][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.689571][T17254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.695804][T20419] support for the xor transformation has been removed. [ 625.036293][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.794183][T17254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.038299][T12678] tipc: Subscription rejected, illegal request [ 626.260978][T20446] loop1: detected capacity change from 0 to 256 [ 626.270403][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4611'. [ 626.553510][T20473] loop1: detected capacity change from 0 to 512 [ 626.588248][T20473] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 626.639391][T20473] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.4622: bad orphan inode 131083 [ 626.645571][T20483] loop7: detected capacity change from 0 to 2048 [ 626.671336][T20473] loop1: lost filesystem error report for type 5 error -117 [ 626.672331][T20473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.704728][T20483] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.729163][T20483] EXT4-fs (loop7): shut down requested (2) [ 626.747201][ T28] audit: type=1400 audit(2000000419.043:15237): avc: denied { read } for pid=2963 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 626.809178][T14345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.825717][ T28] audit: type=1400 audit(2000000419.043:15238): avc: denied { search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.877938][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.892296][T17254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.919061][ T28] audit: type=1400 audit(2000000419.043:15239): avc: denied { write search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.925791][T20493] loop7: detected capacity change from 0 to 512 [ 626.975666][ T28] audit: type=1400 audit(2000000419.043:15240): avc: denied { add_name } for pid=2963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.019633][ T28] audit: type=1400 audit(2000000419.043:15241): avc: denied { create } for pid=2963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 627.042523][T20493] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 627.061316][ T28] audit: type=1400 audit(2000000419.043:15242): avc: denied { append open } for pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 627.085155][ T28] audit: type=1400 audit(2000000419.043:15243): avc: denied { getattr } for pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 627.116225][T20493] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.4630: Unimplemented hash flags: 0x0001 [ 627.128510][T20493] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4630: Corrupt directory, running e2fsck is recommended [ 627.256241][T20499] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.4630: Unimplemented hash flags: 0x0001 [ 627.267863][T20501] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.4630: Unimplemented hash flags: 0x0001 [ 627.267892][T20501] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4630: Corrupt directory, running e2fsck is recommended [ 627.292248][T20499] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4630: Corrupt directory, running e2fsck is recommended [ 627.361636][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.433522][T12669] tipc: Subscription rejected, illegal request [ 627.708081][T20503] loop7: detected capacity change from 0 to 2048 [ 627.764908][T20519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.781716][T20519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.820359][T20522] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4639'. [ 627.832130][T20519] bridge0: port 3(syz_tun) entered blocking state [ 627.839679][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.849060][T20519] bridge0: port 3(syz_tun) entered disabled state [ 627.855857][T20519] syz_tun: entered allmulticast mode [ 627.861808][T20519] syz_tun: entered promiscuous mode [ 627.867421][T20519] bridge0: port 3(syz_tun) entered blocking state [ 627.873893][T20519] bridge0: port 3(syz_tun) entered forwarding state [ 627.969045][T20533] loop1: detected capacity change from 0 to 512 [ 627.999169][T20533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 628.016176][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.030447][T20533] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.4642: Unimplemented hash flags: 0x0001 [ 628.043768][T20533] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4642: Corrupt directory, running e2fsck is recommended [ 628.174412][T20541] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.4642: Unimplemented hash flags: 0x0001 [ 628.186103][T20543] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.4642: Unimplemented hash flags: 0x0001 [ 628.186110][T20541] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4642: Corrupt directory, running e2fsck is recommended [ 628.210609][T20543] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4642: Corrupt directory, running e2fsck is recommended [ 628.364956][T14345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.557044][T20552] bridge7: entered promiscuous mode [ 628.563180][T20552] bridge7: entered allmulticast mode [ 629.179529][T12669] tipc: Subscription rejected, illegal request [ 629.244844][T20561] loop1: detected capacity change from 0 to 2048 [ 629.392986][T20563] loop1: detected capacity change from 0 to 256 [ 629.399121][T17254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.463104][T20557] mmap: syz.0.4648 (20557): VmData 17448960 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 629.800178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.454031][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 630.454082][ T28] audit: type=1326 audit(2000000422.523:15255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.7.4655" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 630.496226][ T28] audit: type=1326 audit(2000000422.523:15256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.7.4655" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 630.526082][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.565427][ T28] audit: type=1326 audit(2000000422.523:15257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.7.4655" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 630.591368][ T28] audit: type=1326 audit(2000000422.523:15258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.7.4655" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 630.652863][T20586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4656'. [ 630.667260][T20586] netlink: 'syz.1.4656': attribute type 1 has an invalid length. [ 630.684770][T20586] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4656'. [ 630.716265][ T28] audit: type=1326 audit(2000000422.560:15259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.7.4655" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 630.745388][ T28] audit: type=1326 audit(2000000422.560:15260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.7.4655" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 630.771816][ T28] audit: type=1326 audit(2000000422.560:15261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.7.4655" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 630.797742][ T28] audit: type=1326 audit(2000000422.560:15262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.7.4655" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 630.842019][ T28] audit: type=1326 audit(2000000422.560:15263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.7.4655" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 631.646267][T20593] loop7: detected capacity change from 0 to 1024 [ 631.662333][T20593] EXT4-fs: Ignoring removed bh option [ 631.766949][T17254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.797231][ T28] audit: type=1326 audit(2000000422.560:15264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20578 comm="syz.7.4655" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 631.886947][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.027235][T20597] xt_ecn: cannot match TCP bits for non-tcp packets [ 632.311853][T20593] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.486920][T20604] loop6: detected capacity change from 0 to 512 [ 632.527550][T20604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.571390][T20604] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 632.651177][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.674988][T20604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.687765][T20604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.703649][T20604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.830927][T20619] netlink: 'syz.1.4667': attribute type 1 has an invalid length. [ 632.838549][T20614] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4664'. [ 633.026504][ T361] Bluetooth: hci0: Frame reassembly failed (-84) [ 633.033177][T20619] bond10: entered promiscuous mode [ 633.067600][T20619] 8021q: adding VLAN 0 to HW filter on device bond10 [ 633.126001][T20623] bond10: (slave bridge4): making interface the new active one [ 633.158265][T20623] bridge4: entered promiscuous mode [ 633.179613][T20623] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 633.191968][T20604] net_ratelimit: 1363 callbacks suppressed [ 633.191985][T20604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.246736][T20604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.280513][T20604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.289317][T20604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.308085][T20604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.330702][T20604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.351945][T20604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.366443][T20604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.377990][T20634] netlink: 'syz.7.4665': attribute type 10 has an invalid length. [ 633.390137][T20604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.409167][T20604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.502240][T20634] loop7: detected capacity change from 0 to 128 [ 633.517841][T16213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.535279][T20634] vfat: Unknown parameter '000000000000000000000050xffffffffffffffff' [ 633.586785][T20638] syzkaller1: entered promiscuous mode [ 633.592387][T20638] syzkaller1: entered allmulticast mode [ 633.643106][T20644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4673'. [ 633.658514][T20644] bond11: entered promiscuous mode [ 633.663844][T20644] bond11: entered allmulticast mode [ 633.669272][T20644] 8021q: adding VLAN 0 to HW filter on device bond11 [ 633.684408][T20644] erspan1: entered allmulticast mode [ 633.692453][T20644] erspan1: entered promiscuous mode [ 633.698528][T20644] bond11: (slave erspan1): Enslaving as an active interface with an up link [ 633.709110][T20644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4673'. [ 633.732496][T20644] bond11 (unregistering): (slave erspan1): Releasing backup interface [ 633.744216][T20644] erspan1: left promiscuous mode [ 633.753964][T12669] tipc: Subscription rejected, illegal request [ 633.756418][T20644] bond11 (unregistering): Released all slaves [ 633.840491][T20654] netlink: 'syz.2.4677': attribute type 10 has an invalid length. [ 633.851189][T20656] netlink: 'syz.0.4678': attribute type 1 has an invalid length. [ 633.964514][T20654] team0 (unregistering): Port device team_slave_0 removed [ 633.998030][T20647] loop6: detected capacity change from 0 to 2048 [ 634.004029][T20654] team0 (unregistering): Port device team_slave_1 removed [ 634.611338][T20683] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 634.688115][T20685] loop6: detected capacity change from 0 to 512 [ 634.699329][T20685] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 634.713571][T20685] EXT4-fs (loop6): 1 truncate cleaned up [ 634.731707][T20685] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.798737][T16213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.949314][T20708] loop7: detected capacity change from 0 to 1024 [ 634.984026][T20708] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 635.061110][T20708] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #3: block 3: comm syz.7.4690: lblock 3 mapped to illegal pblock 3 (length 1) [ 635.090954][T20708] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 635.091152][T20708] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4690: Failed to acquire dquot type 0 [ 635.100295][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 635.100319][ C0] EXT4-fs (loop7): initial error at time 2000000426: ext4_map_blocks:833: inode 3: block 3 [ 635.100354][ C0] EXT4-fs (loop7): last error at time 2000000426: ext4_map_blocks:833: inode 3: block 3 [ 635.191103][ T7678] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 635.286647][T20708] loop7: lost filesystem error report for type 5 error -117 [ 635.286819][T20708] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 3: comm syz.7.4690: lblock 3 mapped to illegal pblock 3 (length 1) [ 635.368609][T20708] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 635.368771][T20708] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4690: Failed to acquire dquot type 0 [ 635.451047][T20708] loop7: lost filesystem error report for type 5 error -117 [ 635.451272][T20708] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.4690: Freeing blocks not in datazone - block = 0, count = 4096 [ 635.521365][T20708] loop7: lost filesystem error report for type 5 error -117 [ 635.521608][T20708] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 3: comm syz.7.4690: lblock 3 mapped to illegal pblock 3 (length 1) [ 635.572330][T20708] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 635.572511][T20708] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4690: Failed to acquire dquot type 0 [ 635.617570][T20708] loop7: lost filesystem error report for type 5 error -117 [ 635.617824][T20708] EXT4-fs (loop7): 1 orphan inode deleted [ 636.713500][T20708] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.803545][T20730] netlink: 'syz.2.4697': attribute type 10 has an invalid length. [ 636.956407][T20734] netlink: 'syz.6.4698': attribute type 1 has an invalid length. [ 636.989591][T20734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4698'. [ 638.871333][ T3383] net_ratelimit: 174 callbacks suppressed [ 638.871372][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.208850][T20601] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 639.305894][T20747] loop6: detected capacity change from 0 to 1024 [ 639.413927][T20759] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4706'. [ 639.491807][T20759] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4706'. [ 639.509589][T20747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 639.529734][T20759] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4706'. [ 639.548162][T20747] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.559964][T20769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4706'. [ 639.581917][T20769] SELinux: syz.1.4706 (20769) wrote to checkreqprot. This is no longer supported. [ 639.634567][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.647513][T20765] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 639.704302][T20765] EXT4-fs (loop6): Remounting filesystem read-only [ 639.787201][T12689] tipc: Subscription rejected, illegal request [ 639.909324][T20782] xt_hashlimit: size too large, truncated to 1048576 [ 639.989081][T17254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.045792][T16213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 640.488092][T20791] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4714'. [ 640.531078][T20793] netlink: 'syz.7.4715': attribute type 10 has an invalid length. [ 640.544646][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.732596][T20793] loop7: detected capacity change from 0 to 128 [ 640.742592][T20798] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 640.773697][T20793] vfat: Unknown parameter '000000000000000000000050xffffffffffffffff' [ 640.783169][T20801] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4718'. [ 640.855772][T20798] loop6: detected capacity change from 0 to 512 [ 640.925053][T20798] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.4717: corrupted in-inode xattr: invalid size in ea xattr [ 640.973227][T20798] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 640.976000][T20798] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4717: couldn't read orphan inode 15 (err -117) [ 640.985440][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 640.985492][ C0] EXT4-fs (loop6): initial error at time 2000000432: ext4_iget_extra_inode:5128: inode 15 [ 640.985578][ C0] EXT4-fs (loop6): last error at time 2000000432: ext4_iget_extra_inode:5128: inode 15 [ 641.078882][T20798] loop6: lost filesystem error report for type 5 error -117 [ 641.080545][T20798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.100343][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.121529][T20814] loop7: detected capacity change from 0 to 512 [ 641.153351][T20814] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 641.501249][T20814] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.4723: invalid indirect mapped block 4294967295 (level 0) [ 641.556464][T20814] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 641.556972][T20814] EXT4-fs (loop7): Remounting filesystem read-only [ 641.566235][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 641.566271][ C0] EXT4-fs (loop7): initial error at time 2000000432: ext4_free_branches:1023: inode 16 [ 641.566357][ C0] EXT4-fs (loop7): last error at time 2000000432: ext4_free_branches:1023: inode 16 [ 641.653781][T20814] EXT4-fs (loop7): 1 orphan inode deleted [ 641.670641][T20814] EXT4-fs (loop7): 1 truncate cleaned up [ 641.694278][T20814] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.781161][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.832784][T20828] ref_ctr increment failed for inode: 0x6ab offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88814249d7c0 [ 641.846377][T20833] loop7: detected capacity change from 0 to 164 [ 641.860283][T20827] uprobe: syz.1.4729:20827 failed to unregister, leaking uprobe [ 641.882523][T20833] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 642.002986][T20798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.368541][T20870] bridge3: entered promiscuous mode [ 642.384059][T20870] bridge3: entered allmulticast mode [ 642.416460][T16213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.506779][T20874] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4742'. [ 642.566805][T20877] ipvlan2: entered promiscuous mode [ 642.572712][T20877] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 642.585876][T20877] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 642.596930][T20877] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 642.807796][T20884] FAULT_INJECTION: forcing a failure. [ 642.807796][T20884] name failslab, interval 1, probability 0, space 0, times 0 [ 642.821482][T20884] CPU: 1 UID: 0 PID: 20884 Comm: syz.1.4745 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 642.821566][T20884] Tainted: [W]=WARN [ 642.821574][T20884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 642.821588][T20884] Call Trace: [ 642.821596][T20884] [ 642.821604][T20884] __dump_stack+0x1d/0x30 [ 642.821630][T20884] dump_stack_lvl+0x95/0xd0 [ 642.821654][T20884] dump_stack+0x15/0x1b [ 642.821731][T20884] should_fail_ex+0x263/0x280 [ 642.821827][T20884] should_failslab+0x8c/0xb0 [ 642.821862][T20884] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 642.821898][T20884] ? sidtab_sid2str_get+0xa0/0x130 [ 642.821930][T20884] kmemdup_noprof+0x2b/0x70 [ 642.821964][T20884] sidtab_sid2str_get+0xa0/0x130 [ 642.821994][T20884] security_sid_to_context_core+0x1eb/0x2e0 [ 642.822024][T20884] security_sid_to_context+0x27/0x40 [ 642.822046][T20884] selinux_lsm_getattr+0x1c2/0x230 [ 642.822080][T20884] selinux_getselfattr+0x4d/0xd0 [ 642.822117][T20884] security_getselfattr+0x24d/0x500 [ 642.822199][T20884] __x64_sys_lsm_get_self_attr+0x51/0x60 [ 642.822295][T20884] x64_sys_call+0x1b6f/0x3020 [ 642.822318][T20884] do_syscall_64+0x12c/0x3b0 [ 642.822357][T20884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.822382][T20884] RIP: 0033:0x7fc135d4ce59 [ 642.822401][T20884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.822467][T20884] RSP: 002b:00007fc134786028 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 642.822486][T20884] RAX: ffffffffffffffda RBX: 00007fc135fc6090 RCX: 00007fc135d4ce59 [ 642.822500][T20884] RDX: 0000200000000040 RSI: ffffffffffffffff RDI: 0000000000000064 [ 642.822514][T20884] RBP: 00007fc134786090 R08: 0000000000000000 R09: 0000000000000000 [ 642.822530][T20884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.822545][T20884] R13: 00007fc135fc6128 R14: 00007fc135fc6090 R15: 00007fffd5c0bb38 [ 642.822640][T20884] [ 643.306734][T20890] loop6: detected capacity change from 0 to 512 [ 643.332644][T20890] EXT4-fs: Ignoring removed nobh option [ 643.332793][T20890] ext4: Unknown parameter 'noload"init_itable' [ 643.394551][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 643.394566][ T28] audit: type=1326 audit(2000000434.627:15293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20889 comm="syz.6.4747" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf34f8ce59 code=0x7ffc0000 [ 643.444054][ T28] audit: type=1326 audit(2000000434.664:15294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20889 comm="syz.6.4747" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf34f8ce59 code=0x7ffc0000 [ 643.470009][ T28] audit: type=1326 audit(2000000434.664:15295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20889 comm="syz.6.4747" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf34f8ce59 code=0x7ffc0000 [ 643.512325][T20898] loop6: detected capacity change from 0 to 512 [ 643.539657][T20898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.595255][ T28] audit: type=1326 audit(2000000434.664:15296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20889 comm="syz.6.4747" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7faf34f8ce59 code=0x7ffc0000 [ 643.688498][ T28] audit: type=1326 audit(2000000434.664:15297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20889 comm="syz.6.4747" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf34f8ce59 code=0x7ffc0000 [ 643.745661][ T28] audit: type=1326 audit(2000000434.664:15298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20889 comm="syz.6.4747" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf34f8ce59 code=0x7ffc0000 [ 643.796619][ T28] audit: type=1326 audit(2000000434.664:15299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20889 comm="syz.6.4747" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf34f8ce59 code=0x7ffc0000 [ 643.823124][ T28] audit: type=1326 audit(2000000434.664:15300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20889 comm="syz.6.4747" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faf34f8ce59 code=0x7ffc0000 [ 643.841941][T20904] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4750'. [ 643.848979][ T28] audit: type=1326 audit(2000000434.664:15301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20889 comm="syz.6.4747" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf34f8ce59 code=0x7ffc0000 [ 643.849013][ T28] audit: type=1326 audit(2000000434.674:15302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20889 comm="syz.6.4747" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf34f8ce59 code=0x7ffc0000 [ 643.893053][T20898] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4747'. [ 643.937848][T20904] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4750'. [ 643.984184][T20917] netlink: 'syz.0.4753': attribute type 10 has an invalid length. [ 644.257249][T16213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.609150][T20955] loop6: detected capacity change from 0 to 256 [ 647.464461][T20956] bridge8: entered promiscuous mode [ 647.469917][T20956] bridge8: entered allmulticast mode [ 647.489713][T20955] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 647.577388][T20954] bridge2: entered promiscuous mode [ 647.582852][T20954] bridge2: entered allmulticast mode [ 647.879386][T20975] FAULT_INJECTION: forcing a failure. [ 647.879386][T20975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.918553][T20975] CPU: 1 UID: 0 PID: 20975 Comm: syz.7.4768 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 647.918585][T20975] Tainted: [W]=WARN [ 647.918593][T20975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 647.918662][T20975] Call Trace: [ 647.918669][T20975] [ 647.918678][T20975] __dump_stack+0x1d/0x30 [ 647.918762][T20975] dump_stack_lvl+0x95/0xd0 [ 647.918783][T20975] dump_stack+0x15/0x1b [ 647.918802][T20975] should_fail_ex+0x263/0x280 [ 647.918827][T20975] should_fail+0xb/0x20 [ 647.918847][T20975] should_fail_usercopy+0x1a/0x20 [ 647.918940][T20975] _copy_from_user+0x1c/0xb0 [ 647.918984][T20975] inet6_ioctl+0xf1/0x190 [ 647.919025][T20975] sock_do_ioctl+0x73/0x230 [ 647.919108][T20975] sock_ioctl+0x41b/0x610 [ 647.919137][T20975] ? mutex_lock+0x57/0x90 [ 647.919166][T20975] ? __pfx_sock_ioctl+0x10/0x10 [ 647.919201][T20975] __se_sys_ioctl+0xce/0x140 [ 647.919296][T20975] __x64_sys_ioctl+0x43/0x50 [ 647.919323][T20975] x64_sys_call+0x1563/0x3020 [ 647.919436][T20975] do_syscall_64+0x12c/0x3b0 [ 647.919472][T20975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.919496][T20975] RIP: 0033:0x7efdbf4dce59 [ 647.919512][T20975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.919616][T20975] RSP: 002b:00007efdbdf2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.919643][T20975] RAX: ffffffffffffffda RBX: 00007efdbf755fa0 RCX: 00007efdbf4dce59 [ 647.919658][T20975] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000004 [ 647.919672][T20975] RBP: 00007efdbdf2f090 R08: 0000000000000000 R09: 0000000000000000 [ 647.919686][T20975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.919699][T20975] R13: 00007efdbf756038 R14: 00007efdbf755fa0 R15: 00007ffe71683d38 [ 647.919718][T20975] [ 648.224811][T20995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4777'. [ 648.809383][T21017] loop7: detected capacity change from 0 to 256 [ 649.407944][ T28] kauditd_printk_skb: 322 callbacks suppressed [ 649.407963][ T28] audit: type=1326 audit(2000000439.809:15625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20997 comm="syz.2.4778" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f6166d68e code=0x7ffc0000 [ 649.453842][T21017] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 649.530289][T21017] bridge2: entered promiscuous mode [ 649.536135][T21017] bridge2: entered allmulticast mode [ 649.548821][ T28] audit: type=1326 audit(2000000440.146:15626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20997 comm="syz.2.4778" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2f616ace59 code=0x7ffc0000 [ 649.583996][ T28] audit: type=1326 audit(2000000440.258:15627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20997 comm="syz.2.4778" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f616ace59 code=0x7ffc0000 [ 649.811866][ T28] audit: type=1326 audit(2000000440.258:15628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20997 comm="syz.2.4778" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f616ace59 code=0x7ffc0000 [ 649.938791][ T28] audit: type=1326 audit(2000000440.258:15629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20997 comm="syz.2.4778" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f616ace59 code=0x7ffc0000 [ 650.029365][ T28] audit: type=1326 audit(2000000440.258:15630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20997 comm="syz.2.4778" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f616ace59 code=0x7ffc0000 [ 650.534616][ T28] audit: type=1326 audit(2000000441.259:15631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20997 comm="syz.2.4778" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2f616ace59 code=0x7ffc0000 [ 650.648537][T21053] netlink: 'syz.1.4792': attribute type 1 has an invalid length. [ 650.656313][T21055] netlink: 'syz.7.4793': attribute type 3 has an invalid length. [ 650.685510][T21055] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4793'. [ 650.694575][T21053] bond11: (slave geneve2): making interface the new active one [ 650.712460][T21053] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 650.819026][T21055] netlink: 'syz.7.4793': attribute type 3 has an invalid length. [ 650.828252][T21055] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4793'. [ 650.832016][T12669] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 650.846065][T21055] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4793'. [ 650.875827][T12669] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 650.902210][T21066] netlink: 328 bytes leftover after parsing attributes in process `syz.2.4797'. [ 650.911458][T12669] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 650.911476][ T28] audit: type=1400 audit(2000000441.642:15632): avc: denied { nlmsg_read } for pid=21065 comm="syz.2.4797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 650.920703][T12669] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 651.335131][T21085] tipc: Failed to obtain node identity [ 651.340678][T21085] tipc: Enabling of bearer rejected, failed to enable media [ 651.786831][T21095] loop6: detected capacity change from 0 to 2048 [ 652.154817][ T28] audit: type=1326 audit(2000000442.138:15633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21073 comm="syz.1.4799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 652.219373][ T28] audit: type=1326 audit(2000000442.138:15634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21073 comm="syz.1.4799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 652.402996][T21109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4809'. [ 652.501123][T21115] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=21115 comm=syz.1.4812 [ 652.712260][T21145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.721045][T21145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.729779][T21145] bridge0: port 3(syz_tun) entered blocking state [ 652.737088][T21145] bridge0: port 3(syz_tun) entered disabled state [ 652.744038][T21145] syz_tun: entered allmulticast mode [ 652.750295][T21145] syz_tun: entered promiscuous mode [ 652.759400][T21145] bridge0: port 3(syz_tun) entered blocking state [ 652.765888][T21145] bridge0: port 3(syz_tun) entered forwarding state [ 652.784384][T21145] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4824'. [ 652.806764][T21150] netlink: 'syz.0.4826': attribute type 3 has an invalid length. [ 652.814570][T21150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4826'. [ 652.823685][T21150] netlink: 'syz.0.4826': attribute type 3 has an invalid length. [ 652.831613][T21150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4826'. [ 652.841243][T21150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4826'. [ 653.720714][T21181] loop6: detected capacity change from 0 to 512 [ 653.808333][T21181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.858052][T21181] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.983505][T21181] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 654.059629][T16213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.141276][T21219] batadv_slave_1: entered promiscuous mode [ 654.152466][T21219] FAULT_INJECTION: forcing a failure. [ 654.152466][T21219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.166397][T21219] CPU: 0 UID: 0 PID: 21219 Comm: syz.6.4849 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 654.166433][T21219] Tainted: [W]=WARN [ 654.166521][T21219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 654.166535][T21219] Call Trace: [ 654.166544][T21219] [ 654.166552][T21219] __dump_stack+0x1d/0x30 [ 654.166577][T21219] dump_stack_lvl+0x95/0xd0 [ 654.166599][T21219] dump_stack+0x15/0x1b [ 654.166620][T21219] should_fail_ex+0x263/0x280 [ 654.166680][T21219] should_fail+0xb/0x20 [ 654.166697][T21219] should_fail_usercopy+0x1a/0x20 [ 654.166720][T21219] _copy_from_user+0x1c/0xb0 [ 654.166747][T21219] ___sys_sendmsg+0xc1/0x1e0 [ 654.166867][T21219] __x64_sys_sendmsg+0xd4/0x160 [ 654.166956][T21219] x64_sys_call+0x194c/0x3020 [ 654.166983][T21219] do_syscall_64+0x12c/0x3b0 [ 654.167018][T21219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.167045][T21219] RIP: 0033:0x7faf34f8ce59 [ 654.167090][T21219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.167159][T21219] RSP: 002b:00007faf339df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.167180][T21219] RAX: ffffffffffffffda RBX: 00007faf35205fa0 RCX: 00007faf34f8ce59 [ 654.167195][T21219] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 654.167219][T21219] RBP: 00007faf339df090 R08: 0000000000000000 R09: 0000000000000000 [ 654.167232][T21219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.167277][T21219] R13: 00007faf35206038 R14: 00007faf35205fa0 R15: 00007ffdaba5f0b8 [ 654.167300][T21219] [ 654.167490][T21217] batadv_slave_1: left promiscuous mode [ 654.189318][T21222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4848'. [ 654.209185][T21221] batadv_slave_1: entered promiscuous mode [ 654.363619][T21221] batadv_slave_1: left promiscuous mode [ 654.379691][T21228] netlink: 'syz.1.4852': attribute type 3 has an invalid length. [ 654.390829][T21230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4854'. [ 654.395407][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4852'. [ 654.409205][T21228] netlink: 'syz.1.4852': attribute type 3 has an invalid length. [ 654.417415][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4852'. [ 654.426793][T21228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4852'. [ 654.513667][T21235] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4855'. [ 654.624889][T21247] loop7: detected capacity change from 0 to 512 [ 654.636183][T21247] EXT4-fs: Ignoring removed i_version option [ 654.642654][T21247] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 654.734821][T21256] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4864'. [ 655.032617][T21261] loop7: detected capacity change from 0 to 256 [ 655.061690][T21261] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 655.153809][T21261] bridge3: entered promiscuous mode [ 655.160635][T21261] bridge3: entered allmulticast mode [ 655.410966][T21267] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 655.417614][T21267] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 655.429784][T21267] vhci_hcd vhci_hcd.0: Device attached [ 655.993019][ T23] usb 4-1: SetAddress Request (2) to port 0 [ 655.994801][T21267] tipc: Invalid UDP bearer configuration [ 656.500095][ T23] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 656.539132][T21267] tipc: Enabling of bearer rejected, failed to enable media [ 657.075053][T21282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21282 comm=syz.2.4870 [ 657.140772][T21287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4872'. [ 657.150187][T21287] lo: Caught tx_queue_len zero misconfig [ 657.190750][T21289] loop7: detected capacity change from 0 to 1024 [ 657.202982][T21289] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 657.298306][T21289] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #3: block 3: comm syz.7.4871: lblock 3 mapped to illegal pblock 3 (length 1) [ 657.312612][T21289] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 657.313093][T21289] __quota_error: 611 callbacks suppressed [ 657.313121][T21289] Quota error (device loop7): write_blk: dquota write failed [ 657.322165][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 657.322189][ C1] EXT4-fs (loop7): initial error at time 2000000447: ext4_map_blocks:833: inode 3: block 3 [ 657.322232][ C1] EXT4-fs (loop7): last error at time 2000000447: ext4_map_blocks:833: inode 3: block 3 [ 657.361860][T21289] Quota error (device loop7): find_free_dqentry: Can't write quota data block 3 [ 657.370968][T21289] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 657.381227][T21289] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4871: Failed to acquire dquot type 0 [ 657.392774][T21289] loop7: lost filesystem error report for type 5 error -117 [ 657.393213][T21289] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 3: comm syz.7.4871: lblock 3 mapped to illegal pblock 3 (length 1) [ 657.415034][T21289] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 657.415627][T21289] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 657.434784][T21289] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4871: Failed to acquire dquot type 0 [ 657.446158][T21289] loop7: lost filesystem error report for type 5 error -117 [ 657.446825][T21289] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.4871: Freeing blocks not in datazone - block = 0, count = 4096 [ 657.467590][T21289] loop7: lost filesystem error report for type 5 error -117 [ 657.474867][T21289] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 3: comm syz.7.4871: lblock 3 mapped to illegal pblock 3 (length 1) [ 657.496268][T21289] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 657.496455][T21289] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 657.515756][T21289] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4871: Failed to acquire dquot type 0 [ 657.528009][T21289] loop7: lost filesystem error report for type 5 error -117 [ 657.528899][T21289] EXT4-fs (loop7): 1 orphan inode deleted [ 657.542658][T21289] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.566576][ T28] audit: type=1326 audit(2000000447.881:16246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21294 comm="syz.0.4873" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 657.602144][ T28] audit: type=1326 audit(2000000447.881:16247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21294 comm="syz.0.4873" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 657.627992][ T28] audit: type=1326 audit(2000000447.881:16248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21294 comm="syz.0.4873" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 657.655928][ T28] audit: type=1326 audit(2000000447.881:16249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21294 comm="syz.0.4873" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 657.686024][ T28] audit: type=1326 audit(2000000447.881:16250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21294 comm="syz.0.4873" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fde8bf9ce59 code=0x7ffc0000 [ 657.712051][T21268] vhci_hcd: connection reset by peer [ 657.718644][T12676] vhci_hcd vhci_hcd.1: stop threads [ 657.729901][T12676] vhci_hcd vhci_hcd.1: release socket [ 657.741015][T12676] vhci_hcd vhci_hcd.1: disconnect device [ 657.974814][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.019040][T21312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4880'. [ 658.221208][T21312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4880'. [ 658.327351][T21318] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 658.450109][T21341] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 658.466343][T21341] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 658.654517][T21353] syzkaller0: entered promiscuous mode [ 658.662018][T21353] syzkaller0: entered allmulticast mode [ 658.684871][T21353] loop6: detected capacity change from 0 to 128 [ 658.708064][T21353] TC_ACT_REPEAT abuse ? [ 659.090176][T21367] syz_tun: entered promiscuous mode [ 659.099777][T21367] syz_tun: left promiscuous mode [ 659.257395][T21369] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 659.311303][T21371] erspan0: entered promiscuous mode [ 659.465347][T21377] netlink: 'syz.2.4899': attribute type 1 has an invalid length. [ 660.029256][T21382] loop7: detected capacity change from 0 to 8192 [ 660.159501][T21391] loop7: detected capacity change from 0 to 512 [ 660.181988][T21391] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 660.195046][T21391] EXT4-fs (loop7): orphan cleanup on readonly fs [ 660.209635][T21391] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4903: Failed to acquire dquot type 1 [ 660.258226][T21391] loop7: lost filesystem error report for type 5 error -5 [ 660.258636][T21391] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4903: bg 0: block 40: padding at end of block bitmap is not set [ 660.280102][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 660.280124][ C0] EXT4-fs (loop7): initial error at time 2000000450: ext4_acquire_dquot:7034 [ 660.280146][ C0] EXT4-fs (loop7): last error at time 2000000450: ext4_acquire_dquot:7034 [ 660.377872][T21391] loop7: lost filesystem error report for type 5 error -117 [ 660.378044][T21391] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 660.412547][T21403] __nla_validate_parse: 6 callbacks suppressed [ 660.412564][T21403] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4907'. [ 660.421751][T21391] loop7: lost filesystem error report for type 5 error -117 [ 660.443141][T21391] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #16: comm syz.7.4903: data will be lost [ 660.465534][T12669] tipc: Subscription rejected, illegal request [ 660.466527][T21391] EXT4-fs (loop7): 1 truncate cleaned up [ 660.481159][T21391] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 660.510742][T21411] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 661.000209][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.761717][T21450] loop7: detected capacity change from 0 to 164 [ 661.780734][T21450] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 661.829563][T21450] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 661.839806][T12669] tipc: Subscription rejected, illegal request [ 661.845747][T21450] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 661.921528][T21464] loop6: detected capacity change from 0 to 512 [ 661.975087][T21464] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 661.979004][ T23] usb 4-1: device descriptor read/8, error -110 [ 662.021127][T21469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4927'. [ 662.047305][T21469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=21469 comm=syz.0.4927 [ 662.061962][T21475] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4925'. [ 662.075301][T21464] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.105934][T21464] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 662.120605][ T23] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 662.127848][T21479] loop7: detected capacity change from 0 to 512 [ 662.136515][T21469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=21469 comm=syz.0.4927 [ 662.149517][ T23] usb 4-1: enqueue for inactive port 0 [ 662.155265][ T23] usb 4-1: enqueue for inactive port 0 [ 662.160858][ T23] usb 4-1: enqueue for inactive port 0 [ 662.169082][T21469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=21469 comm=syz.0.4927 [ 662.195951][T21479] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 662.222759][T16213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.243368][T21488] netlink: 'syz.1.4931': attribute type 11 has an invalid length. [ 662.270345][T21479] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.4928: Unimplemented hash flags: 0x0001 [ 662.282448][T21479] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4928: Corrupt directory, running e2fsck is recommended [ 662.332513][T21488] FAULT_INJECTION: forcing a failure. [ 662.332513][T21488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.345948][T21488] CPU: 1 UID: 0 PID: 21488 Comm: syz.1.4931 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 662.345989][T21488] Tainted: [W]=WARN [ 662.345996][T21488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 662.346063][T21488] Call Trace: [ 662.346071][T21488] [ 662.346080][T21488] __dump_stack+0x1d/0x30 [ 662.346106][T21488] dump_stack_lvl+0x95/0xd0 [ 662.346131][T21488] dump_stack+0x15/0x1b [ 662.346153][T21488] should_fail_ex+0x263/0x280 [ 662.346229][T21488] should_fail+0xb/0x20 [ 662.346250][T21488] should_fail_usercopy+0x1a/0x20 [ 662.346290][T21488] _copy_to_user+0x20/0xa0 [ 662.346316][T21488] simple_read_from_buffer+0xb5/0x130 [ 662.346423][T21488] proc_fail_nth_read+0x10e/0x150 [ 662.346457][T21488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 662.346490][T21488] vfs_read+0x1ab/0x7f0 [ 662.346530][T21488] ? __rcu_read_unlock+0x4e/0x70 [ 662.346660][T21488] ? __fget_files+0x184/0x1c0 [ 662.346685][T21488] ? mutex_lock+0x57/0x90 [ 662.346713][T21488] ksys_read+0xdc/0x1a0 [ 662.346779][T21488] __x64_sys_read+0x40/0x50 [ 662.346921][T21488] x64_sys_call+0x2886/0x3020 [ 662.346950][T21488] do_syscall_64+0x12c/0x3b0 [ 662.346999][T21488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.347025][T21488] RIP: 0033:0x7fc135d0d68e [ 662.347060][T21488] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 662.347082][T21488] RSP: 002b:00007fc1347a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 662.347105][T21488] RAX: ffffffffffffffda RBX: 00007fc1347a76c0 RCX: 00007fc135d0d68e [ 662.347122][T21488] RDX: 000000000000000f RSI: 00007fc1347a70a0 RDI: 000000000000000b [ 662.347146][T21488] RBP: 00007fc1347a7090 R08: 0000000000000000 R09: 0000000000000000 [ 662.347233][T21488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.347248][T21488] R13: 00007fc135fc6038 R14: 00007fc135fc5fa0 R15: 00007fffd5c0bb38 [ 662.347271][T21488] [ 662.431940][T21493] netlink: 'syz.2.4933': attribute type 29 has an invalid length. [ 662.435472][T21496] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.4928: Unimplemented hash flags: 0x0001 [ 662.435499][T21496] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4928: Corrupt directory, running e2fsck is recommended [ 662.445290][T21479] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.4928: Unimplemented hash flags: 0x0001 [ 662.520080][T21493] netlink: 'syz.2.4933': attribute type 29 has an invalid length. [ 662.526420][T21479] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4928: Corrupt directory, running e2fsck is recommended [ 662.685711][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.696908][ T28] kauditd_printk_skb: 784 callbacks suppressed [ 662.697003][ T28] audit: type=1326 audit(2000000452.689:17033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21499 comm="syz.1.4934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 662.734783][ T28] audit: type=1326 audit(2000000452.717:17034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21499 comm="syz.1.4934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 662.762509][ T28] audit: type=1326 audit(2000000452.717:17035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21499 comm="syz.1.4934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 662.788384][ T28] audit: type=1326 audit(2000000452.717:17036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21499 comm="syz.1.4934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 662.805841][T21506] loop6: detected capacity change from 0 to 512 [ 662.818568][ T28] audit: type=1326 audit(2000000452.717:17037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21499 comm="syz.1.4934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 662.826515][T21493] netlink: 'syz.2.4933': attribute type 32 has an invalid length. [ 662.846750][ T28] audit: type=1326 audit(2000000452.717:17038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21499 comm="syz.1.4934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 662.865414][T21506] EXT4-fs: Ignoring removed nomblk_io_submit option [ 662.881143][ T28] audit: type=1326 audit(2000000452.717:17039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21499 comm="syz.1.4934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 662.931221][ T28] audit: type=1326 audit(2000000452.886:17040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21499 comm="syz.1.4934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc135d4ce59 code=0x7ffc0000 [ 662.965407][T21506] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 662.975857][T21506] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.4937: corrupted in-inode xattr: e_value size too large [ 662.991445][T21506] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 662.992352][T21506] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4937: couldn't read orphan inode 15 (err -117) [ 662.995907][T21517] xt_ecn: cannot match TCP bits for non-tcp packets [ 663.001850][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 663.027130][ C1] EXT4-fs (loop6): initial error at time 2000000452: ext4_iget_extra_inode:5128: inode 15 [ 663.037532][ C1] EXT4-fs (loop6): last error at time 2000000452: ext4_iget_extra_inode:5128: inode 15 [ 663.047789][T21506] loop6: lost filesystem error report for type 5 error -117 [ 663.050755][T21506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.184464][T16213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.485851][ T28] audit: type=1326 audit(2000000453.400:17041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21547 comm="syz.6.4949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf34f8ce59 code=0x7ffc0000 [ 663.586028][ T23] usb usb4-port1: attempt power cycle [ 663.649664][ T28] audit: type=1326 audit(2000000453.400:17042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21547 comm="syz.6.4949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf34f8ce59 code=0x7ffc0000 [ 665.134904][T21548] usb usb5: usbfs: interface 0 claimed by hub while 'syz.7.4948' sets config #0 [ 667.150481][T21569] loop7: detected capacity change from 0 to 512 [ 667.253000][T21571] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.260161][T21571] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.279286][T21573] tmpfs: Bad value for 'huge' [ 667.291365][T21578] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 667.291365][T21578] The task syz.7.4956 (21578) triggered the difference, watch for misbehavior. [ 667.309613][T21578] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4956'. [ 667.323457][T21578] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4956'. [ 667.376617][T21582] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4954'. [ 667.453508][T21571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.465065][T21571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.517956][T12676] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.527106][T12676] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.536070][T12676] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.545387][T12676] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.554945][T12676] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.564824][T12676] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.573846][T12676] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.585173][T12676] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.673361][T21596] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4965'. [ 667.710422][T21594] netlink: 'syz.1.4964': attribute type 1 has an invalid length. [ 667.711125][T21598] openvswitch: netlink: Flow actions attr not present in new flow. [ 667.761373][T21594] 8021q: adding VLAN 0 to HW filter on device bond14 [ 667.859939][T21604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4968'. [ 667.868904][T21604] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4968'. [ 667.878006][T21604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4968'. [ 668.053130][ T23] usb usb4-port1: unable to enumerate USB device [ 668.237491][T21643] netlink: 'syz.7.4980': attribute type 1 has an invalid length. [ 668.338281][T21643] bond11: entered promiscuous mode [ 668.352092][T21643] 8021q: adding VLAN 0 to HW filter on device bond11 [ 668.375677][T21665] bond11: (slave bridge4): making interface the new active one [ 668.383533][T21665] bridge4: entered promiscuous mode [ 668.394942][T21665] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 668.624632][T21688] loop6: detected capacity change from 0 to 256 [ 668.708423][T21695] syzkaller0: entered promiscuous mode [ 668.721742][T21695] syzkaller0: entered allmulticast mode [ 668.735535][T21695] tipc: Started in network mode [ 668.738105][T21704] netlink: 'syz.0.4994': attribute type 3 has an invalid length. [ 668.740795][T21695] tipc: Node identity 2a9b5ca0737, cluster identity 4711 [ 668.748690][T21704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4994'. [ 668.755782][T21695] tipc: Enabled bearer , priority 0 [ 668.765399][T21703] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4995'. [ 668.780574][T21704] netlink: 'syz.0.4994': attribute type 3 has an invalid length. [ 668.788751][T21704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4994'. [ 668.799151][T21694] tipc: Resetting bearer [ 668.830402][T21694] tipc: Disabling bearer [ 668.871244][T21707] 9p: Bad value for 'rfdno' [ 668.880579][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 668.880595][ T28] audit: type=1400 audit(2000000458.461:17066): avc: denied { mounton } for pid=21717 comm="syz.6.5000" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 669.228956][T21752] bridge0: port 3(gretap0) entered blocking state [ 669.236324][T21752] bridge0: port 3(gretap0) entered disabled state [ 669.252505][T21752] gretap0: entered allmulticast mode [ 669.268104][T21752] gretap0: entered promiscuous mode [ 669.353589][ T28] audit: type=1400 audit(2000000458.900:17067): avc: denied { mounton } for pid=21758 comm="syz.2.5015" path="/413/file0" dev="tmpfs" ino=2199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 669.745013][T21765] bond13: option min_links: invalid value (18446744073709551612) [ 669.753411][T21765] bond13: option min_links: allowed values 0 - 2147483647 [ 669.761828][T21765] bond13 (unregistering): Released all slaves [ 670.120879][T21781] bridge4: entered promiscuous mode [ 670.126969][T21781] bridge4: entered allmulticast mode [ 670.498993][T21790] netlink: 'syz.1.5026': attribute type 3 has an invalid length. [ 670.507296][T21790] netlink: 'syz.1.5026': attribute type 3 has an invalid length. [ 670.607525][ T7678] Bluetooth: hci0: command 0x1003 tx timeout [ 670.613910][T20627] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 670.675958][T21790] 9p: Bad value for 'rfdno' [ 671.081575][T21797] loop7: detected capacity change from 0 to 128 [ 671.471498][T21797] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 671.483174][T21797] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 671.600359][T21797] EXT4-fs (loop7): shut down requested (2) [ 671.701637][T17147] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 671.808439][ T28] audit: type=1326 audit(2000000461.202:17068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21817 comm="syz.7.5033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 671.876197][ T28] audit: type=1326 audit(2000000461.202:17069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21817 comm="syz.7.5033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 671.906837][ T28] audit: type=1326 audit(2000000461.202:17070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21817 comm="syz.7.5033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 671.935938][T21823] loop7: detected capacity change from 0 to 512 [ 671.947585][ T28] audit: type=1326 audit(2000000461.202:17071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21817 comm="syz.7.5033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 671.976857][ T28] audit: type=1326 audit(2000000461.202:17072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21817 comm="syz.7.5033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 672.014710][T21823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.027691][ T28] audit: type=1326 audit(2000000461.202:17073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21817 comm="syz.7.5033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 672.053504][ T28] audit: type=1326 audit(2000000461.220:17074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21817 comm="syz.7.5033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 672.064629][T21823] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 672.079488][ T28] audit: type=1326 audit(2000000461.220:17075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21817 comm="syz.7.5033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf4dce59 code=0x7ffc0000 [ 672.106313][T21812] bridge0: port 3(gretap0) entered blocking state [ 672.122329][T21812] bridge0: port 3(gretap0) entered forwarding state [ 672.199974][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.227684][T21838] ieee802154 phy0 wpan0: encryption failed: -22 [ 672.309128][T12666] tipc: Subscription rejected, illegal request [ 672.519448][T21855] netlink: 'syz.2.5048': attribute type 3 has an invalid length. [ 672.527374][T21855] netlink: 'syz.2.5048': attribute type 3 has an invalid length. [ 672.651062][T21858] 9p: Bad value for 'rfdno' [ 672.747353][T21863] loop6: detected capacity change from 0 to 512 [ 672.759646][T21863] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 672.786188][T21863] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.5051: Unimplemented hash flags: 0x0001 [ 672.799486][T21863] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.5051: Corrupt directory, running e2fsck is recommended [ 672.920224][T21866] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.5051: Unimplemented hash flags: 0x0001 [ 672.931852][T21866] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.5051: Corrupt directory, running e2fsck is recommended [ 672.931853][T21867] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.5051: Unimplemented hash flags: 0x0001 [ 672.956240][T21867] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.5051: Corrupt directory, running e2fsck is recommended [ 673.049961][T16213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.422701][T12689] tipc: Subscription rejected, illegal request [ 673.491477][T21898] __nla_validate_parse: 11 callbacks suppressed [ 673.491495][T21898] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5063'. [ 673.528860][T21898] bond12: entered promiscuous mode [ 673.542305][T21898] 8021q: adding VLAN 0 to HW filter on device bond12 [ 673.610641][T21909] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5066'. [ 673.792896][T21931] FAULT_INJECTION: forcing a failure. [ 673.792896][T21931] name failslab, interval 1, probability 0, space 0, times 0 [ 673.809562][T21934] netlink: 'syz.1.5074': attribute type 3 has an invalid length. [ 673.817676][T21931] CPU: 0 UID: 0 PID: 21931 Comm: syz.7.5073 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 673.817729][T21931] Tainted: [W]=WARN [ 673.817808][T21931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 673.817767][T21934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5074'. [ 673.817822][T21931] Call Trace: [ 673.817831][T21931] [ 673.817841][T21931] __dump_stack+0x1d/0x30 [ 673.817867][T21931] dump_stack_lvl+0x95/0xd0 [ 673.817898][T21931] dump_stack+0x15/0x1b [ 673.817923][T21931] should_fail_ex+0x263/0x280 [ 673.817990][T21931] should_failslab+0x8c/0xb0 [ 673.818054][T21931] kmem_cache_alloc_noprof+0x66/0x3f0 [ 673.818167][T21931] ? security_inode_alloc+0x37/0x100 [ 673.818202][T21931] security_inode_alloc+0x37/0x100 [ 673.818315][T21931] inode_init_always_gfp+0x4a0/0x4e0 [ 673.818359][T21931] ? __pfx_sock_alloc_inode+0x10/0x10 [ 673.818431][T21931] alloc_inode+0x58/0x170 [ 673.818451][T21931] do_accept+0xa0/0x390 [ 673.818473][T21931] ? _raw_spin_lock+0x52/0xa0 [ 673.818499][T21931] __sys_accept4+0xbe/0x170 [ 673.818589][T21931] __x64_sys_accept4+0x51/0x60 [ 673.818629][T21931] x64_sys_call+0x48d/0x3020 [ 673.818656][T21931] do_syscall_64+0x12c/0x3b0 [ 673.818690][T21931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.818714][T21931] RIP: 0033:0x7efdbf4dce59 [ 673.818732][T21931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.818798][T21931] RSP: 002b:00007efdbdf2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 673.818820][T21931] RAX: ffffffffffffffda RBX: 00007efdbf755fa0 RCX: 00007efdbf4dce59 [ 673.818836][T21931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 673.818850][T21931] RBP: 00007efdbdf2f090 R08: 0000000000000000 R09: 0000000000000000 [ 673.818909][T21931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.818923][T21931] R13: 00007efdbf756038 R14: 00007efdbf755fa0 R15: 00007ffe71683d38 [ 673.818955][T21931] [ 674.020736][T21934] netlink: 'syz.1.5074': attribute type 3 has an invalid length. [ 674.035493][T21934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5074'. [ 674.078301][T21934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5074'. [ 674.078337][T21940] loop7: detected capacity change from 0 to 512 [ 674.101530][T21940] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 674.147702][T21940] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.5076: Unimplemented hash flags: 0x0001 [ 674.160209][T21940] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5076: Corrupt directory, running e2fsck is recommended [ 674.325103][T21944] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.5076: Unimplemented hash flags: 0x0001 [ 674.336676][T21944] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5076: Corrupt directory, running e2fsck is recommended [ 674.336771][T21946] ================================================================== [ 674.357671][T21946] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 674.364289][T21946] [ 674.366616][T21946] write to 0xffffffff86c7e3b0 of 8 bytes by task 21944 on cpu 1: [ 674.374341][T21946] data_alloc+0x31c/0x390 [ 674.378782][T21946] prb_reserve+0x8d6/0xad0 [ 674.383211][T21946] vprintk_store+0x54a/0x910 [ 674.387840][T21946] vprintk_emit+0x1a4/0x600 [ 674.392351][T21946] vprintk_default+0x26/0x30 [ 674.396945][T21946] vprintk+0x1d/0x30 [ 674.400869][T21946] _printk+0x79/0xa0 [ 674.404769][T21946] __ext4_warning_inode+0x184/0x1a0 [ 674.409990][T21946] dx_probe+0x924/0x990 [ 674.414154][T21946] __ext4_find_entry+0x35a/0xdf0 [ 674.419106][T21946] ext4_lookup+0xcd/0x3a0 [ 674.423451][T21946] __lookup_slow+0x19d/0x260 [ 674.428060][T21946] lookup_slow+0x3c/0x60 [ 674.432315][T21946] path_lookupat+0x2f7/0x500 [ 674.436904][T21946] filename_lookup+0x190/0x390 [ 674.441667][T21946] kern_path+0x3b/0xf0 [ 674.445731][T21946] create_local_trace_uprobe+0x53/0x2d0 [ 674.451287][T21946] perf_uprobe_init+0xc0/0x150 [ 674.456047][T21946] perf_uprobe_event_init+0xc4/0x140 [ 674.461324][T21946] perf_try_init_event+0x254/0x6e0 [ 674.466439][T21946] perf_event_alloc+0xb2f/0x1a10 [ 674.471378][T21946] __se_sys_perf_event_open+0x4b8/0x1270 [ 674.477008][T21946] __x64_sys_perf_event_open+0x67/0x80 [ 674.482464][T21946] x64_sys_call+0x2789/0x3020 [ 674.487135][T21946] do_syscall_64+0x12c/0x3b0 [ 674.491727][T21946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.497614][T21946] [ 674.499925][T21946] read to 0xffffffff86c7e3b0 of 8 bytes by task 21946 on cpu 0: [ 674.507539][T21946] prb_reserve+0x216/0xad0 [ 674.511963][T21946] vprintk_store+0x54a/0x910 [ 674.516545][T21946] vprintk_emit+0x1a4/0x600 [ 674.521037][T21946] vprintk_default+0x26/0x30 [ 674.525620][T21946] vprintk+0x1d/0x30 [ 674.529617][T21946] _printk+0x79/0xa0 [ 674.533503][T21946] __ext4_warning_inode+0x184/0x1a0 [ 674.538704][T21946] dx_probe+0x728/0x990 [ 674.542852][T21946] __ext4_find_entry+0x35a/0xdf0 [ 674.547787][T21946] ext4_lookup+0xcd/0x3a0 [ 674.552110][T21946] path_openat+0xbf0/0x2050 [ 674.556608][T21946] do_file_open+0x16c/0x290 [ 674.561202][T21946] do_open_execat+0xab/0x240 [ 674.565806][T21946] alloc_bprm+0x25/0x350 [ 674.570051][T21946] do_execveat_common+0x104/0x720 [ 674.575077][T21946] __x64_sys_execveat+0x76/0xa0 [ 674.579926][T21946] x64_sys_call+0x2a33/0x3020 [ 674.584601][T21946] do_syscall_64+0x12c/0x3b0 [ 674.589189][T21946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.595081][T21946] [ 674.597398][T21946] value changed: 0x0000000000018f98 -> 0x00000000000d8e10 [ 674.604496][T21946] [ 674.606806][T21946] Reported by Kernel Concurrency Sanitizer on: [ 674.612942][T21946] CPU: 0 UID: 0 PID: 21946 Comm: syz.7.5076 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 674.623880][T21946] Tainted: [W]=WARN [ 674.627669][T21946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 674.637800][T21946] ================================================================== [ 674.336641][T21946] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.5076: Unimplemented hash flags: 0x0001 [ 674.657798][T21946] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5076: Corrupt directory, running e2fsck is recommended [ 674.689001][T21951] loop6: detected capacity change from 0 to 256 [ 674.742472][T17147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.