last executing test programs: 54.269735836s ago: executing program 4 (id=214): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000003240), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x401, 0xfffffffffffffff5, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x7, 0x7800, 0x2, 0x3ff, {{0xf, 0x4, 0x2, 0x7, 0x3c, 0x65, 0x0, 0x6, 0x29, 0x0, @remote, @remote, {[@timestamp={0x44, 0x8, 0x96, 0x0, 0x6, [0x1]}, @noop, @timestamp_addr={0x44, 0x1c, 0x51, 0x1, 0xb, [{@multicast2, 0x1}, {@multicast1, 0x3}, {@multicast1}]}, @generic={0x7, 0x3, "a6"}]}}}}}) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x82e1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x8, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 54.269510725s ago: executing program 4 (id=215): socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000003800070127bd7000fedb9f25037c000010000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x30}, 0x803, 0x0, 0x3, 0x9}, 0x20) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0xc4, 0x5, [{{@in6=@private2, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@empty, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x0, 0x2b}, 0x2, @in=@dev, 0xffffffef}]}]}, 0x17c}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000240)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r9}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000ac1e0101000000000000000000000000000000000000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000003c0000002001000000000000000000000000000000000000000000000000000000000000820000000000000000000000000000000000001000000000ffffffbfffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000400080000000000000014000e"], 0x104}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 53.30516767s ago: executing program 4 (id=231): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0x28b8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7e}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4004) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYRES64, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r4 = socket$inet(0x2, 0x3, 0x3) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) (async) sendmsg$inet(r4, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x20048894) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4811) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x54, 0x0, &(0x7f00000008c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5a10011e0f0544b00aab05450dc72ff6e8f62d070e87f2c73d153bf01de50151803c474719193467201bd7c0b9cad1d390aec6d", 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) (async) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") mount$nfs4(0x0, 0x0, 0x0, 0x14000, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) (async) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) (async) r7 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x85) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f0000003f80), 0x2}, {0x3, &(0x7f0000003fc0)=0x3, 0x82}, {0x6, &(0x7f0000004000)=0x6, 0x2}], 0x3, 0x0, 0x0, 0x1) (async) lsetxattr(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)=@random={'user.', '\x00'}, 0x0, 0x0, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r9, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) 53.220601403s ago: executing program 4 (id=232): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x0, 'netdevsim0\x00', {0x3}, 0x6}) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000000)=0x3, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x183001, 0x0) kexec_load(0x80000000000, 0x2, &(0x7f0000000300)=[{0x0, 0x0, 0x1000000, 0x10000}, {0x0, 0x0, 0x3e0000, 0xfffffffffffffffd}], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x14c1e, &(0x7f0000000200)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$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") symlink(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x511082, 0x100) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c8100000086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000", @ANYRES32=0x41424344, @ANYBLOB='J'], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r4, 0x80000001, 0x4) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000600), 0x2a) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) sendmsg$xdp(r6, &(0x7f0000002bc0)={&(0x7f0000000380)={0x2c, 0x0, r7, 0x30}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000000540)="11f7ebf31b8f93adc2b7842c4a9cf148e66724773e269d49428ae36c0ed7f97dd7ffcf76988fcb5e80564885def925e2c0928b28e90fbedb6de970724e380eb9a75ea7c0d45f1ff6426bc347879ce0383eb603a1ed884690e79f41df994a4f31a1b581b32525decef4e4236493989bdf8c2aea312b8107ac476c7c2a3a3a34d42176b8ed94a60a4e97617c12639acdafe29b21654f38c4dfeed9fb8edb9db352afe8fc3f968a7d813cb9582209a31e8d8a2a9c079e55", 0xb6}, {&(0x7f0000000640)="b961e0c0a861a8a207c4a274b0be333500f91fc7e589a8241629028d7d9964a87b7f33c190f88f3c2274b12b6d498a81355cbc3029693b4de0bf2ca6cf92ff3168e6ea1e29bc15ed3d324d03aa3ca38d5e8b87d94124925f9583da331e826cb1af2bb53c9e0369e87d32413417a8c4bf41758288c5efc2abe22d62da928e3ea01ab0b7d52ab3126b5a7ba3e97e18b095aa89777c529f0a9ea31130ea2a2feeb79819ae801a91d429d2c40fca20ebdec613168506c6ff6c6630bc509fcec7e7c9493a74f3c05a4c306fec4f656765da75e24a654cfcdfb73d3c6b1dce9a2b8a28fe", 0xe1}, {&(0x7f0000000740)="afe970d22c8bd4110b7ab06c2b43245ac483c60cbcb165df7fe2a7a3a042ebcd5649c5cf09143432e240387248a7d74fba11107bd2bd7193e2d23531bd4fa33f1c4872e21ac38b11fdda357c0b9f084f03dcdacc6d73a8b03723be8bae4390eb21e2020f8d6cf096072edbe22b8ceb7a07a4dd0701026c72d5ff4eb3d10ee1719187027f3f775cd8df4547fb9aad70878f16b67543bb5852ee09e474c2b4", 0x9e}, {&(0x7f0000000800)="3e5eaba9c0e38c880bd63dbfda45c5cdef1e0f24193ea5f33f5f335730e8f4f308b10189962cbf7dd7f1a63bc5644a7263783b4d4a023568692d68a980255c0044d76b35a755df6b2c473d11cf196d18a31bdfbc98d65e2442d3c4e655989e5bb68615e4fd3f7ced906df5eb4692347ee82826d6ce785d589c614fae0add6ea9f6247b8d6fd78abd4ed78cc704d6846836d6f0b93b3fb63a8f88a4ee72e212848f328734c051179e306a97add0b33d0ccc2a0e037f13c4d6ddc90e77997aa602568b", 0xc2}, {&(0x7f0000000900)="09322eb95f78e4d14c3309ae6c2dac940a46c7771095430b4d93dbaf47e4cca4761d3008344facf0d5c6fa39ac18a94205d97244edc27bce6f017f1e52d9eaf5e6c59c798a19d17ee5cc4afe8c3f6ad567b21f873c3f23aaf96e82e2dd5b42721de8e197ccbdbfdf0929188568468464ca4a42ea88a1d2f101024edb4bf66e8e7f19dd2d296fde2b08ea4bc3f0b9999881e76ea9cd61eec8a443202a0f765a60825577d4d77d4d5dd1eb3e65", 0xac}, {&(0x7f00000019c0)="14e86aacdc48060f99c7adc65211faebe5989848376274663311a36d165d5538dd0ea551a51720c73bf896dfb46646dc08a0a71b15056bef54bfdef13bcd6ff2528eec43285868a3456e62267d9e5699d8911e3e8649f5519cf33f29c86247732e8c8915d65d00bacf9ea37dcf7d7641e0c6ed8700e9583c1b5b08a4ec2b19a13e3859ef6639f29e5030f20f6c1cc7dc345303b4a7c0f862841e72dd5aebc04c92a61ee85a05395d616906af4d0e19ab5b6b6fe0fb6a68cc0f2400135feadf5dafe5f2e8304a9ecba0509ab11b05a7bee13daa908ae6234e4279911805518eb1c6e16e23c2a1eb23810ccb29aa6e99797c2509f245e78c3c338e72323f3a348f99057694d7082fad3652c5f3ef66dec153d466419e8384cb74e439103e8e5f45ed1b010276a00cf58b9011e7448293fc8dbd79d298e329f0e0a9103afa9323deb367c5e9eed9ebc088f21a947851b26c32ce7b7cb01e44af357aed4a4ea474241135eaba9fd5f7ff2e0a9d364e44f0b64ab84ad7ec632405905406d954bf36b28197017d10a5d8ca1f2edf97d7735fd9f356d68a59fee7c2518e3dbe397b2047eff929e07eb63892dd2a20c9681cb46d56c5d4d847d2e90aa99473b51c7abaadb6a233e6f190ad741aa200b05b44b783d4cc16fa1c80f78ea1674bd45e34aee9c3baafee7d4d61f2bd44f8b06bde3b83988b7de7aedc7269094d57cab5ead96ee12e45912f840b3735a21054109a7ca7ad82e70d6194c70fb75f6a4a5c35eb428b9e1650ca3f5575cd7733155b34fceec507f92e2be57e38fe76dbd4d8fe1b2b7e752c239ffad1f29523ca3a4971ee836108df99c16b27489273317fe9a278c6559c7b57c5b62ede76e340405b498f5abdaa7e211d143b2a10d278b493a47dcec5f00aefef0d2a60fd2733bb409a9c3f5328b216827b942c8afd1f1b654666b167df99ffe3c2a12c31b4b5ba5d8f14f8d90e37b0297307d5861c54e92bb08fe2fadfdaab36488db9a84c12423293bc9b74a42a33d049cdc9cf2247eddb75e6f5bb2dbc7d340f1e47bf9376b8f02510e33dc66f57af76afe5103021529b2c2bce29b674d7ece739d3d30ffda5d8cf9535da500f40fb97511a5c35b6703eeff82b8d9f6a1858ff60675f5111864f03f3cc7f352ea037ee8d98ee5e903866eae6c2cf332bbbd01609ff45c99f8643717797508868710a2c360580075609747e008789d79db6a1f1185e9b576720e6c864cc9bbbde19db4982a3c2b0f47ecebb8f7d75beacf4c12909c6ba22babd3626a10b8c3fc2a2d219fd0b090d622e4f637950a71812a0f06d3c1c1fa592986c17b39880e35c491e2772d7a61ffe045fd2b4252ec3c9d685207336df2352a22e1c66da9a44b7c70f5b4d1e0daf26660269453d3376213ad8a814ecf7afba1e603b4eda4b92b8167c1bd270d6fc52af33116dffdc67a7ed0de8088c1031f98a6f4f9a8194fe8fbcaad5f1e36847c51920937c4cd70d3700d1a90b6bbd5ce511b5f672cdf8a39a87984f8e02cfaa266fbafeedb7872f23acee98e04bdce70efb17a26e7e4e4c1ad9984280124d9c9355701ddf59c6951997f615636ca8915b66a3f125ae0971e5fe4b6800cfbd05a2c356d20aef6ab20ca85830bf4f1af6c54fb3caa954856eecd8d93f62083d96f792bb51511f80b862629da40b932ed347ac9f3de7da5886b1d40b18b6cf9050257b3be5de0835fc3b21004c05e8bbe65f5a4def2c71cface4e6eac14b830957d7e647acea2ccaa433a7d439bb4a45416b66019fa99866e58da3b66cd49eea16cb1f65c6edb6bae4919bd81d4803248bb7b03f4709460e1317d06115bd8ea9641b253afe3294616eaac504378f99307b89f8acdc2ff1f00240074a9f72db8d0449c1869ceb2efab421ce96b7974d9645621795cae12b7ef786d3239d7ef17bfe3aaa2843709835c32407c0d21653224a426c240652b9a9d5d6152f472fbfa15e029a559c1cb24e748a3dfeacd06021cf8cf2c74a9f8a2499534397e6c8aeaeaa2f2c3a998c7987b02abdefe33fa7d1dc1d3a0332e8a2a7e82a6d8ed3aa8c9a85dcbc2aa0c570b2f53d53c524765127f7710c439fb179c31315166b82f0c899af652d15dd6ca2307ca0a610f48806a6c3140d0ce8b7766c8d4706c1d245c557a870baca7aef50b178857d11f389f3437caf3736185f6d9a162eafc24af5ef22238f1682f36d3709d7ea9df0d44c9db2fb074a41a1d9cdd81936b92151559c4956e28c61f21a6268113c18af5e8b698b4723aafcd57636c0b2ca9dea68286e49e9f5962802cabe9325e593bc2c298f237489a9fac2c40496c47fceddb1b57f9be76462ffa1522ac7e0d6a7be3bb2ed1c876fb890c8691456e8fb228d8caf9f0a473e46f0b40127b9484641dc7831a495bda646cea817dbc5a289c2006ff58d4465318e58e38caf38c1802082f13f521ef6eb80ad4f4ecfe297f489bcc5f43357cabbc7de4e8e1c2bd0bc6e462ad20abe5efe18f8bf32f2101d557ae672fcc59d9d55d05e5e08372fcfefe4abcd6573999f540ff8b15548d7634c9195c8c31a4369f8ea1c14219569d5382efcc733b0d5827ddd06af653de4eebdd45e3c5855f58ae14ef62ccea4720cc10bf3dc9b9bdeb4bde32b0b8b8047f5b5f38583fd768056678871e98c311b524ea3bb326c4df9019935dd3249d9d2abf546a979bad2f33e99c4a82c572673418a84066c4be6fb25df103f2f93422c07e82046311640f16649f6547cf764c977b792da24da45e56d5fd411d2e07f1e401c69de5a69ada3d067cf893e404c9eeaa9499417c318d886d25694aa9d35840ed6af68b2b1e1b02190411dca019c446cd4f2358c261603e3bc82117ed9b3b57e1353550fd981b5ed8a39b18538b9a23bda445d261acea2bad859024700af20593c7db85559fff8765c7fb0bd22073e15b612b60b1aea11b4753c8ace8de5a97feca4b1ec90cc5f3baf93ba725296ba8494cec9e742fe180997ee37ada23a31ba1382dd38a2f3434e6e885e1b5c3cf9cd73c7e60f7741f22f8e9da1d1572647490110eeb0218f7089171b294a6a53b0bc48e61af5176dcefb88db6682f92f40a9faabd55b08953dddb141035991fb546820977fd29aa288151046cbcbb3b8179315a1fb0393242eda0487d6dc9173a504d3d89508e98c212c7a61924e42d7111eb986fb4a965e003ce9d2f7e6d464165bb595ea1ba0cd6920d9210a86df5785408f617fe42c315e412aac3713a693fcfbc0efcb87b36e3e5c3458e1c960fe5c2bfddab353b35e34d348303c8ef63871a079bf6ff8a878f6e4f70acefe8d049e329e73d8aa3f72b4cd7c538a19eab9b565ed32cf83f74e2b5e54a752ed6562b30fff7b41c5acdf9b6ed9f64c3fe5d209209fbe4f43ac3b92985d673ab463339f465f0890a929bbaaeb1aabb1c266c1fc8078fdd82261f711ee661ecb8e884e416e91a722724a0cf7b04a7f0734266c3c01b4ee8871f6e649fac0dd4d8edad9f00a5ba61b7c481bf8ef9d823057fcce0a6537d0d467508c25c80fe1b920b5631e9a4a7c5250dbddcbbbf0228ee975b6189ba2bff247309283e04d28018a29016cfe7cfcc6015b9133b2172e9e02eaa8cf3dd26986592a129ebd153b7f1793c5d318659e4a3534573fa62bbd972116fee8067591f1776b8be40629dddbdac47b46484fe27220da599a862614d4d09bd1717325d4fffec14256704f8dd264cc9f38c8b84341a804ac3cb697052c8ba6079d8d535ca15b934e9a74c7dc3e4def062b469d5714a942a5b2ee170e245dbba24956581514aa943b6f1f27a4793fa80f40e82529e968efc132c08221911d2442d3d63c5a8e657162158f9e812daa6f57264f8492262a653a35b8831ff9a9cad3a763d242b692bd3b4a868c3f53877e44180b762581f6f7c1153de3382c237365206681657169bea9d8549656a48819b55f1347781afbdc6d6f3521508193857e698d95fbce61a3e3a744f9e2fa51ba023ce4dfce6c197d59eca344ec18108a38c9a7f1fba634c25684b907bd0cdaf8271ca18c71dc88d56cc8cdd821c3b03edbd7fcde3afd12ed447a74a8309ab428211100d5a4b92c2f1f84801d86a178f7c99bf8b884caf5174309700e79cf8d8903339b6807b054b9c822e3a5046b358561a6a5050d50bc223889a9f9e60cb2615ad5e7c930c0541d4908ec73b2bd63f85d752e1bf4ace1b71a1f8668d40ef680d851d2517e203b440dd1ef86ebc1127c7977c50ed4d5d266f8d3921fbdd35ddd6a19066c62ecdf4d682765313e02ba497ac590094e47e3ed08af7c5bafc7b472b5d4b10ea4d8bc75b55a23d39d8bcaf455b71401cfea11e2266830126fde5b6d7689c533b178177c9bd345c6293af71fc46773b5b335bda6a221fc84fe0dcd74a8d31324434c81118d1175dc96a7819011c3bf607fb80c1a594c15f5daabedb1aad953f8a53b59a421f791a24632855df75ee46a5cfee43ecedc9abc9d9d343dcbe1019602b9fe4d56e9352ea69ae58b7209a82d597e1ce09ece4cc080df30b1cca9f687782d2a15bcbfb0bdceb6a883d3cefabcc92e819673ba577a45168a0331262e715d9cb18df4d0b78c9560b5fd1e65a52ef2d9b48adf8199ccc538b118a7bf151d227e187718e6eba1441a8fff26c1721b810d801bbd874e09ab7daaca8a62eab9f3b736a420c9319deccdecf7458b110c9d09491f8b45f8a40147fa221aa53ba627fa4f4c17deeb4f0b18a92f14da5b08ea433653c7225f841ab0b83c37d0dd9937a92c7ebce00535b1228033940f547896ac0a2beae2a8cc801ec037f0240a377b7b9579898e6e65776d316c1b386f4fc706de3c4b66f0739d97ed879adc3db2d7767b3d2b712186d5ae286c0772d2fc3d367b55d10ff0f23b80930ca813951909e25488a86ca76e84301d0b88c88730858a1b6e8f3068e05882dfc994d3a39f75f65ea01bf4d7de1bbe0e539e29deb23c52b4f49764df305c22e9b830b9cdacde47937cadc2269e38fabd12bf4cc5226ddfa15001c1e0d1adf67cead40d8ba2dcd52ac923a9fa01c60e76073fb97ddf66d46f51c4a73106ace24dc44817dc8f2dd84e56f07bcbe36613c37399e0b3107bfa60471faafea92368f513481a47bef4c9919e7a2c549d86d4f93201c8d92ce01a97352e383bb4fd66943508461ef8505222c0850db645574b1216ee0525da218d5dbbe2baa1dd44d2dba8f5e06b20c7de837a10902d19ae95b7b1ef0e92f0e8941c1e5e28f62094a222d1401a961649bf48096646ec8799bd10a5cf677415d215fcadd4be62811971e1c8e5dbc12c6cde2e3d6521d3af13dde0d727783d009d59342c7db5b1757c4ffcd934a0c0e06c3ba00addcc9386cb41ae5bc2d8e7272bfa27314bfa83a77d69ab8abbb5d43d4f98f55d10b17eae8856794fb8cfc955d15d6c9d837b2340185011a72d6d2bda7b176263227b34c66762df6c2aed45cf69e2632dd88a47901c172c6a33affdd68e9471782e0a4b42c3b2681bd5bb36c8cb75e54e25c936ff1b309e8495ec82cde317beb7fe60d62782ea5dd9c01953bb019a71ad057eb2b78d526d2dbb2aab4dd470d9759acd09adf5ed02ef8351e95564fd314b9c6f1447c967d1ef82cda7c99a1513d8fe645ea74214d6b7e194932cc353eb32eb0f126da55af401cada9ef090678f863c4224d9ef4bdefc00552a88334a1b79a35695714700657ab3652b14761996609d9e3c8623a4bc034c079dfe17e890711acebfce065f4e566f58f2f0098082d09df26807d79b743452", 0x1000}, {&(0x7f00000029c0)="c76b07858e7992d63067200e235c6e3f4b2ffd87925b5a3eff26a3b0d00b20672d300cf9c701ac90e8501b1025f89a2416fc5e10f0fe28808bda2aebb7f8d16ab52fe473390edcf938409c3c29605e129df63f09f820cafd0d", 0x59}, {&(0x7f0000002a40)="3d13cbe8a15268825f2f67820acfaea5f09da8819350f06228d16218ca51c6070d6f3b274734b8f92098762c16eb014b0aca0fde1ff59bac78f10d9b1cc399d3b75cf988e3314a411139195b0dd74adefeff8de47ee5137040a1546ab8b870e306f0b4c07dee237140dd2069accaf3d3dd6c75f266b7c42b0ad06f4306feb25488465513a99337f58893bed0284676fd1ee21de6bd5ff1f6b80655598b17051dbee46dc506062e578fff738179b9635a0f13705237f5a86ca66228a5b4113e4887615c0b98805c7b3d43d1d68efc00d85090ec8ca2cd3aeac65a8778d196", 0xde}], 0x8, 0x0, 0x0, 0x10}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0xd8e8, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r5) 52.160502411s ago: executing program 4 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a001100140000006c07010033"], 0x340a) 51.625929075s ago: executing program 4 (id=249): pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket(0xa, 0x5, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, 0x0, &(0x7f00000003c0)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, &(0x7f0000000640), 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0xfeaa) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x21, 0x9, 0x2, 0x0, 0x0, 0x5, 0x10088, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xb, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x2a0, 0xb, 0x4, 0x5, 0x44, 0x800, 0x2, 0x0, 0x2, 0x0, 0x7}, r3, 0x1, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x12c, 0x7, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x9b}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xb4, 0x7, 0x1, 0x0, "c3d40a4f0cd573cb9296b9660cae55f0b2d1be21b94758383a7b8f9aaa8185d0b30752e39604b530f2c2b54a3cb24f239e746ef542dfdf7958be211cf5368e19d94db863956d202740c17b65d513cb078cb63f4705d2af12e59fdc9502b541dc0467b0ec71059cd461e8ea213c27b09b820ab0bdb8f2ba8d113a2be45be7e42c2a2e61688cc3e68ae21e236375e861fb7aa1e9041b1357dfc86e7ae04a5d109035bd92fe5cea3c324d924b6dc07e88e4"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0x11) 51.536434557s ago: executing program 32 (id=249): pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket(0xa, 0x5, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, 0x0, &(0x7f00000003c0)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, &(0x7f0000000640), 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0xfeaa) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x21, 0x9, 0x2, 0x0, 0x0, 0x5, 0x10088, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xb, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x2a0, 0xb, 0x4, 0x5, 0x44, 0x800, 0x2, 0x0, 0x2, 0x0, 0x7}, r3, 0x1, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x12c, 0x7, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x9b}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xb4, 0x7, 0x1, 0x0, "c3d40a4f0cd573cb9296b9660cae55f0b2d1be21b94758383a7b8f9aaa8185d0b30752e39604b530f2c2b54a3cb24f239e746ef542dfdf7958be211cf5368e19d94db863956d202740c17b65d513cb078cb63f4705d2af12e59fdc9502b541dc0467b0ec71059cd461e8ea213c27b09b820ab0bdb8f2ba8d113a2be45be7e42c2a2e61688cc3e68ae21e236375e861fb7aa1e9041b1357dfc86e7ae04a5d109035bd92fe5cea3c324d924b6dc07e88e4"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0x11) 10.068068696s ago: executing program 3 (id=525): unshare(0x28040680) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0xa8b8, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 3) 9.389331954s ago: executing program 3 (id=529): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000016500)=[{{&(0x7f0000014f40)=@qipcrtr, 0x0, &(0x7f0000016200), 0x0, &(0x7f0000016240)=""/33}, 0xaabd}, {{&(0x7f0000016280)=@ethernet={0x0, @broadcast}, 0x0, &(0x7f00000163c0)=[{&(0x7f0000016300)=""/107}, {&(0x7f0000016380)=""/64}], 0x0, &(0x7f0000016400)=""/202, 0x34}, 0xdd1b}], 0x7ffffffffffffba, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5.459043857s ago: executing program 0 (id=559): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1003f}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0xf909, 0x16, 0x0, 0x23) 4.912609991s ago: executing program 0 (id=564): r0 = socket(0x400000000010, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4357e7826c15e682bc62d9e262d1119f30000000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r6, @ANYBLOB="08000b0002000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x48, r5, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x439, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {0xa}]}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xb}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x2, 0xc0}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 4.57881153s ago: executing program 0 (id=566): socket$kcm(0x10, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x10001, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000680)={'erspan0\x00', 0x0, 0x20, 0x20, 0x4, 0x0, {{0x18, 0x4, 0x0, 0x9, 0x60, 0x67, 0x0, 0xc, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@generic={0x44, 0x2}, @end, @generic={0x106, 0x5, "e58891"}, @noop, @end, @rr={0x7, 0xb, 0xbd, [@rand_addr=0x64010100, @broadcast]}, @lsrr={0x83, 0x17, 0x4e, [@local, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2]}, @rr={0x7, 0xf, 0x92, [@private=0xa010101, @empty, @multicast2]}, @lsrr={0x83, 0xf, 0x44, [@remote, @rand_addr=0x64010101, @broadcast]}, @end]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x64) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={r6, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r6, 0xe}, &(0x7f0000000440)=0x8) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r5, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="810200000000000014001a80100004800c000180"], 0x34}}, 0x0) sendmmsg$inet6(r7, &(0x7f0000000a40)=[{{&(0x7f0000000780)={0xa, 0x4e20, 0x5, @private1, 0x5}, 0xffffffffffffff9a, &(0x7f00000007c0)=[{&(0x7f0000000300)}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e20, 0x2db4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x5}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000000640)='\"', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)="7348065adf75471a0df9279398e6cd9f4eb2fa1313609a307c28507bef008e8078f5f924d7d9e1ef", 0x28}, {&(0x7f0000000580)="9f82d04eeb74c305fd48be638a675425f3185a8f58b8631d8f43bc47bf7eca8c8049dc6afe400c55e49f3b0ee619203e7e55648fef4a7e6176b459346bb65da0bfc1a58002288f0d114934fbfb5b7388863aa74cd18047a14579e3141676425fb3170c63", 0x64}, {&(0x7f0000000800)="83df74a9ded44c548bc2db91ce41bd340dbb56378aaed0299c9647a1e1eceac61789be842c9d0c8d9e7aa6a4d37a066c0a8a1ab7e03a1697bf60d39508af2f5eff6f5f9a1b0eca560e569e64891234ef1ff3ffa5f7a07e574a425c26b487749cd38eba8bb24543ff6bf4aff4c512f63dd201a3d49f40529f61f368fcb814e856941ec1b915bbbe07a4c60de200baee92b0898e3464dd18b697536ed167cdb2d0bcdf904c86c999a9c20d2523ebf9ee1f895eb6475f8b2122e9227c664da6180954b1f9a4cc4f912776c6442216e8d1e120370ce84827b489558f074b5b42739646", 0xe1}, {&(0x7f0000000900)="dddfa9b67eccd1be687a67b5226c1816c8c09edd7c30006b4f8cb049c7f23b05fe262a2770dd369370fdbe4d4c1f4ca84929e4c9699e93da7702936d37b105edc5cac40c1e0bfdeb4c7a7e889be712c0fe7bea8672b5f0fc61cdff2d746f500476c26b750c447086c6d719a7951d1c2fd7cbd2a997289fb183b1d9531b93acdf4575ccdd1114c95f383438df05c9d9a3080adeea79ef97e087a2ee25c7ebc59755d2f4d5e4ad524a264d69845aca14bd1942", 0xb2}], 0x4, &(0x7f0000000a00)}}], 0x3, 0x20040850) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback, 0x280024}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="d84184d66bb6afcf9e806fe9074e2d14", 0x10}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x12f9}, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b00)="63492348bf0322c9c180f5e4ec0a39597b2864cce0b07ded74098b99e41b0dbb59ef720cac5c3ccee115a173ed52641bec04ca282450d3f820b99c860ac6fa0323205d6c72ba6ef241e6e60f71ca378e169f697358b6aa4c22fa5068c44e064114977d6520936a5b8d0ef8afe1a3a6d26c6ab436b7435afa56ab69f4b96430cbe3a7df4ae091e994d1eecdaa1495"}, {&(0x7f0000000bc0)="08b36858f8299d1029bbb2cc083a6ad3c3d99bb0374519ac2649e49084497fd7a05f081aece24bf3810fbbbcb3699e4f66c026a44180280ea34ee4141120a228a21f257a1bffe1a80b4acb3f129d59c77e3d06441f267e60259ef7d58d139e1e96626ae99edf41bdacbd1d6a31264a099f079f789bdad89e99513ce675afeb95aea565bb5549f1d24212f64e9fe8180232a6319d9e19f8542a2bf8b1fbe4cd5a376ba20d17acc87e2adc93aef2518b451475a85eb7c1d1b7"}, {&(0x7f0000000c80)="d3b21023e8ed89fbff4c317085ae1e98145f8f025223bd7471430224caab95377a854c812b9b0932551df4385bba836800e51a683de177f8a73e0a3213fd418610e83bfb9d8d3e07e991159b6d25096057f3dbd04d9519c731b8305dd6ef2f858b6f104448bd3cc83291bee808d2ee35aa27d91c73ad840d5b651330b578dbd9d07acdacf4871362f04414c9fe18398cf5526d03a008867b7b88719eea14945399b4366b6c5039367a5d287828046382df60fcb74512c8f7b816cf"}], 0x0, &(0x7f0000000d80)=[@flowinfo={{0x0, 0x29, 0xb, 0xba5}}, @hoplimit={{0x0, 0x29, 0x34, 0x4}}, @flowinfo={{0x0, 0x29, 0xb, 0x8001}}, @hopopts={{0x0, 0x29, 0x36, {0x87, 0x0, '\x00', [@hao={0xc9, 0x0, @local}, @jumbo={0xc2, 0x4, 0x4}]}}}, @tclass={{0x0, 0x29, 0x43, 0x100}}, @hopopts={{0x0, 0x29, 0x36, {0x11, 0x0, '\x00', [@hao={0xc9, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}}, @ra={0x5, 0x2, 0x6c}, @padn={0x1, 0x0, [0x0]}, @enc_lim={0x4, 0x1, 0x6}, @pad1, @enc_lim={0x4, 0x1, 0x2}]}}}, @dstopts_2292={{0x0, 0x29, 0x4, {0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x0, @local}, @ra={0x5, 0x2, 0xfffe}]}}}, @pktinfo={{0x0, 0x29, 0x32, {@loopback, r3}}}, @dstopts={{0x0, 0x29, 0x37, {0x11, 0x0, '\x00', [@calipso={0x7, 0x0, {0x1, 0x0, 0xb, 0xdd0c, [0x516, 0x3]}}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts={{0x0, 0x29, 0x36, {0x67, 0x0, '\x00', [@ra={0x5, 0x2, 0xfffa}]}}}]}}], 0x0, 0x20008050) 4.459124653s ago: executing program 2 (id=569): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x8cb7}, 0x2000, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x697}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd2, &(0x7f0000000200)={[{@uni_xlateno}, {@uni_xlate}, {@shortname_win95}, {@fat=@check_strict}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@fat=@errors_continue}, {@fat=@check_normal}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@rodir}, {@utf8no}, {@rodir}, {@utf8no}]}, 0xc1, 0x29b, &(0x7f00000013c0)="$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") r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000080)={0x24, @short={0x2, 0xfffe}}, 0x14) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x110) fadvise64(r3, 0x10001, 0xffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143042, 0x34) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010033a20000000000000f0000001c0007800c000480002e00000000407f0c0003"], 0x30}}, 0xc004) 4.256125488s ago: executing program 0 (id=570): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x8cb7}, 0x2000, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x697}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd2, &(0x7f0000000200)={[{@uni_xlateno}, {@uni_xlate}, {@shortname_win95}, {@fat=@check_strict}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@fat=@errors_continue}, {@fat=@check_normal}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@rodir}, {@utf8no}, {@rodir}, {@utf8no}]}, 0xc1, 0x29b, &(0x7f00000013c0)="$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") r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000080)={0x24, @short={0x2, 0xfffe}}, 0x14) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x110) fadvise64(r3, 0x10001, 0xffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143042, 0x34) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010033a20000000000000f0000001c0007800c000480002e00000000407f0c0003"], 0x30}}, 0xc004) 4.214306189s ago: executing program 2 (id=572): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffR%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C\x01\x00\x00\x00u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00'/696, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x11, r0, 0xd37c3000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000}, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCRMFF(r1, 0x40085503, &(0x7f0000000100)=0xb) (fail_nth: 2) 4.132557852s ago: executing program 5 (id=573): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003500)}}], 0x2, 0xc085) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0xb, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfd}, 0x10}}, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) shutdown(r0, 0x1) close(r1) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1f18) syz_open_pts(r7, 0x400) ppoll(&(0x7f0000000100)=[{r0, 0x4559}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) 3.077076839s ago: executing program 0 (id=575): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) pselect6(0x40, &(0x7f0000000c00)={0x7, 0x5cc, 0x4, 0x4, 0x7, 0x6, 0x8, 0x10001}, &(0x7f0000000c40)={0x10001, 0x6c2, 0x100000000000002, 0x2, 0x7fffffffffffffff, 0x400080000, 0xac4, 0x8}, 0x0, &(0x7f0000000cc0)={0x77359400}, &(0x7f0000000d40)={&(0x7f0000000d00)={[0xffffffffffff67cf]}, 0x8}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, &(0x7f0000000640)=0xcbb9, 0x6, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/141, 0x8d}], 0x1, 0x300100, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=@other={'trylock', ' ', 'io+mem'}, 0xf) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000004f000000cc0002000600000905000000", @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r7}, 0x38) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x43, 0xb9) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)=0x20) ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r7}, 0x38) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xd, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x0, 0xc, 0x3}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}, @TCA_RATE={0x0, 0x5, {0x4b, 0x8}}, @TCA_RATE={0x0, 0x5, {0x7f, 0x41}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x4) setsockopt$inet6_int(r5, 0x29, 0x46, &(0x7f00000002c0)=0x3, 0x4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f4000000", @ANYRES16=0x0, @ANYRESOCT=r3, @ANYRES8=r4, @ANYBLOB="0c0099009b0e00004f00000084001d955000008005000a00000000000500070010000000400006000100000005000a000100000005000600010000000c00030005000000000000000c00030003000000000000000c0003000100008000000000040000802800008005000700fc00000005000a0000000000040004004100040005000c0000000000040004000400008048001d802800008005000b000000000005000b00000000000c000300080000000000000005000700d50000001c00008005000c0001000000050006000000000005000a0001000000"], 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r10, 0x1, &(0x7f0000000dc0)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0xff7f, r9, 0x0, 0x0, 0x1, 0x0, 0x2}]) ioctl$TIOCMSET(r2, 0x5418, 0x0) 1.950434129s ago: executing program 3 (id=576): r0 = syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100feffffff000000002a000000180001801400020076657468305f746f5f626f6e64000000c0f3956e3bb91ff9b59e469541fc8d202639238b1e14ce0e01b2116b3fc8e86ff6558a8ccc0773cc740c607bceeaeb8ca73fcce44d31b1144637895c71bcf00cac509f26d12096d8449a01f869d4e57837b1acf986f1ad8dbd6fe5bf1b628bb5434be1e06de532d8785121cc8f787e5277f3f93088d0419195f43053d28f59eca8d76d00d8f35751"], 0x2c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006", @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRES32=r5, @ANYRES16=r1, @ANYRES8=r1], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x2400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8088) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100feffffff000000002a000000180001801400020076657468305f746f5f626f6e64000000c0f3956e3bb91ff9b59e469541fc8d202639238b1e14ce0e01b2116b3fc8e86ff6558a8ccc0773cc740c607bceeaeb8ca73fcce44d31b1144637895c71bcf00cac509f26d12096d8449a01f869d4e57837b1acf986f1ad8dbd6fe5bf1b628bb5434be1e06de532d8785121cc8f787e5277f3f93088d0419195f43053d28f59eca8d76d00d8f35751"], 0x2c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006", @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRES32=r5, @ANYRES16=r1, @ANYRES8=r1], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x2400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8088) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0) (async) 1.848530152s ago: executing program 2 (id=577): fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x73, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, 0x0, 0x0, &(0x7f0000000000)) unshare(0x26020480) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400ffffffffffe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x100000, 0xffffffffffffffff, 0xffffffff, 0x5, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='!pu\t&0&&\t') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x1, 0x0, 0x20, @loopback, @mcast2, 0x20, 0x80, 0x5, 0x1000}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000090000000800000000000012030000000d0000000000000c030000000f00000001000085f7ffffff0c00000005000000020000000030005f61612e3000c1ec1b53eeb031d79e79759615ef26"], &(0x7f00000004c0)=""/123, 0x51, 0x7b, 0x0, 0x3c775300, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e00000006000000080000000c000000084000000a20f75973d1c3c960f6e99e338297509a1ec7c9158fae232a82ec385f14f6c5c3a2a57f977aafe142d2e66e2645f824ce16f4841f4e9b669319dab012d6487f3ab73588b87cb6d3d0f4", @ANYRES32=0x1, @ANYBLOB="b500"/20, @ANYRES32=r6, @ANYBLOB="0000000003000000020000000200"/28], 0x50) r7 = openat$cgroup_procs(r5, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) timer_settime(r4, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x1, @mcast1, 0xa}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}, 0xfff5}], 0x400000000000172, 0x4000000) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x3c, 0x3e9, 0x300, 0x70bd2a, 0x25dfdbfd, {0x17, 0x1, 0x1, r3, 0x1, 0x1, 0x40, 0x4, 0x0, 0x5b2, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) 1.766694124s ago: executing program 1 (id=578): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x400000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'], 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x20000014}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x8}, 0x107200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000000)={0x84, 0x1, 0x8001}, 0x8) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000200012100002800a000400ffffffffffff0000"], 0x40}}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x4}, 0x13903, 0x0, 0xffffffd, 0x5, 0x43ca, 0x54268868, 0x1, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 1.725942295s ago: executing program 5 (id=579): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r0 = syz_open_pts(0xffffffffffffffff, 0x141601) ioctl$TIOCMGET(r0, 0x5415, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r4, 0x1) 1.652709827s ago: executing program 3 (id=580): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x400000000008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xd}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) dup3(r1, r0, 0x0) 1.577226459s ago: executing program 2 (id=581): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x6400, 0x0, 0x0, 0x1, 0x715}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 887.770866ms ago: executing program 2 (id=582): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x8cb7}, 0x2000, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x697}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd2, &(0x7f0000000200)={[{@uni_xlateno}, {@uni_xlate}, {@shortname_win95}, {@fat=@check_strict}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@fat=@errors_continue}, {@fat=@check_normal}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@rodir}, {@utf8no}, {@rodir}, {@utf8no}]}, 0xc1, 0x29b, &(0x7f00000013c0)="$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") r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000080)={0x24, @short={0x2, 0xfffe}}, 0x14) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x110) fadvise64(r3, 0x10001, 0xffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143042, 0x34) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010033a20000000000000f0000001c0007800c000480002e00000000407f0c0003"], 0x30}}, 0xc004) 828.492238ms ago: executing program 3 (id=583): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000003c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) (async) r3 = dup2(r1, r2) r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './bus', [{0x20, '$'}, {}, {0x20, '\'+-'}, {0x20, 'GPL\x00'}, {0x20, 'GPL\x00'}, {0x20, '%-5lx \x00'}, {0x20, '$'}, {0x20, '\x00'}], 0xa, "258262583a8dc508ca609bdbe970d4a3b304dc6cc4f74fca5f714543eefcc2e8cc"}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004040)={r4, 0x20, &(0x7f0000004000)={&(0x7f0000000180)=""/57, 0x39, 0x0, &(0x7f0000003000)=""/4096, 0x1000}}, 0x10) (async) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./bus\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000740)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r6, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1d, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r8 = socket$inet6(0xa, 0x3, 0x5) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000600), 0x2a) (async) sendmmsg$inet6(r8, &(0x7f00000017c0)=[{{&(0x7f00000000c0)={0xa, 0x4e02, 0xffffa231, @private0, 0xe2}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfa}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x30}}], 0x2, 0x24048004) (async) sendto$inet(r3, &(0x7f00000005c0)="325320477ec6b003cbd1c0ce5b36d5d27b85e7775cd33e16b730100a0a40c8e6ef1300fe3107b5a1d4a296e92bb10e4ba857f6091e62369864d8d4b323ee931e4c46045da5e86a1f975efd32772724c92338e844fd43782fd8984bc6ef72785e3629cabcadf292e838196699a757264f4da47d9ea1956898825cd2e8740f4d64091bcd8d5df5a105f0fab2a8", 0x8c, 0x4000, &(0x7f0000000680)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 804.103689ms ago: executing program 5 (id=584): syz_read_part_table(0x593, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x17) close(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003f00), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x40400) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x25f56157, 0xfffffffb, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x1ff}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x80000001, 0x1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r2, &(0x7f00000000c0), 0x24) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mremap(&(0x7f0000309000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000a92000/0x3000)=nil) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18001}}, 0x20}}, 0x0) 773.90298ms ago: executing program 3 (id=585): r0 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x4206, r0) wait4(0x0, 0x0, 0x8, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7d, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3, 0xffffffffffff8001}, 0x106200, 0xbd, 0x40, 0x8, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x5603, &(0x7f0000000100)) r4 = fcntl$dupfd(r2, 0x0, r2) write$tun(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="635a0b42013406"], 0x15c) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42001, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000c0) ppoll(&(0x7f0000000200)=[{r7, 0x2188}], 0x1, 0x0, 0x0, 0x0) 708.390991ms ago: executing program 1 (id=586): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) process_vm_readv(r1, &(0x7f0000000640)=[{&(0x7f0000000180)=""/171, 0xab}, {&(0x7f0000000340)=""/190, 0xbe}, {0x0}, {&(0x7f0000000440)=""/21, 0x15}, {&(0x7f0000000480)=""/47, 0x2f}, {&(0x7f00000004c0)=""/185, 0xb9}], 0x6, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/116, 0x74}], 0x1, 0x0) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* rwr'], 0xa) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYRES32=0x0], 0x88}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@block_validity}, {@discard}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfc, 0x46d, &(0x7f0000000f00)="$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") recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000300) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000001380)=0x3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x1}, 0x1c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtclass={0x34, 0x28, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0x9}, {0x2, 0xfff1}}, [@tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0xff}}]}, 0x34}}, 0x4000040) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x34, r5, 0x2799f5eec7981083, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474203, 0x408}, 0x18) 578.678395ms ago: executing program 1 (id=587): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ustat(0xed, 0x0) 477.960858ms ago: executing program 2 (id=588): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) listen(r0, 0x401) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x30, 0x410, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0x11feb0, 0x8, 0x20da, 0x3, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000c05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/asound/timers\x00', 0x0, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) 477.725768ms ago: executing program 5 (id=589): openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/stat\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 477.182248ms ago: executing program 0 (id=590): r0 = perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0xda, 0x9, 0x1, 0x1, 0x0, 0x8001, 0x20200, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x6}, 0x101, 0x7, 0x2, 0x9, 0xd2, 0x7f, 0x4, 0x0, 0x8, 0x0, 0xe}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401f, 0x2000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0x1}, 0x88c8, 0x0, 0x8000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, r0, 0x9) mknodat(0xffffffffffffffff, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x879) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x100) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents(r2, 0x0, 0x0) getdents64(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000014c0)={0x8000, 0xdc2, 0x0, {0x9, 0x7}, 0x7, 0x81}) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$kcm(r3, &(0x7f0000004e80)={0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000003b80)='\a', 0x1}], 0x1}, 0x20000000) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/uevent_helper', 0x541001, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x1}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000001c0)={r9, 0x3}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000440)={r9}, &(0x7f0000000480)=0x8) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r10, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e22, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7fff}, 0x1c) listen(r10, 0x0) listen(r11, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) 346.297191ms ago: executing program 1 (id=591): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000030000000000000010000000cd0000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8, 0xb1}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 64.550179ms ago: executing program 5 (id=592): socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000180140002"], 0x40}}, 0x2008040) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x6000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000000400008004"], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x804) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000500)) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="08000800010000000600060001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="ab8b000000000031c4e90d00000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x20040090}, 0x8000) close(0x3) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfe, 0x0, 0xfc, 0x6}, 0xe) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) 64.407879ms ago: executing program 1 (id=593): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x4000, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f000001fc00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1814011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x600, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x186402, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) 8.330769ms ago: executing program 5 (id=594): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r0 = syz_open_pts(0xffffffffffffffff, 0x141601) ioctl$TIOCMGET(r0, 0x5415, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r4, 0x1) 0s ago: executing program 1 (id=595): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000007700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000007700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = semget(0x0, 0x1, 0x281) r4 = getuid() setuid(r4) (async) setuid(r4) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, r4, 0x0, 0xa0, 0x7}, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffb}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x2f, 0x3e, 0x4e, 0x5, 0x8a, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x7800, 0x10001, 0x809}}) sendmsg$nl_xfrm(r1, &(0x7f0000000d00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000980)=@getpolicy={0x33c, 0x15, 0x1, 0x70bd25, 0x25dfdbff, {{@in=@rand_addr=0x64010102, @in=@private=0xa010102, 0x4e23, 0x8, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x62, r2, r4}, 0x6e6bc0, 0x1}, [@replay_thresh={0x8, 0xb, 0x4}, @offload={0xc, 0x1c, {r5}}, @migrate={0x1cc, 0x11, [{@in=@multicast1, @in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@loopback, 0x6c, 0x4, 0x0, 0x3505, 0x2, 0x2}, {@in=@multicast2, @in=@multicast1, @in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x32, 0x2, 0x0, 0x3501, 0xa, 0xa}, {@in=@rand_addr=0x64010101, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, @in=@rand_addr=0x64010102, 0x0, 0x3, 0x0, 0x0, 0xa, 0x2}, {@in6=@loopback, @in=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private2, 0x2b, 0x4, 0x0, 0x3503, 0xa, 0x2}, {@in6=@rand_addr=' \x01\x00', @in=@local, @in=@dev={0xac, 0x14, 0x14, 0x15}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b, 0x4, 0x0, 0x0, 0x2, 0xa}, {@in=@private=0xa010101, @in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@empty, 0x2b, 0x0, 0x0, 0x3501, 0x2, 0xa}]}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @etimer_thresh={0x8, 0xc, 0x100}, @algo_auth={0xfa, 0x1, {{'sha224-avx\x00'}, 0x590, "ce22f3731e3ba829946ac564ffaa30514608f8c01af01b13f6b2f078c179ae8dd1cda5d2b816dd6ee5b871eeef73e36b4dde5480b0edb98b2f77e39ff849a7afc2b43758f439be0ebecfbbf98ea4a5a2ed65b78c8fee4d5b99b2a06a86b8bd578f1308039db158bc0eebf40b30619459daf4560b1adc52995458c542f254b012d80b988e15946ce730258697d2b0e25a73ad92268beb6e43a228cf3c93804151f5c6d2d8a5cd6318e319780353a8f8347f27"}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000400)=0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x2c, r8, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x48014) fcntl$notify(0xffffffffffffffff, 0x402, 0x24) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0xc6, 0x2}, 0x6080, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x28) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r11, r11, 0x0, 0xe3aa6ea) (async) sendfile(r11, r11, 0x0, 0xe3aa6ea) r12 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') kernel console output (not intermixed with test programs): ond1: entered allmulticast mode [ 58.445413][ T3917] bond1: (slave bridge2): making interface the new active one [ 58.453016][ T3917] bridge2: entered promiscuous mode [ 58.458581][ T3917] bridge2: entered allmulticast mode [ 58.465851][ T3917] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 58.481144][ T3918] bond1: (slave bridge3): Enslaving as a backup interface with an up link [ 58.524283][ T3932] gre0 speed is unknown, defaulting to 1000 [ 58.531951][ T3932] gre0 speed is unknown, defaulting to 1000 [ 58.538734][ T3932] gre0 speed is unknown, defaulting to 1000 [ 58.595692][ T3932] infiniband syz1: set active [ 58.600619][ T35] gre0 speed is unknown, defaulting to 1000 [ 58.606708][ T3932] infiniband syz1: added gre0 [ 58.620917][ T3940] loop1: detected capacity change from 0 to 8192 [ 58.623916][ T3932] RDS/IB: syz1: added [ 58.633073][ T3932] smc: adding ib device syz1 with port count 1 [ 58.640125][ T3932] smc: ib device syz1 port 1 has no pnetid [ 58.655242][ T35] gre0 speed is unknown, defaulting to 1000 [ 58.662842][ T3932] gre0 speed is unknown, defaulting to 1000 [ 58.710531][ T3932] gre0 speed is unknown, defaulting to 1000 [ 58.746068][ T3932] gre0 speed is unknown, defaulting to 1000 [ 58.781562][ T3932] gre0 speed is unknown, defaulting to 1000 [ 58.816519][ T3932] gre0 speed is unknown, defaulting to 1000 [ 58.894805][ T3305] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 58.911710][ T3305] FAT-fs (loop1): Filesystem has been set read-only [ 59.070417][ T3955] netlink: 'syz.2.130': attribute type 10 has an invalid length. [ 59.078579][ T3955] ipvlan0: entered allmulticast mode [ 59.084036][ T3955] veth0_vlan: entered allmulticast mode [ 59.094191][ T3955] team0: Device ipvlan0 failed to register rx_handler [ 59.487254][ T3951] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.018218][ T3961] loop4: detected capacity change from 0 to 512 [ 60.055123][ T3961] EXT4-fs: Ignoring removed oldalloc option [ 60.115837][ T3961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.172199][ T3961] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.192030][ T3964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 60.217867][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 60.217882][ T28] audit: type=1400 audit(1777688520.495:381): avc: denied { read append } for pid=3960 comm="syz.4.132" path="/34/file1/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.266095][ T3955] syz.2.130 (3955) used greatest stack depth: 8984 bytes left [ 60.308128][ T3974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.136'. [ 60.321886][ T3976] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 60.331239][ T3974] loop2: detected capacity change from 0 to 128 [ 60.334881][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.345598][ T28] audit: type=1400 audit(1777688520.615:382): avc: denied { remount } for pid=3973 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.376192][ T3978] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 60.412877][ T3980] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 60.443157][ T28] audit: type=1400 audit(1777688520.725:383): avc: denied { read append } for pid=3979 comm="syz.4.138" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.620868][ T3989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 60.816068][ T4003] loop0: detected capacity change from 0 to 512 [ 60.822926][ T4003] EXT4-fs: dax option not supported [ 60.843484][ T28] audit: type=1400 audit(1777688521.125:384): avc: denied { write } for pid=3997 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 60.866698][ T4006] loop4: detected capacity change from 0 to 512 [ 60.877748][ T4006] EXT4-fs: Ignoring removed oldalloc option [ 60.916240][ T4006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.930194][ T28] audit: type=1326 audit(1777688521.205:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.2.150" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83094cdd9 code=0x7ffc0000 [ 60.964793][ T4006] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.976650][ T28] audit: type=1326 audit(1777688521.205:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.2.150" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83094cdd9 code=0x7ffc0000 [ 60.995247][ T4006] FAULT_INJECTION: forcing a failure. [ 60.995247][ T4006] name failslab, interval 1, probability 0, space 0, times 0 [ 61.002455][ T28] audit: type=1326 audit(1777688521.205:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.2.150" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83094cdd9 code=0x7ffc0000 [ 61.038490][ T4006] CPU: 1 UID: 0 PID: 4006 Comm: syz.4.149 Tainted: G W syzkaller #0 PREEMPT(full) [ 61.038602][ T4006] Tainted: [W]=WARN [ 61.038625][ T4006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 61.038682][ T4006] Call Trace: [ 61.038714][ T4006] [ 61.038744][ T4006] __dump_stack+0x1d/0x30 [ 61.038901][ T4006] dump_stack_lvl+0x95/0xd0 [ 61.038970][ T4006] dump_stack+0x15/0x1b [ 61.039029][ T4006] should_fail_ex+0x263/0x280 [ 61.039161][ T4006] should_failslab+0x8c/0xb0 [ 61.039328][ T4006] __kmalloc_noprof+0xb8/0x4d0 [ 61.039430][ T4006] ? ext4_find_extent+0x17a/0x790 [ 61.039517][ T4006] ext4_find_extent+0x17a/0x790 [ 61.039681][ T4006] ext4_ext_map_blocks+0x10d/0x2ea0 [ 61.039845][ T4006] ? vsnprintf+0x7ee/0x860 [ 61.039964][ T4006] ? sidtab_sid2str_put+0x1b5/0x360 [ 61.040048][ T4006] ext4_map_query_blocks+0xb2/0x550 [ 61.040150][ T4006] ? ext4_es_lookup_extent+0x3a2/0x500 [ 61.040214][ T4006] ext4_map_blocks+0x306/0x970 [ 61.040249][ T4006] ext4_getblk+0x128/0x530 [ 61.040347][ T4006] ext4_bread_batch+0x5c/0x320 [ 61.040441][ T4006] __ext4_find_entry+0x852/0xdf0 [ 61.040600][ T4006] ext4_lookup+0xcd/0x3a0 [ 61.040696][ T4006] ? __pfx_ext4_lookup+0x10/0x10 [ 61.040772][ T4006] path_openat+0xbf0/0x2050 [ 61.040971][ T4006] do_file_open+0x16c/0x290 [ 61.041085][ T4006] do_sys_openat2+0x94/0x130 [ 61.041162][ T4006] __x64_sys_openat+0xf2/0x120 [ 61.041240][ T4006] x64_sys_call+0x1e39/0x3020 [ 61.041397][ T4006] do_syscall_64+0x12c/0x3b0 [ 61.041487][ T4006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.041563][ T4006] RIP: 0033:0x7f474127cdd9 [ 61.041618][ T4006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.041684][ T4006] RSP: 002b:00007f473fccf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 61.041743][ T4006] RAX: ffffffffffffffda RBX: 00007f47414f5fa0 RCX: 00007f474127cdd9 [ 61.041820][ T4006] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 61.041870][ T4006] RBP: 00007f473fccf090 R08: 0000000000000000 R09: 0000000000000000 [ 61.041933][ T4006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.041977][ T4006] R13: 00007f47414f6038 R14: 00007f47414f5fa0 R15: 00007ffc3c463d88 [ 61.042042][ T4006] [ 61.130489][ T4014] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 61.130869][ T28] audit: type=1326 audit(1777688521.205:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.2.150" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83094cdd9 code=0x7ffc0000 [ 61.308506][ T28] audit: type=1326 audit(1777688521.205:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.2.150" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fb83094cdd9 code=0x7ffc0000 [ 61.335058][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.355385][ T28] audit: type=1326 audit(1777688521.215:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.2.150" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83094cdd9 code=0x7ffc0000 [ 61.402624][ T4019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 61.414032][ T4017] team0: Device gtp0 is of different type [ 61.608411][ T4033] loop1: detected capacity change from 0 to 1024 [ 61.637384][ T4033] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.652550][ T4036] loop2: detected capacity change from 0 to 512 [ 61.659507][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.675846][ T4036] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 61.690906][ T4033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.702596][ T4036] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.722787][ T4036] EXT4-fs error (device loop2): __ext4_iget:5481: inode #11: block 12: comm syz.2.161: invalid block [ 61.744331][ T4036] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.744580][ T4036] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.161: couldn't read orphan inode 11 (err -117) [ 61.754393][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 61.754415][ C0] EXT4-fs (loop2): initial error at time 1777688522: __ext4_iget:5481: inode 11: block 12 [ 61.754450][ C0] EXT4-fs (loop2): last error at time 1777688522: __ext4_iget:5481: inode 11: block 12 [ 61.792905][ T4036] loop2: lost filesystem error report for type 5 error -117 [ 61.793298][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.810613][ T4036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.852736][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.937482][ T4045] loop2: detected capacity change from 0 to 1024 [ 61.981431][ T4045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.066838][ T4027] loop3: detected capacity change from 0 to 4096 [ 62.088443][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.100442][ T4027] ext4: Unknown parameter 'smackfshat' [ 62.227527][ T4051] FAULT_INJECTION: forcing a failure. [ 62.227527][ T4051] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 62.240884][ T4051] CPU: 1 UID: 0 PID: 4051 Comm: syz.2.164 Tainted: G W syzkaller #0 PREEMPT(full) [ 62.240923][ T4051] Tainted: [W]=WARN [ 62.240934][ T4051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 62.240949][ T4051] Call Trace: [ 62.240955][ T4051] [ 62.240964][ T4051] __dump_stack+0x1d/0x30 [ 62.241003][ T4051] dump_stack_lvl+0x95/0xd0 [ 62.241029][ T4051] dump_stack+0x15/0x1b [ 62.241053][ T4051] should_fail_ex+0x263/0x280 [ 62.241171][ T4051] should_fail+0xb/0x20 [ 62.241212][ T4051] should_fail_usercopy+0x1a/0x20 [ 62.241245][ T4051] _copy_from_user+0x1c/0xb0 [ 62.241294][ T4051] sctp_setsockopt+0x164/0xea0 [ 62.241330][ T4051] sock_common_setsockopt+0x69/0x80 [ 62.241364][ T4051] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 62.241427][ T4051] __sys_setsockopt+0x184/0x200 [ 62.241527][ T4051] __x64_sys_setsockopt+0x64/0x80 [ 62.241563][ T4051] x64_sys_call+0x2327/0x3020 [ 62.241666][ T4051] do_syscall_64+0x12c/0x3b0 [ 62.241809][ T4051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.241837][ T4051] RIP: 0033:0x7fb83094cdd9 [ 62.241857][ T4051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.241946][ T4051] RSP: 002b:00007fb82f39f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 62.242000][ T4051] RAX: ffffffffffffffda RBX: 00007fb830bc5fa0 RCX: 00007fb83094cdd9 [ 62.242021][ T4051] RDX: 0000000000000002 RSI: 0000000000000084 RDI: 0000000000000004 [ 62.242037][ T4051] RBP: 00007fb82f39f090 R08: 0000000000000008 R09: 0000000000000000 [ 62.242053][ T4051] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 62.242069][ T4051] R13: 00007fb830bc6038 R14: 00007fb830bc5fa0 R15: 00007ffd030620c8 [ 62.242094][ T4051] [ 62.454027][ T4027] loop3: detected capacity change from 0 to 512 [ 62.490528][ T4054] loop2: detected capacity change from 0 to 256 [ 62.497269][ T4054] vfat: Unknown parameter '(HVE[*UbCJ ' [ 62.543953][ T4027] FAT-fs (loop3): Directory bread(block 12328) failed [ 62.574183][ T4027] FAT-fs (loop3): Directory bread(block 12329) failed [ 62.587026][ T4027] FAT-fs (loop3): Directory bread(block 12330) failed [ 62.595808][ T4027] FAT-fs (loop3): Directory bread(block 12331) failed [ 62.608887][ T4027] FAT-fs (loop3): Directory bread(block 12332) failed [ 62.618416][ T4027] FAT-fs (loop3): Directory bread(block 12333) failed [ 62.626925][ T4027] FAT-fs (loop3): Directory bread(block 12334) failed [ 62.635820][ T4027] FAT-fs (loop3): Directory bread(block 12335) failed [ 62.653041][ T4027] FAT-fs (loop3): Directory bread(block 12328) failed [ 62.661517][ T4027] FAT-fs (loop3): Directory bread(block 12329) failed [ 62.801258][ T4058] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 62.809542][ T4056] loop3: detected capacity change from 0 to 1024 [ 62.828917][ T4056] EXT4-fs: Ignoring removed bh option [ 62.863949][ T4056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.905943][ T4055] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 63.028228][ T4054] loop2: detected capacity change from 0 to 164 [ 63.097599][ T4070] netlink: 260 bytes leftover after parsing attributes in process `syz.4.170'. [ 63.131723][ T4062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 63.280319][ T4079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 63.335090][ T4074] loop4: detected capacity change from 0 to 1024 [ 63.372095][ T4074] EXT4-fs (loop4): filesystem too large to mount safely on this system [ 63.435673][ T4087] loop2: detected capacity change from 0 to 256 [ 63.461845][ T4087] FAT-fs (loop2): IO charset cp864 not found [ 63.614036][ T4074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 63.635186][ T4074] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.635277][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.689968][ T3622] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.694303][ T4038] Bluetooth: hci0: command 0x1003 tx timeout [ 63.729446][ T4074] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.171: bg 0: block 112: padding at end of block bitmap is not set [ 63.747610][ T4098] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 63.776039][ T4096] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 63.795324][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 63.870677][ T4109] netlink: 'syz.4.181': attribute type 10 has an invalid length. [ 63.917798][ T4109] team0: Port device dummy0 added [ 63.973549][ T4117] FAT-fs (loop1): IO charset cp864 not found [ 64.015563][ T4122] netlink: 'syz.3.187': attribute type 4 has an invalid length. [ 64.025248][ T4126] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 64.038785][ T4122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 64.116875][ T4130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 64.291411][ T4122] pim6reg1: entered promiscuous mode [ 64.329424][ T4122] pim6reg1: entered allmulticast mode [ 64.651617][ T4136] netlink: 'syz.0.192': attribute type 10 has an invalid length. [ 64.654097][ T49] bond0: (slave bond_slave_0): interface is now down [ 64.666907][ T49] bond0: (slave bond_slave_1): interface is now down [ 64.674256][ T4136] syz_tun: entered promiscuous mode [ 64.688402][ T12] bond0: (slave bond_slave_0): interface is now down [ 64.697266][ T12] bond0: (slave bond_slave_1): interface is now down [ 64.704145][ T4136] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 64.704208][ T12] bond0: (slave syz_tun): interface is now down [ 64.725452][ T4138] EXT4-fs: Ignoring removed oldalloc option [ 64.732313][ T4138] EXT4-fs: Ignoring removed i_version option [ 64.738644][ T270] bond0: (slave bond_slave_0): interface is now down [ 64.745884][ T270] bond0: (slave bond_slave_1): interface is now down [ 64.753153][ T4138] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.760179][ T270] bond0: (slave syz_tun): interface is now down [ 64.769162][ T270] bond0: now running without any active interface! [ 64.781128][ T4138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.807611][ T4138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.193'. [ 64.816918][ T4142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'. [ 64.883402][ T4147] netlink: 'syz.2.194': attribute type 16 has an invalid length. [ 64.931016][ T4153] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 64.946341][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.980702][ T4158] netlink: 260 bytes leftover after parsing attributes in process `syz.4.200'. [ 65.034328][ T4160] FAT-fs (loop3): IO charset cp864 not found [ 65.206820][ T4177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 65.215860][ T4177] netlink: 'syz.0.205': attribute type 30 has an invalid length. [ 65.223981][ T4177] netlink: 'syz.0.205': attribute type 29 has an invalid length. [ 65.232236][ T4177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 65.335649][ T28] kauditd_printk_skb: 1428 callbacks suppressed [ 65.335669][ T28] audit: type=1400 audit(1777688525.615:1819): avc: denied { write } for pid=4178 comm="syz.0.206" path="socket:[7146]" dev="sockfs" ino=7146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.455071][ T28] audit: type=1400 audit(1777688525.735:1820): avc: denied { setopt } for pid=4185 comm="syz.1.210" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.460402][ T4188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.488820][ T4188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.528259][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.213'. [ 65.539422][ T4190] gre0 speed is unknown, defaulting to 1000 [ 65.664569][ T4203] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 65.672730][ T4203] netlink: 'syz.2.216': attribute type 3 has an invalid length. [ 65.684699][ T4203] netlink: 132 bytes leftover after parsing attributes in process `syz.2.216'. [ 65.697664][ T28] audit: type=1400 audit(1777688525.975:1821): avc: denied { getopt } for pid=4198 comm="syz.4.215" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.719064][ T4205] netlink: 'syz.4.215': attribute type 4 has an invalid length. [ 65.733574][ T4207] vhci_hcd vhci_hcd.0: invalid port number 0 [ 66.038181][ T4236] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 66.041634][ T28] audit: type=1400 audit(1777688526.315:1822): avc: denied { mac_admin } for pid=4235 comm="syz.1.222" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.070750][ T28] audit: type=1400 audit(1777688526.335:1823): avc: denied { relabelto } for pid=4235 comm="syz.1.222" name="42" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 66.099789][ T28] audit: type=1400 audit(1777688526.335:1824): avc: denied { associate } for pid=4235 comm="syz.1.222" name="42" dev="tmpfs" ino=233 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 66.165586][ T28] audit: type=1400 audit(1777688526.425:1825): avc: denied { remove_name } for pid=3305 comm="syz-executor" name="binderfs" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 66.194376][ T28] audit: type=1400 audit(1777688526.425:1826): avc: denied { rmdir } for pid=3305 comm="syz-executor" name="42" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 66.204941][ T4241] vhci_hcd vhci_hcd.0: invalid port number 0 [ 66.227224][ T4234] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4234 comm=syz.2.221 [ 66.277341][ T28] audit: type=1400 audit(1777688526.545:1827): avc: denied { bind } for pid=4242 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.371687][ T4250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.429256][ T4250] xt_CT: No such helper "snmp_trap" [ 66.549984][ T4261] tipc: Cannot configure node identity twice [ 66.603688][ T4266] EXT4-fs: Ignoring removed bh option [ 66.979843][ T4266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.126310][ T4266] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.218407][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.393818][ T28] audit: type=1400 audit(1777688527.675:1828): avc: denied { write } for pid=4265 comm="syz.4.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.673866][ T3310] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 67.717802][ T3310] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 68.140748][ T4328] set_capacity_and_notify: 10 callbacks suppressed [ 68.140782][ T4328] loop1: detected capacity change from 0 to 256 [ 68.166403][ T4275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.222433][ T4328] FAT-fs (loop1): IO charset cp864 not found [ 68.372896][ T4345] loop0: detected capacity change from 0 to 512 [ 68.413694][ T4345] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 68.427780][ T4352] FAULT_INJECTION: forcing a failure. [ 68.427780][ T4352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.442512][ T4349] loop3: detected capacity change from 0 to 512 [ 68.463727][ T4349] EXT4-fs (loop3): 1 truncate cleaned up [ 68.485242][ T4349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.504928][ T4352] CPU: 0 UID: 0 PID: 4352 Comm: syz.1.255 Tainted: G W syzkaller #0 PREEMPT(full) [ 68.504968][ T4352] Tainted: [W]=WARN [ 68.504975][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 68.504988][ T4352] Call Trace: [ 68.504994][ T4352] [ 68.505003][ T4352] __dump_stack+0x1d/0x30 [ 68.505031][ T4352] dump_stack_lvl+0x95/0xd0 [ 68.505136][ T4352] dump_stack+0x15/0x1b [ 68.505155][ T4352] should_fail_ex+0x263/0x280 [ 68.505221][ T4352] should_fail+0xb/0x20 [ 68.505252][ T4352] should_fail_usercopy+0x1a/0x20 [ 68.505280][ T4352] _copy_to_user+0x20/0xa0 [ 68.505371][ T4352] simple_read_from_buffer+0xb5/0x130 [ 68.505484][ T4352] proc_fail_nth_read+0x10e/0x150 [ 68.505518][ T4352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.505587][ T4352] vfs_read+0x1ab/0x7f0 [ 68.505653][ T4352] ? __rcu_read_unlock+0x4e/0x70 [ 68.505678][ T4352] ? __fget_files+0x184/0x1c0 [ 68.505703][ T4352] ? mutex_lock+0x57/0x90 [ 68.505747][ T4352] ksys_read+0xdc/0x1a0 [ 68.505792][ T4352] __x64_sys_read+0x40/0x50 [ 68.505843][ T4352] x64_sys_call+0x2886/0x3020 [ 68.505903][ T4352] do_syscall_64+0x12c/0x3b0 [ 68.505929][ T4352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.505949][ T4352] RIP: 0033:0x7fd67bdfd60e [ 68.505967][ T4352] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 68.505990][ T4352] RSP: 002b:00007fd67a896fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.506014][ T4352] RAX: ffffffffffffffda RBX: 00007fd67a8976c0 RCX: 00007fd67bdfd60e [ 68.506091][ T4352] RDX: 000000000000000f RSI: 00007fd67a8970a0 RDI: 0000000000000004 [ 68.506106][ T4352] RBP: 00007fd67a897090 R08: 0000000000000000 R09: 0000000000000000 [ 68.506177][ T4352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.506239][ T4352] R13: 00007fd67c0b6038 R14: 00007fd67c0b5fa0 R15: 00007fff1499dc68 [ 68.506260][ T4352] [ 68.785000][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.827940][ T208] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 68.837428][ T4363] loop1: detected capacity change from 0 to 128 [ 68.892692][ T4346] gre0 speed is unknown, defaulting to 1000 [ 68.971567][ T4369] __nla_validate_parse: 5 callbacks suppressed [ 68.971585][ T4369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 68.991246][ T4371] netlink: 'syz.1.261': attribute type 4 has an invalid length. [ 69.000447][ T4369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 69.041319][ T4371] netlink: 'syz.1.261': attribute type 4 has an invalid length. [ 69.053589][ T4375] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 69.086115][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 69.203033][ T4375] loop3: detected capacity change from 0 to 2048 [ 69.213824][ T4386] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 69.258825][ T4375] loop3: p1 p2 p3 p4 [ 69.268672][ T4375] loop3: p1 size 67110656 extends beyond EOD, truncated [ 69.314323][ T4375] loop3: p3 size 134217728 extends beyond EOD, truncated [ 69.334713][ T4375] loop3: p4 size 4278190080 extends beyond EOD, truncated [ 69.435522][ T4394] capability: warning: `syz.2.267' uses 32-bit capabilities (legacy support in use) [ 70.031535][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.040173][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.048076][ T4346] bridge_slave_0: entered allmulticast mode [ 70.056288][ T4346] bridge_slave_0: entered promiscuous mode [ 70.063192][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.070780][ T4346] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.078240][ T4346] bridge_slave_1: entered allmulticast mode [ 70.087185][ T4346] bridge_slave_1: entered promiscuous mode [ 70.125681][ T4346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.136719][ T4346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.183262][ T4346] team0: Port device team_slave_0 added [ 70.190360][ T4346] team0: Port device team_slave_1 added [ 70.220413][ T4346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.227787][ T4346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.269316][ T4346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.306548][ T4430] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 70.317299][ T4432] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 70.326224][ T4346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.345240][ T4346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.394047][ T4346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.451879][ T4346] hsr_slave_0: entered promiscuous mode [ 70.460264][ T4346] hsr_slave_1: entered promiscuous mode [ 70.466214][ T4346] debugfs: 'hsr0' already exists in 'hsr' [ 70.472657][ T4346] Cannot create hsr debugfs directory [ 73.023338][ T4419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.034844][ T4346] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.066697][ T4346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.089498][ T4346] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.111640][ T4346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.124187][ T4453] loop0: detected capacity change from 0 to 256 [ 73.142286][ T4346] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 73.151029][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 73.151043][ T28] audit: type=1400 audit(1777688533.435:1844): avc: denied { append } for pid=4457 comm="syz.3.289" name="vsock" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.181259][ T4458] qrtr: Invalid version 19 [ 73.219227][ T4453] FAT-fs (loop0): IO charset cp864 not found [ 73.225338][ T28] audit: type=1400 audit(1777688533.505:1845): avc: denied { allowed } for pid=4463 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.255997][ T4346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.270184][ T4346] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.278892][ T28] audit: type=1400 audit(1777688533.565:1846): avc: denied { mount } for pid=4463 comm="syz.3.291" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 73.342693][ T4346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.362417][ T4462] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 73.434260][ T4475] loop3: detected capacity change from 0 to 1024 [ 73.527139][ T4475] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 73.541816][ T4475] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 73.565387][ T28] audit: type=1400 audit(1777688533.845:1847): avc: denied { create } for pid=4451 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.596525][ T4475] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: comm syz.3.291: inode #1: comm syz.3.291: iget: illegal inode # [ 73.625616][ T28] audit: type=1400 audit(1777688533.845:1848): avc: denied { connect } for pid=4451 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.664862][ T4346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.702209][ T4475] loop3: lost filesystem error report for type 5 error -117 [ 73.706635][ T4475] EXT4-fs (loop3): no journal found [ 73.711729][ T28] audit: type=1400 audit(1777688533.905:1849): avc: denied { setattr } for pid=4478 comm="syz.1.293" name="rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 73.717580][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 73.747060][ T28] audit: type=1400 audit(1777688533.955:1850): avc: denied { read write } for pid=4480 comm="syz.0.294" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 73.753274][ C1] EXT4-fs (loop3): initial error at time 1777688533: ext4_get_journal_inode:5896 [ 73.753303][ C1] EXT4-fs (loop3): last error at time 1777688533: ext4_get_journal_inode:5896 [ 73.763809][ T4346] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.806927][ T4483] loop0: detected capacity change from 0 to 512 [ 73.814189][ T4483] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.831567][ T4475] EXT4-fs (loop3): can't get journal size [ 73.844915][ T28] audit: type=1400 audit(1777688533.955:1851): avc: denied { open } for pid=4480 comm="syz.0.294" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 73.857425][ T4483] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 73.873428][ T4475] EXT4-fs (loop3): failed to initialize system zone (-22) [ 73.896424][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.903998][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.913160][ T28] audit: type=1400 audit(1777688533.955:1852): avc: denied { ioctl } for pid=4480 comm="syz.0.294" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 73.913207][ T4475] EXT4-fs (loop3): mount failed [ 73.944780][ T28] audit: type=1400 audit(1777688534.095:1853): avc: denied { mounton } for pid=4480 comm="syz.0.294" path="/56/file1" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.954279][ T4483] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.294: bg 0: block 248: padding at end of block bitmap is not set [ 74.011302][ T4483] loop0: lost filesystem error report for type 5 error -117 [ 74.011610][ T4483] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.294: Failed to acquire dquot type 1 [ 74.015299][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.019124][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 74.019143][ C1] EXT4-fs (loop0): last error at time 1777688534: ext4_validate_block_bitmap:441 [ 74.030652][ T4483] loop0: lost filesystem error report for type 5 error -28 [ 74.037741][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.068120][ T4483] EXT4-fs (loop0): 1 truncate cleaned up [ 74.076854][ T4483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 74.124714][ T4483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 74.127127][ T4346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.223879][ T4511] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 74.330025][ T4346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.488015][ T4346] veth0_vlan: entered promiscuous mode [ 74.501980][ T4346] veth1_vlan: entered promiscuous mode [ 74.523825][ T4346] veth0_macvtap: entered promiscuous mode [ 74.536238][ T4346] veth1_macvtap: entered promiscuous mode [ 74.564043][ T4346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.596033][ T4346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.597340][ T4521] loop1: detected capacity change from 0 to 128 [ 74.612019][ T1650] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.612175][ T1650] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.612266][ T1650] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.612306][ T1650] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.642100][ T4541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 75.001397][ T4559] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 75.088130][ T4564] loop3: detected capacity change from 0 to 1024 [ 75.117473][ T4564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.153364][ T4564] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.176970][ T4568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.251'. [ 75.366763][ T4571] netlink: 'syz.0.314': attribute type 64 has an invalid length. [ 75.388667][ T4564] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.313: lblock 0 mapped to illegal pblock 0 (length 1) [ 75.419063][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.426358][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.457884][ T4564] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 75.513667][ T4572] netlink: 'syz.0.314': attribute type 64 has an invalid length. [ 75.557644][ T4564] EXT4-fs (loop3): This should not happen!! Data will be lost [ 75.557644][ T4564] [ 75.578600][ T4577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 75.643426][ T4580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=4580 comm=syz.0.314 [ 75.816901][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.872517][ T4585] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 75.883666][ T4585] loop0: detected capacity change from 0 to 512 [ 75.987013][ T4587] SELinux: failed to load policy [ 76.038491][ T4582] loop1: detected capacity change from 0 to 128 [ 76.045222][ T4585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.068086][ T4585] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.080934][ T4585] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.318: corrupted inode contents [ 76.146045][ T4596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.321'. [ 76.202657][ T4585] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #2: comm syz.0.318: mark_inode_dirty error [ 76.258804][ T4585] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.318: corrupted inode contents [ 76.312630][ T4585] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.318: mark_inode_dirty error [ 76.426525][ T4597] loop1: detected capacity change from 0 to 512 [ 76.491467][ T4597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.507610][ T4597] ext4 filesystem being mounted at /73/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.766449][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.806095][ T4601] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 76.889725][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.892024][ T4605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 76.956918][ T4609] loop3: detected capacity change from 0 to 256 [ 77.020177][ T4605] loop0: detected capacity change from 0 to 8192 [ 77.067796][ T4605] loop0: p1 < > p2 p4 < p5 > [ 77.080453][ T4605] loop0: partition table partially beyond EOD, truncated [ 77.091865][ T4605] loop0: p1 start 134217728 is beyond EOD, truncated [ 77.104332][ T4605] loop0: p2 size 591360 extends beyond EOD, truncated [ 77.119672][ T4605] loop0: p5 size 591360 extends beyond EOD, truncated [ 77.217222][ T4631] loop5: detected capacity change from 0 to 1024 [ 77.243246][ T4631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.287908][ T4631] netlink: 44 bytes leftover after parsing attributes in process `syz.5.331'. [ 77.321510][ T4631] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.330083][ T4631] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.361676][ T4642] netlink: 44 bytes leftover after parsing attributes in process `syz.5.331'. [ 77.376836][ T4641] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 77.504619][ T4346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.537736][ T4647] FAULT_INJECTION: forcing a failure. [ 77.537736][ T4647] name failslab, interval 1, probability 0, space 0, times 0 [ 77.573430][ T4647] CPU: 1 UID: 0 PID: 4647 Comm: syz.1.335 Tainted: G W syzkaller #0 PREEMPT(full) [ 77.573480][ T4647] Tainted: [W]=WARN [ 77.573488][ T4647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 77.573516][ T4647] Call Trace: [ 77.573524][ T4647] [ 77.573534][ T4647] __dump_stack+0x1d/0x30 [ 77.573560][ T4647] dump_stack_lvl+0x95/0xd0 [ 77.573615][ T4647] dump_stack+0x15/0x1b [ 77.573678][ T4647] should_fail_ex+0x263/0x280 [ 77.573741][ T4647] should_failslab+0x8c/0xb0 [ 77.573799][ T4647] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 77.573870][ T4647] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 77.573899][ T4647] kmemdup_nul+0x36/0xc0 [ 77.573932][ T4647] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 77.574022][ T4647] vfs_parse_monolithic_sep+0x16a/0x270 [ 77.574124][ T4647] generic_parse_monolithic+0x24/0x30 [ 77.574274][ T4647] parse_monolithic_mount_data+0x46/0x60 [ 77.574301][ T4647] do_new_mount+0x24e/0x8d0 [ 77.574340][ T4647] ? security_capable+0x7b/0x90 [ 77.574466][ T4647] path_mount+0x4d0/0xbc0 [ 77.574503][ T4647] __se_sys_mount+0x28c/0x2e0 [ 77.574542][ T4647] ? fput+0x8f/0xc0 [ 77.574573][ T4647] __x64_sys_mount+0x67/0x80 [ 77.574717][ T4647] x64_sys_call+0x2d61/0x3020 [ 77.574767][ T4647] do_syscall_64+0x12c/0x3b0 [ 77.574793][ T4647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.574844][ T4647] RIP: 0033:0x7fd67be3cdd9 [ 77.574864][ T4647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.574886][ T4647] RSP: 002b:00007fd67a897028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.574911][ T4647] RAX: ffffffffffffffda RBX: 00007fd67c0b5fa0 RCX: 00007fd67be3cdd9 [ 77.574924][ T4647] RDX: 0000200000000300 RSI: 0000200000000140 RDI: 0000000000000000 [ 77.574990][ T4647] RBP: 00007fd67a897090 R08: 0000200000000180 R09: 0000000000000000 [ 77.575007][ T4647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.575022][ T4647] R13: 00007fd67c0b6038 R14: 00007fd67c0b5fa0 R15: 00007fff1499dc68 [ 77.575085][ T4647] [ 77.861799][ T4649] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 77.935284][ T4655] netlink: 64 bytes leftover after parsing attributes in process `syz.1.337'. [ 78.020182][ T4659] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.056654][ T4671] netlink: 'syz.5.341': attribute type 10 has an invalid length. [ 78.084524][ T4671] team0: Port device dummy0 added [ 78.099341][ T4671] netlink: 'syz.5.341': attribute type 10 has an invalid length. [ 78.159835][ T4671] team0: Port device dummy0 removed [ 78.167595][ T4678] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.180234][ T4671] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 78.189643][ T4678] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 78.212314][ T4678] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 78.241860][ T4678] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 78.274476][ T4678] System zones: 0-2, 18-18, 34-35 [ 78.288938][ T4659] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.309379][ T4682] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 78.319282][ T4678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.431434][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 78.431458][ T28] audit: type=1326 audit(1777688538.716:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.0.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711820cdd9 code=0x7ffc0000 [ 78.536451][ T4659] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.574255][ T28] audit: type=1326 audit(1777688538.746:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.0.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711820cdd9 code=0x7ffc0000 [ 78.780484][ T4659] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.211572][ T28] audit: type=1326 audit(1777688538.746:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.0.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711820cdd9 code=0x7ffc0000 [ 79.238853][ T28] audit: type=1326 audit(1777688538.746:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.0.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f711820cdd9 code=0x7ffc0000 [ 79.268705][ T28] audit: type=1326 audit(1777688538.746:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.0.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711820cdd9 code=0x7ffc0000 [ 79.312530][ T28] audit: type=1326 audit(1777688538.756:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.0.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711820cdd9 code=0x7ffc0000 [ 79.359501][ T424] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.383788][ T28] audit: type=1326 audit(1777688538.756:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.0.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711820cdd9 code=0x7ffc0000 [ 79.412981][ T424] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.431714][ T270] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.450065][ T424] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.554012][ T4693] set_capacity_and_notify: 2 callbacks suppressed [ 79.554065][ T4693] loop5: detected capacity change from 0 to 128 [ 79.569354][ T28] audit: type=1326 audit(1777688538.756:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.0.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711820cdd9 code=0x7ffc0000 [ 79.625705][ T28] audit: type=1326 audit(1777688538.746:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.0.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711820cdd9 code=0x7ffc0000 [ 79.705010][ T4693] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.718716][ T28] audit: type=1326 audit(1777688538.756:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.0.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f711820e647 code=0x7ffc0000 [ 79.764893][ T4693] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.799858][ T4693] EXT4-fs warning (device loop5): ext4_group_extend:1861: can't shrink FS - resize aborted [ 79.823724][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.860620][ T4346] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.552015][ T4716] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 80.717468][ T4718] loop2: detected capacity change from 0 to 256 [ 80.767385][ T4718] FAT-fs (loop2): IO charset cp864 not found [ 80.795103][ T4718] tipc: Started in network mode [ 80.808967][ T4718] tipc: Node identity 0000000000000000002e00000000407f, cluster identity 4711 [ 81.024546][ T4724] loop1: detected capacity change from 0 to 256 [ 81.139687][ T4724] vfat: Unknown parameter 'shortnapil' [ 81.375470][ T4731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 81.472273][ T4735] loop5: detected capacity change from 0 to 132 [ 81.501598][ T4738] FAULT_INJECTION: forcing a failure. [ 81.501598][ T4738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.538759][ T4736] netlink: 748 bytes leftover after parsing attributes in process `syz.5.362'. [ 81.549232][ T4738] CPU: 1 UID: 0 PID: 4738 Comm: syz.1.363 Tainted: G W syzkaller #0 PREEMPT(full) [ 81.549327][ T4738] Tainted: [W]=WARN [ 81.549336][ T4738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 81.549358][ T4738] Call Trace: [ 81.549368][ T4738] [ 81.549378][ T4738] __dump_stack+0x1d/0x30 [ 81.549407][ T4738] dump_stack_lvl+0x95/0xd0 [ 81.549438][ T4738] dump_stack+0x15/0x1b [ 81.549462][ T4738] should_fail_ex+0x263/0x280 [ 81.549489][ T4738] should_fail+0xb/0x20 [ 81.549513][ T4738] should_fail_usercopy+0x1a/0x20 [ 81.549616][ T4738] _copy_from_user+0x1c/0xb0 [ 81.549646][ T4738] do_sock_getsockopt+0x122/0x570 [ 81.549682][ T4738] __x64_sys_getsockopt+0x11d/0x1a0 [ 81.549730][ T4738] x64_sys_call+0x2dcf/0x3020 [ 81.549761][ T4738] do_syscall_64+0x12c/0x3b0 [ 81.549856][ T4738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.549882][ T4738] RIP: 0033:0x7fd67be3cdd9 [ 81.549960][ T4738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.549978][ T4738] RSP: 002b:00007fd67a897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 81.550002][ T4738] RAX: ffffffffffffffda RBX: 00007fd67c0b5fa0 RCX: 00007fd67be3cdd9 [ 81.550026][ T4738] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000005 [ 81.550041][ T4738] RBP: 00007fd67a897090 R08: 0000000000000000 R09: 0000000000000000 [ 81.550056][ T4738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.550081][ T4738] R13: 00007fd67c0b6038 R14: 00007fd67c0b5fa0 R15: 00007fff1499dc68 [ 81.550112][ T4738] [ 81.734452][ T4741] bond1: option arp_interval: invalid value (18446744073709551592) [ 81.761657][ T4741] bond1: option arp_interval: allowed values 0 - 2147483647 [ 81.787752][ T4741] bond1 (unregistering): Released all slaves [ 81.844871][ T4749] loop5: detected capacity change from 0 to 512 [ 81.852243][ T4749] EXT4-fs: Mount option(s) incompatible with ext3 [ 81.981100][ T4752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 82.334197][ T4758] netlink: 176 bytes leftover after parsing attributes in process `syz.0.369'. [ 82.384055][ T4757] loop1: detected capacity change from 0 to 256 [ 82.433359][ T4760] loop0: detected capacity change from 0 to 512 [ 82.455276][ T4757] FAT-fs (loop1): IO charset cp864 not found [ 82.490275][ T4757] tipc: Cannot configure node identity twice [ 82.492279][ T4760] EXT4-fs (loop0): 1 truncate cleaned up [ 82.531315][ T4760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.582802][ T4768] loop1: detected capacity change from 0 to 512 [ 82.590848][ T4766] gre0 speed is unknown, defaulting to 1000 [ 82.602263][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.618341][ T4768] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 82.633284][ T4768] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 82.694600][ T4773] netlink: 104 bytes leftover after parsing attributes in process `syz.2.374'. [ 82.893197][ T4776] FAULT_INJECTION: forcing a failure. [ 82.893197][ T4776] name failslab, interval 1, probability 0, space 0, times 0 [ 83.463902][ T4776] CPU: 1 UID: 0 PID: 4776 Comm: syz.1.375 Tainted: G W syzkaller #0 PREEMPT(full) [ 83.463938][ T4776] Tainted: [W]=WARN [ 83.463945][ T4776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 83.463957][ T4776] Call Trace: [ 83.464000][ T4776] [ 83.464010][ T4776] __dump_stack+0x1d/0x30 [ 83.464081][ T4776] dump_stack_lvl+0x95/0xd0 [ 83.464108][ T4776] dump_stack+0x15/0x1b [ 83.464126][ T4776] should_fail_ex+0x263/0x280 [ 83.464220][ T4776] ? addr_event+0x9b/0x270 [ 83.464261][ T4776] should_failslab+0x8c/0xb0 [ 83.464292][ T4776] __kmalloc_cache_noprof+0x5f/0x400 [ 83.464353][ T4776] ? __pfx_inetaddr_event+0x10/0x10 [ 83.464394][ T4776] addr_event+0x9b/0x270 [ 83.464444][ T4776] ? __pfx_inetaddr_event+0x10/0x10 [ 83.464485][ T4776] inetaddr_event+0x71/0xa0 [ 83.464516][ T4776] blocking_notifier_call_chain+0x9b/0x1e0 [ 83.464589][ T4776] __inet_insert_ifa+0x4f2/0x5e0 [ 83.464623][ T4776] inet_insert_ifa+0x36/0x60 [ 83.464661][ T4776] devinet_ioctl+0xdd4/0xe00 [ 83.464701][ T4776] inet_ioctl+0x2f8/0x3a0 [ 83.464742][ T4776] sock_do_ioctl+0x73/0x230 [ 83.464805][ T4776] sock_ioctl+0x41b/0x610 [ 83.464837][ T4776] ? mutex_lock+0x57/0x90 [ 83.464884][ T4776] ? __pfx_sock_ioctl+0x10/0x10 [ 83.464911][ T4776] __se_sys_ioctl+0xce/0x140 [ 83.464994][ T4776] __x64_sys_ioctl+0x43/0x50 [ 83.465024][ T4776] x64_sys_call+0x1563/0x3020 [ 83.465055][ T4776] do_syscall_64+0x12c/0x3b0 [ 83.465083][ T4776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.465150][ T4776] RIP: 0033:0x7fd67be3cdd9 [ 83.465168][ T4776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.465190][ T4776] RSP: 002b:00007fd67a897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.465215][ T4776] RAX: ffffffffffffffda RBX: 00007fd67c0b5fa0 RCX: 00007fd67be3cdd9 [ 83.465293][ T4776] RDX: 0000200000000540 RSI: 000000000000891c RDI: 0000000000000003 [ 83.465376][ T4776] RBP: 00007fd67a897090 R08: 0000000000000000 R09: 0000000000000000 [ 83.465391][ T4776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.465405][ T4776] R13: 00007fd67c0b6038 R14: 00007fd67c0b5fa0 R15: 00007fff1499dc68 [ 83.465484][ T4776] [ 83.895024][ T4785] netlink: 324 bytes leftover after parsing attributes in process `syz.0.377'. [ 84.002729][ T4787] loop2: detected capacity change from 0 to 512 [ 84.022413][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 84.022515][ T28] audit: type=1400 audit(1777688544.299:1956): avc: denied { setopt } for pid=4788 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.061755][ T4787] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 84.112054][ T4787] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 84.241156][ T4794] loop1: detected capacity change from 0 to 256 [ 84.254271][ T4792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 84.286945][ T4794] FAT-fs (loop1): IO charset cp864 not found [ 84.322321][ T4794] tipc: Cannot configure node identity twice [ 84.699274][ T4811] netlink: 'syz.0.384': attribute type 21 has an invalid length. [ 84.765019][ T4822] netlink: 'syz.0.384': attribute type 13 has an invalid length. [ 84.801082][ T4822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.384'. [ 85.913778][ T28] audit: type=1400 audit(1777688546.010:1957): avc: denied { read } for pid=4805 comm="syz.1.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 86.835969][ T424] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.874461][ T424] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.914119][ T424] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.972149][ T424] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.042982][ T4838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 87.167886][ T4841] loop3: detected capacity change from 0 to 128 [ 87.218125][ T4841] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.278467][ T4841] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.328108][ T4836] loop2: detected capacity change from 0 to 256 [ 87.337902][ T4841] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.394740][ T4836] msdos: Bad value for 'uid' [ 87.425135][ T4836] msdos: Bad value for 'uid' [ 87.446220][ T28] audit: type=1400 audit(1777688547.720:1958): avc: denied { mount } for pid=4847 comm="syz.5.398" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 87.547655][ T28] audit: type=1400 audit(1777688547.830:1959): avc: denied { ioctl } for pid=4834 comm="syz.2.393" path="socket:[9636]" dev="sockfs" ino=9636 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.581772][ T28] audit: type=1400 audit(1777688547.830:1960): avc: denied { bind } for pid=4834 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.638388][ T28] audit: type=1400 audit(1777688547.920:1961): avc: denied { getopt } for pid=4851 comm="syz.5.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.681657][ T28] audit: type=1400 audit(1777688547.950:1962): avc: denied { setopt } for pid=4851 comm="syz.5.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.717314][ T4854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.399'. [ 87.752171][ T4854] gre0 speed is unknown, defaulting to 1000 [ 87.818362][ T4860] netlink: 132 bytes leftover after parsing attributes in process `syz.5.403'. [ 87.897309][ T4862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 88.003464][ T28] audit: type=1400 audit(1777688548.281:1963): avc: denied { ioctl } for pid=4864 comm="syz.2.404" path="socket:[9689]" dev="sockfs" ino=9689 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.720076][ T28] audit: type=1400 audit(1777688548.991:1964): avc: denied { bind } for pid=4870 comm="syz.5.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.809090][ T28] audit: type=1400 audit(1777688549.001:1965): avc: denied { listen } for pid=4870 comm="syz.5.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.842074][ T4876] loop2: detected capacity change from 0 to 512 [ 88.856054][ T4874] loop5: detected capacity change from 0 to 256 [ 88.878004][ T4876] EXT4-fs (loop2): 1 truncate cleaned up [ 88.910063][ T4874] FAT-fs (loop5): IO charset cp864 not found [ 88.927012][ T4876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.927900][ T4874] tipc: Started in network mode [ 88.967605][ T4874] tipc: Node identity 0000000000000000002e00000000407f, cluster identity 4711 [ 89.020993][ T4881] netlink: 104 bytes leftover after parsing attributes in process `syz.0.408'. [ 89.032675][ T28] audit: type=1400 audit(1777688549.301:1966): avc: denied { read } for pid=4880 comm="syz.0.408" path="socket:[9731]" dev="sockfs" ino=9731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.077023][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.150149][ T4892] loop2: detected capacity change from 0 to 512 [ 89.181459][ T4892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.195638][ T4892] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.223718][ T4885] netlink: 32 bytes leftover after parsing attributes in process `syz.0.408'. [ 89.234476][ T4890] loop5: detected capacity change from 0 to 256 [ 89.279935][ T4890] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.322506][ T4890] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.329205][ T4885] loop0: detected capacity change from 0 to 256 [ 89.355713][ T28] audit: type=1400 audit(1777688549.641:1967): avc: denied { remount } for pid=4889 comm="syz.5.411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 89.521811][ T4890] FAULT_INJECTION: forcing a failure. [ 89.521811][ T4890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.544481][ T4890] CPU: 0 UID: 0 PID: 4890 Comm: syz.5.411 Tainted: G W syzkaller #0 PREEMPT(full) [ 89.544518][ T4890] Tainted: [W]=WARN [ 89.544527][ T4890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.544543][ T4890] Call Trace: [ 89.544551][ T4890] [ 89.544560][ T4890] __dump_stack+0x1d/0x30 [ 89.544632][ T4890] dump_stack_lvl+0x95/0xd0 [ 89.544658][ T4890] dump_stack+0x15/0x1b [ 89.544682][ T4890] should_fail_ex+0x263/0x280 [ 89.544714][ T4890] should_fail+0xb/0x20 [ 89.544823][ T4890] should_fail_usercopy+0x1a/0x20 [ 89.544862][ T4890] _copy_from_user+0x1c/0xb0 [ 89.544902][ T4890] io_submit_one+0x52/0x1350 [ 89.544944][ T4890] __se_sys_io_submit+0xfb/0x280 [ 89.544982][ T4890] __x64_sys_io_submit+0x43/0x50 [ 89.545012][ T4890] x64_sys_call+0x19d5/0x3020 [ 89.545133][ T4890] do_syscall_64+0x12c/0x3b0 [ 89.545210][ T4890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.545239][ T4890] RIP: 0033:0x7fd29c1dcdd9 [ 89.545259][ T4890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.545327][ T4890] RSP: 002b:00007fd29ac2f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 89.545420][ T4890] RAX: ffffffffffffffda RBX: 00007fd29c455fa0 RCX: 00007fd29c1dcdd9 [ 89.545436][ T4890] RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007fd29ac06000 [ 89.545454][ T4890] RBP: 00007fd29ac2f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.545470][ T4890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.545485][ T4890] R13: 00007fd29c456038 R14: 00007fd29c455fa0 R15: 00007ffd30e15de8 [ 89.545546][ T4890] [ 90.078073][ T4905] loop1: detected capacity change from 0 to 256 [ 90.123203][ T4905] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.148130][ T4905] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.993081][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.121632][ T4914] loop0: detected capacity change from 0 to 256 [ 91.139896][ T4916] tipc: Started in network mode [ 91.145243][ T4916] tipc: Node identity 0000000000000000002e00000000407f, cluster identity 4711 [ 91.164135][ T4914] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.218854][ T4918] loop3: detected capacity change from 0 to 512 [ 91.239697][ T4918] EXT4-fs (loop3): 1 truncate cleaned up [ 91.247383][ T4918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.751928][ T4923] EXT4-fs: inline encryption not supported [ 91.763563][ T4923] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.778226][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.830678][ T4923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.867884][ T4926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.422'. [ 92.112416][ T4926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.422'. [ 92.134400][ T4923] gretap0 speed is unknown, defaulting to 1000 [ 92.142397][ T4923] gretap0 speed is unknown, defaulting to 1000 [ 92.148999][ T4923] gretap0 speed is unknown, defaulting to 1000 [ 92.153974][ T28] audit: type=1400 audit(1777688552.423:1968): avc: denied { create } for pid=4922 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 92.179774][ T4940] mmap: syz.1.422 (4940) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.186091][ T4923] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 92.219803][ T4945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.421'. [ 92.228403][ T28] audit: type=1400 audit(1777688552.423:1969): avc: denied { write } for pid=4922 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 92.254888][ T28] audit: type=1400 audit(1777688552.493:1970): avc: denied { bind } for pid=4921 comm="syz.1.422" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.266689][ T4923] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 92.277635][ T28] audit: type=1400 audit(1777688552.493:1971): avc: denied { node_bind } for pid=4921 comm="syz.1.422" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 92.425099][ T4943] set_capacity_and_notify: 1 callbacks suppressed [ 92.425119][ T4943] loop5: detected capacity change from 0 to 4096 [ 92.427094][ T28] audit: type=1400 audit(1777688552.713:1972): avc: denied { getopt } for pid=4921 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.455283][ T4923] gretap0 speed is unknown, defaulting to 1000 [ 92.476291][ T4942] loop2: detected capacity change from 0 to 128 [ 92.484971][ T4923] gretap0 speed is unknown, defaulting to 1000 [ 92.496535][ T4942] msdos: Unknown parameter '00000000000000000000371' [ 92.513764][ T4923] gretap0 speed is unknown, defaulting to 1000 [ 92.535198][ T4923] gretap0 speed is unknown, defaulting to 1000 [ 92.543932][ T4923] gretap0 speed is unknown, defaulting to 1000 [ 92.566573][ T28] audit: type=1326 audit(1777688552.723:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.2.426" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83094cdd9 code=0x7ffc0000 [ 92.593699][ T28] audit: type=1326 audit(1777688552.723:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.2.426" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83094cdd9 code=0x7ffc0000 [ 92.621030][ T28] audit: type=1326 audit(1777688552.753:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.2.426" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83094cdd9 code=0x7ffc0000 [ 92.668442][ T4923] gretap0 speed is unknown, defaulting to 1000 [ 92.720033][ T4943] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 92.922948][ T4943] System zones: 0-5 [ 92.927983][ T4943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.152611][ T4954] loop2: detected capacity change from 0 to 512 [ 93.179336][ T4954] FAT-fs (loop2): invalid media value (0x03) [ 93.185886][ T4954] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 93.196197][ T4954] FAT-fs (loop2): Can't find a valid FAT filesystem [ 93.225305][ T4346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.267595][ T4957] tipc: Cannot configure node identity twice [ 93.275525][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.501784][ T4968] loop5: detected capacity change from 0 to 764 [ 93.511982][ T4968] iso9660: Unknown parameter '@ź7 !+f*6 5m×cxPѵG%rZ:AޝN[/ǵ^:趼dUKub5D' [ 93.554391][ T4968] loop5: detected capacity change from 0 to 128 [ 93.567631][ T4968] vfat: Unknown parameter '18446744073709551615' [ 93.636184][ T4965] veth0_vlan: entered allmulticast mode [ 93.658505][ T4977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4977 comm=syz.3.436 [ 93.703576][ T4980] loop0: detected capacity change from 0 to 512 [ 93.712682][ T4980] EXT4-fs (loop0): 1 truncate cleaned up [ 93.721826][ T4980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.765260][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.833361][ T4978] veth0_vlan: left allmulticast mode [ 94.292241][ T28] kauditd_printk_skb: 427 callbacks suppressed [ 94.292329][ T28] audit: type=1326 audit(1777688554.584:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.3.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f395bd60e code=0x7ffc0000 [ 94.347302][ T28] audit: type=1326 audit(1777688554.634:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.3.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f395bd60e code=0x7ffc0000 [ 94.375463][ T28] audit: type=1326 audit(1777688554.664:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.3.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f395bd60e code=0x7ffc0000 [ 94.527819][ T28] audit: type=1326 audit(1777688554.714:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.3.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f395bd60e code=0x7ffc0000 [ 94.723014][ T28] audit: type=1326 audit(1777688554.724:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.3.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f395bd60e code=0x7ffc0000 [ 94.779365][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'. [ 94.828107][ T28] audit: type=1326 audit(1777688554.724:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.3.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f395bd60e code=0x7ffc0000 [ 94.884176][ T4995] loop3: detected capacity change from 0 to 512 [ 94.933404][ T28] audit: type=1326 audit(1777688554.724:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.3.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f395bd60e code=0x7ffc0000 [ 95.005751][ T28] audit: type=1326 audit(1777688554.724:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.3.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f395bd60e code=0x7ffc0000 [ 95.107548][ T28] audit: type=1326 audit(1777688554.724:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.3.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f395bd60e code=0x7ffc0000 [ 95.167312][ T4995] EXT4-fs: Ignoring removed nobh option [ 95.272571][ T28] audit: type=1326 audit(1777688554.734:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.3.436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f395bd60e code=0x7ffc0000 [ 95.497824][ T5015] loop1: detected capacity change from 0 to 1024 [ 95.518458][ T5015] EXT4-fs: Ignoring removed nobh option [ 95.577279][ T5015] EXT4-fs: Ignoring removed bh option [ 95.611108][ T5015] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 95.631717][ T4995] EXT4-fs (loop3): orphan cleanup on readonly fs [ 95.704819][ T5015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.745163][ T5015] netlink: 68 bytes leftover after parsing attributes in process `syz.1.449'. [ 95.764905][ T4995] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.441: EA inode hash validation failed [ 95.823119][ T4995] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 95.898711][ T4995] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.441: corrupted inode contents [ 95.941981][ T4995] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.943493][ T4995] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #15: comm syz.3.441: mark_inode_dirty error [ 95.953234][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 95.953380][ C1] EXT4-fs (loop3): initial error at time 1777688556: ext4_do_update_inode:5690: inode 15 [ 95.953829][ C1] EXT4-fs (loop3): last error at time 1777688556: ext4_do_update_inode:5690: inode 15 [ 96.104610][ T4995] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.124111][ T4995] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.441: corrupted inode contents [ 96.183280][ T4995] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.185743][ T4995] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.441: mark_inode_dirty error [ 96.245387][ T4995] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.248269][ T4995] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.441: mark inode dirty (error -117) [ 96.501413][ T4995] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.534518][ T4995] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 96.566113][ T5026] loop5: detected capacity change from 0 to 8192 [ 96.625778][ T5033] loop0: detected capacity change from 0 to 512 [ 96.627057][ T5033] FAT-fs (loop0): Directory bread(block 199916) failed [ 96.627081][ T5033] FAT-fs (loop0): Directory bread(block 199917) failed [ 96.627101][ T5033] FAT-fs (loop0): Directory bread(block 199918) failed [ 96.627123][ T5033] FAT-fs (loop0): Directory bread(block 199919) failed [ 96.627144][ T5033] FAT-fs (loop0): Directory bread(block 199920) failed [ 96.627188][ T5033] FAT-fs (loop0): Directory bread(block 199921) failed [ 96.627210][ T5033] FAT-fs (loop0): Directory bread(block 199922) failed [ 96.627228][ T5033] FAT-fs (loop0): Directory bread(block 199923) failed [ 96.727809][ T4995] EXT4-fs (loop3): 1 orphan inode deleted [ 96.769611][ T5026] loop5: p1 p2 p3 p4 [ 96.769751][ T5026] loop5: p1 size 67898881 extends beyond EOD, truncated [ 96.771109][ T5026] loop5: p3 start 4294443008 is beyond EOD, truncated [ 96.771133][ T5026] loop5: p4 size 262144 extends beyond EOD, truncated [ 96.936770][ T5031] FAT-fs (loop0): FAT read failed (blocknr 128) [ 97.320390][ T4995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 97.435381][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.610322][ T5043] set_capacity_and_notify: 1 callbacks suppressed [ 97.610337][ T5043] loop2: detected capacity change from 0 to 512 [ 97.645854][ T5043] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 97.665977][ T5043] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 97.707737][ T5038] loop0: detected capacity change from 0 to 128 [ 97.877730][ T5038] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.950975][ T5038] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.005435][ T5039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.456'. [ 98.059075][ T5038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.456'. [ 98.083233][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.255650][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.473518][ T5054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 98.482478][ T5054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.461'. [ 98.493150][ T5054] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 99.373224][ T5063] loop3: detected capacity change from 0 to 128 [ 99.872940][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 99.872969][ T28] audit: type=1400 audit(2000000001.840:2455): avc: denied { create } for pid=5062 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 100.196154][ T28] audit: type=1400 audit(2000000002.110:2456): avc: denied { bind } for pid=5062 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.245056][ T28] audit: type=1400 audit(2000000002.110:2457): avc: denied { name_bind } for pid=5062 comm="syz.3.464" src=18977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 100.270694][ T28] audit: type=1400 audit(2000000002.110:2458): avc: denied { node_bind } for pid=5062 comm="syz.3.464" saddr=100.1.1.2 src=18977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 100.384294][ T5084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 100.526449][ T5071] loop2: detected capacity change from 0 to 128 [ 101.061896][ T5089] loop3: detected capacity change from 0 to 512 [ 101.184173][ T5089] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 101.240486][ T5089] System zones: 0-2, 18-18, 34-35 [ 101.265856][ T5089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.288999][ T5089] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.353001][ T5071] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.393402][ T5071] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.494438][ T5106] IPv6: addrconf: prefix option has invalid lifetime [ 101.505030][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.664485][ T5113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.477'. [ 101.937661][ T28] audit: type=1400 audit(2000000003.910:2459): avc: denied { rename } for pid=5064 comm="syz.2.465" name="bus" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 102.093299][ T5119] loop5: detected capacity change from 0 to 512 [ 102.153771][ T5119] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 102.163338][ T28] audit: type=1400 audit(2000000004.140:2460): avc: denied { mounton } for pid=5118 comm="syz.5.478" path="/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=10129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 102.310860][ T5119] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 102.605384][ T28] audit: type=1400 audit(2000000004.580:2461): avc: denied { execute } for pid=5064 comm="syz.2.465" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 102.662682][ T5129] FAULT_INJECTION: forcing a failure. [ 102.662682][ T5129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.717254][ T5129] CPU: 0 UID: 0 PID: 5129 Comm: syz.1.482 Tainted: G W syzkaller #0 PREEMPT(full) [ 102.717376][ T5129] Tainted: [W]=WARN [ 102.717383][ T5129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 102.717399][ T5129] Call Trace: [ 102.717406][ T5129] [ 102.717415][ T5129] __dump_stack+0x1d/0x30 [ 102.717508][ T5129] dump_stack_lvl+0x95/0xd0 [ 102.717536][ T5129] dump_stack+0x15/0x1b [ 102.717560][ T5129] should_fail_ex+0x263/0x280 [ 102.717596][ T5129] should_fail+0xb/0x20 [ 102.717704][ T5129] should_fail_usercopy+0x1a/0x20 [ 102.717742][ T5129] _copy_to_user+0x20/0xa0 [ 102.717781][ T5129] simple_read_from_buffer+0xb5/0x130 [ 102.717925][ T5129] proc_fail_nth_read+0x10e/0x150 [ 102.717959][ T5129] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.718038][ T5129] vfs_read+0x1ab/0x7f0 [ 102.718073][ T5129] ? __rcu_read_unlock+0x4e/0x70 [ 102.718100][ T5129] ? __fget_files+0x184/0x1c0 [ 102.718146][ T5129] ? mutex_lock+0x57/0x90 [ 102.718186][ T5129] ksys_read+0xdc/0x1a0 [ 102.718351][ T5129] __x64_sys_read+0x40/0x50 [ 102.718387][ T5129] x64_sys_call+0x2886/0x3020 [ 102.718418][ T5129] do_syscall_64+0x12c/0x3b0 [ 102.718452][ T5129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.718508][ T5129] RIP: 0033:0x7fd67bdfd60e [ 102.718525][ T5129] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.718548][ T5129] RSP: 002b:00007fd67a896fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.718599][ T5129] RAX: ffffffffffffffda RBX: 00007fd67a8976c0 RCX: 00007fd67bdfd60e [ 102.718617][ T5129] RDX: 000000000000000f RSI: 00007fd67a8970a0 RDI: 0000000000000005 [ 102.718633][ T5129] RBP: 00007fd67a897090 R08: 0000000000000000 R09: 0000000000000000 [ 102.718649][ T5129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.718663][ T5129] R13: 00007fd67c0b6038 R14: 00007fd67c0b5fa0 R15: 00007fff1499dc68 [ 102.718686][ T5129] [ 102.975260][ T5138] Invalid ELF header magic: != ELF [ 103.040041][ T28] audit: type=1400 audit(2000000004.960:2462): avc: denied { module_load } for pid=5137 comm="syz.3.486" path="/76/bus" dev="tmpfs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 103.192091][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.205638][ T5150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.487'. [ 103.983913][ T28] audit: type=1400 audit(2000000005.710:2463): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.305436][ T5156] loop1: detected capacity change from 0 to 512 [ 104.352289][ T5158] loop2: detected capacity change from 0 to 512 [ 104.395684][ T5156] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 104.433368][ T28] audit: type=1400 audit(2000000006.380:2464): avc: denied { mount } for pid=5159 comm="syz.3.492" name="/" dev="autofs" ino=10200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 104.472490][ T5163] netlink: 48 bytes leftover after parsing attributes in process `syz.5.493'. [ 104.480710][ T5156] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 104.495736][ T5163] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.493'. [ 104.507089][ T5158] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #17: comm syz.2.490: iget: bogus i_mode (0) [ 104.507138][ T5158] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 104.507372][ T5158] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.490: couldn't read orphan inode 17 (err -117) [ 104.507404][ T5158] loop2: lost filesystem error report for type 5 error -117 [ 104.508898][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 104.508920][ C1] EXT4-fs (loop2): initial error at time 2000000006: ext4_orphan_get:1397: inode 17 [ 104.508954][ C1] EXT4-fs (loop2): last error at time 2000000006: ext4_orphan_get:1402 [ 104.516069][ T5158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.563090][ T5165] loop5: detected capacity change from 0 to 1024 [ 104.695110][ T5170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.494'. [ 104.727234][ T5158] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.490: bg 0: block 7: invalid block bitmap [ 104.750928][ T5173] netlink: 'syz.5.496': attribute type 83 has an invalid length. [ 104.794564][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.880037][ T5170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5170 comm=syz.1.494 [ 104.895698][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 104.895716][ T28] audit: type=1400 audit(2000000006.880:2468): avc: denied { read } for pid=5177 comm="syz.5.498" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 104.970510][ T5180] gre0 speed is unknown, defaulting to 1000 [ 105.010183][ T5174] netlink: 64 bytes leftover after parsing attributes in process `syz.1.494'. [ 105.085056][ T5180] gretap0 speed is unknown, defaulting to 1000 [ 105.221832][ T28] audit: type=1400 audit(2000000007.200:2469): avc: denied { validate_trans } for pid=5177 comm="syz.5.498" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 105.253971][ T5178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.289777][ T5178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.294876][ T28] audit: type=1400 audit(2000000007.200:2470): avc: denied { read write } for pid=5177 comm="syz.5.498" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 105.339296][ T28] audit: type=1400 audit(2000000007.200:2471): avc: denied { open } for pid=5177 comm="syz.5.498" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 105.391697][ T28] audit: type=1400 audit(2000000007.200:2472): avc: denied { ioctl } for pid=5177 comm="syz.5.498" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 105.454404][ T5178] loop5: detected capacity change from 0 to 1024 [ 105.493969][ T5178] EXT4-fs: Ignoring removed bh option [ 105.639951][ T5178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.664994][ T5188] loop2: detected capacity change from 0 to 256 [ 105.694271][ T5178] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 105.734569][ T5191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 105.842410][ T5188] FAT-fs (loop2): IO charset cp864 not found [ 106.056581][ T5198] loop1: detected capacity change from 0 to 512 [ 106.082408][ T28] audit: type=1400 audit(2000000008.020:2473): avc: denied { cmd } for pid=5197 comm="syz.1.503" path="socket:[11086]" dev="sockfs" ino=11086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.173353][ T5202] loop2: detected capacity change from 0 to 512 [ 106.246066][ T5202] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 106.332245][ T5202] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 106.488328][ T4346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.556635][ T5208] loop2: detected capacity change from 0 to 128 [ 106.594871][ T5211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.508'. [ 106.609840][ T5208] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 106.631395][ T5208] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.641874][ T5211] bond1: entered promiscuous mode [ 106.642038][ T5211] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.661796][ T5211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 106.676963][ T5211] netlink: 32 bytes leftover after parsing attributes in process `syz.3.508'. [ 106.691815][ T28] audit: type=1400 audit(2000000008.680:2474): avc: denied { create } for pid=5206 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 106.800290][ T5220] loop3: detected capacity change from 0 to 512 [ 106.809149][ T5220] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.841265][ T5220] EXT4-fs (loop3): 1 truncate cleaned up [ 106.848993][ T5220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.881388][ T5225] loop1: detected capacity change from 0 to 512 [ 106.901185][ T5225] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.919911][ T5225] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 106.940461][ T5225] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 107.035163][ T5225] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 107.071356][ T5225] System zones: 0-2, 18-18, 34-35 [ 107.098715][ T5225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.285903][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.509362][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.564274][ T5234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 107.830707][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.129746][ T5243] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 108.189094][ T28] audit: type=1400 audit(2000000010.170:2475): avc: denied { read } for pid=5233 comm="syz.1.512" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 108.194167][ T5241] FAT-fs (loop2): IO charset cp864 not found [ 108.269146][ T28] audit: type=1400 audit(2000000010.170:2476): avc: denied { open } for pid=5233 comm="syz.1.512" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 108.460173][ T5252] EXT4-fs: Ignoring removed oldalloc option [ 108.484034][ T5252] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.525402][ T5252] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #11: comm syz.3.519: corrupted in-inode xattr: invalid ea_ino [ 108.540347][ T5252] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 108.540552][ T5252] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.519: couldn't read orphan inode 11 (err -117) [ 108.550153][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 108.550174][ C0] EXT4-fs (loop3): initial error at time 2000000010: ext4_iget_extra_inode:5128: inode 11 [ 108.550224][ C0] EXT4-fs (loop3): last error at time 2000000010: ext4_iget_extra_inode:5128: inode 11 [ 108.609157][ T5252] loop3: lost filesystem error report for type 5 error -117 [ 108.610239][ T5252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.212594][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.286083][ T5264] FAULT_INJECTION: forcing a failure. [ 109.286083][ T5264] name failslab, interval 1, probability 0, space 0, times 0 [ 109.320475][ T5266] set_capacity_and_notify: 3 callbacks suppressed [ 109.320500][ T5266] loop0: detected capacity change from 0 to 512 [ 109.350621][ T5264] CPU: 0 UID: 0 PID: 5264 Comm: syz.2.520 Tainted: G W syzkaller #0 PREEMPT(full) [ 109.350737][ T5264] Tainted: [W]=WARN [ 109.350746][ T5264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.350762][ T5264] Call Trace: [ 109.350768][ T5264] [ 109.350775][ T5264] __dump_stack+0x1d/0x30 [ 109.350799][ T5264] dump_stack_lvl+0x95/0xd0 [ 109.350818][ T5264] dump_stack+0x15/0x1b [ 109.350912][ T5264] should_fail_ex+0x263/0x280 [ 109.350947][ T5264] should_failslab+0x8c/0xb0 [ 109.350983][ T5264] kmem_cache_alloc_noprof+0x66/0x3f0 [ 109.351022][ T5264] ? security_inode_alloc+0x37/0x100 [ 109.351122][ T5264] security_inode_alloc+0x37/0x100 [ 109.351159][ T5264] inode_init_always_gfp+0x4a0/0x4e0 [ 109.351266][ T5264] alloc_inode+0x58/0x170 [ 109.351306][ T5264] path_from_stashed+0xec/0x330 [ 109.351334][ T5264] ? __pfx_proc_ns_get_link+0x10/0x10 [ 109.351365][ T5264] ns_get_path+0x62/0x80 [ 109.351474][ T5264] proc_ns_get_link+0x80/0x160 [ 109.351508][ T5264] pick_link+0x4b1/0x8e0 [ 109.351538][ T5264] step_into_slowpath+0x36a/0x4c0 [ 109.351642][ T5264] path_openat+0x15d0/0x2050 [ 109.351684][ T5264] do_file_open+0x16c/0x290 [ 109.351752][ T5264] do_sys_openat2+0x94/0x130 [ 109.351783][ T5264] __x64_sys_openat+0xf2/0x120 [ 109.351846][ T5264] x64_sys_call+0x1e39/0x3020 [ 109.351891][ T5264] do_syscall_64+0x12c/0x3b0 [ 109.352001][ T5264] ? arch_exit_to_user_mode_prepare+0x88/0xa0 [ 109.352149][ T5264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.352175][ T5264] RIP: 0033:0x7fb83090d60e [ 109.352216][ T5264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.352237][ T5264] RSP: 002b:00007fb82f39eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 109.352475][ T5264] RAX: ffffffffffffffda RBX: 00007fb82f39f6c0 RCX: 00007fb83090d60e [ 109.352491][ T5264] RDX: 0000000000000000 RSI: 00007fb82f39ef90 RDI: ffffffffffffff9c [ 109.352503][ T5264] RBP: 00007fb82f39f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.352515][ T5264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.352527][ T5264] R13: 00007fb830bc6038 R14: 00007fb830bc5fa0 R15: 00007ffd030620c8 [ 109.352629][ T5264] [ 109.608035][ T5266] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.733298][ T5270] sctp: [Deprecated]: syz.2.524 (pid 5270) Use of int in maxseg socket option. [ 109.733298][ T5270] Use struct sctp_assoc_value instead [ 109.765515][ T5272] FAULT_INJECTION: forcing a failure. [ 109.765515][ T5272] name failslab, interval 1, probability 0, space 0, times 0 [ 109.790906][ T28] audit: type=1400 audit(2000000011.780:2477): avc: denied { listen } for pid=5269 comm="syz.2.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.812115][ T5272] CPU: 0 UID: 0 PID: 5272 Comm: syz.3.525 Tainted: G W syzkaller #0 PREEMPT(full) [ 109.812228][ T5272] Tainted: [W]=WARN [ 109.812235][ T5272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.812294][ T5272] Call Trace: [ 109.812301][ T5272] [ 109.812311][ T5272] __dump_stack+0x1d/0x30 [ 109.812341][ T5272] dump_stack_lvl+0x95/0xd0 [ 109.812368][ T5272] dump_stack+0x15/0x1b [ 109.812386][ T5272] should_fail_ex+0x263/0x280 [ 109.812488][ T5272] ? create_io_worker+0x5c/0x360 [ 109.812511][ T5272] should_failslab+0x8c/0xb0 [ 109.812550][ T5272] __kmalloc_cache_noprof+0x5f/0x400 [ 109.812632][ T5272] create_io_worker+0x5c/0x360 [ 109.812654][ T5272] io_wq_enqueue+0x461/0x540 [ 109.812684][ T5272] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 109.812719][ T5272] io_queue_iowq+0x24e/0x320 [ 109.812749][ T5272] ? io_queue_sqe_fallback+0xdd/0x140 [ 109.812775][ T5272] io_queue_sqe_fallback+0xe5/0x140 [ 109.812851][ T5272] io_submit_sqes+0xd39/0x1170 [ 109.812902][ T5272] __se_sys_io_uring_enter+0x25c/0xfc0 [ 109.812947][ T5272] ? putname+0x7c/0xc0 [ 109.812999][ T5272] __x64_sys_io_uring_enter+0x78/0x90 [ 109.813086][ T5272] x64_sys_call+0x1e16/0x3020 [ 109.813109][ T5272] do_syscall_64+0x12c/0x3b0 [ 109.813142][ T5272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.813225][ T5272] RIP: 0033:0x7f5f395fcdd9 [ 109.813244][ T5272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.813267][ T5272] RSP: 002b:00007f5f38057028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 109.813292][ T5272] RAX: ffffffffffffffda RBX: 00007f5f39875fa0 RCX: 00007f5f395fcdd9 [ 109.813307][ T5272] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 109.813323][ T5272] RBP: 00007f5f38057090 R08: 0000000000000000 R09: 0000000000000000 [ 109.813348][ T5272] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 109.813363][ T5272] R13: 00007f5f39876038 R14: 00007f5f39875fa0 R15: 00007ffebda48858 [ 109.813385][ T5272] [ 109.826112][ T5266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.955430][ T5275] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 109.998985][ T5266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.312989][ T5280] loop1: detected capacity change from 0 to 512 [ 110.320247][ T5280] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.341032][ T5280] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.528: invalid indirect mapped block 4294967295 (level 1) [ 110.355064][ T5280] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 110.361790][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 110.377629][ C0] EXT4-fs (loop1): initial error at time 2000000012: ext4_free_branches:1023: inode 11 [ 110.387693][ C0] EXT4-fs (loop1): last error at time 2000000012: ext4_free_branches:1023: inode 11 [ 110.406439][ T5280] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.528: invalid indirect mapped block 4294967295 (level 1) [ 110.439308][ T5281] loop2: detected capacity change from 0 to 512 [ 110.459072][ T5280] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 110.469234][ T5280] EXT4-fs (loop1): 2 truncates cleaned up [ 110.495222][ T5281] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.533131][ T5281] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.527: invalid indirect mapped block 4294967295 (level 1) [ 110.549096][ T5280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.585051][ T5281] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 110.597867][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 110.613554][ C1] EXT4-fs (loop2): initial error at time 2000000012: ext4_free_branches:1023: inode 11 [ 110.623353][ C1] EXT4-fs (loop2): last error at time 2000000012: ext4_free_branches:1023: inode 11 [ 110.658167][ T5281] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.527: invalid indirect mapped block 4294967295 (level 1) [ 110.693443][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.713043][ T5281] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 110.723821][ T5281] EXT4-fs (loop2): 2 truncates cleaned up [ 110.748177][ T5281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.810020][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.865345][ T5295] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 110.880231][ T5298] 9pnet_fd: Insufficient options for proto=fd [ 110.889181][ T5298] loop1: detected capacity change from 0 to 512 [ 110.895925][ T5298] EXT4-fs: Ignoring removed orlov option [ 110.906810][ T5298] ------------[ cut here ]------------ [ 110.913742][ T5298] EA inode 11 i_nlink=2 [ 110.913760][ T5298] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.1.530/5298 [ 110.928874][ T5298] Modules linked in: [ 110.932838][ T5298] CPU: 1 UID: 0 PID: 5298 Comm: syz.1.530 Tainted: G W syzkaller #0 PREEMPT(full) [ 110.943815][ T5298] Tainted: [W]=WARN [ 110.947698][ T5298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 110.959084][ T5298] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 110.965943][ T5298] Code: 14 5e 98 ff 4c 8d 2d 7d 6a 5c 05 49 8d 7e 40 e8 64 1c b6 ff 49 8b 6e 40 4c 89 e7 e8 98 17 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 9f 9c d7 03 66 66 66 66 66 66 2e [ 110.985623][ T5298] RSP: 0018:ffffc9000d4bf778 EFLAGS: 00010246 [ 110.991923][ T5298] RAX: ffff888105034ef8 RBX: ffff88811bc21e58 RCX: ffffffff81c0caa8 [ 110.999973][ T5298] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3510 [ 111.008534][ T5298] RBP: 000000000000000b R08: 000188811bc21e0b R09: 0000000000000000 [ 111.016927][ T5298] R10: ffffc9000d4bf6a8 R11: 0001c9000d4bf6a8 R12: ffff88811bc21e08 [ 111.026295][ T5298] R13: ffffffff871d3510 R14: ffff88811bc21dc0 R15: 0000000000000001 [ 111.026511][ T5297] loop5: detected capacity change from 0 to 512 [ 111.034541][ T5298] FS: 00007fd67a8766c0(0000) GS:ffff8882ae9fe000(0000) knlGS:0000000000000000 [ 111.050161][ T5298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.056807][ T5298] CR2: 00007fd67be25f40 CR3: 000000011a6b0000 CR4: 00000000003506f0 [ 111.065160][ T5298] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 111.074760][ T5298] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 111.082815][ T5298] Call Trace: [ 111.086164][ T5298] [ 111.089175][ T5298] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 111.095209][ T5298] ? errseq_check+0x2c/0x50 [ 111.099946][ T5298] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 111.105610][ T5298] ? ext4_truncate+0x89f/0xa10 [ 111.110739][ T5298] ext4_evict_inode+0xb16/0xe30 [ 111.115780][ T5298] ? __pfx_ext4_evict_inode+0x10/0x10 [ 111.116746][ T5297] EXT4-fs (loop5): 1 truncate cleaned up [ 111.122604][ T5298] evict+0x2af/0x510 [ 111.133785][ T5298] ? __dquot_initialize+0x146/0x7c0 [ 111.140398][ T5298] iput+0x41a/0x580 [ 111.144330][ T5298] ext4_process_orphan+0x1a9/0x1c0 [ 111.150889][ T5298] ext4_orphan_cleanup+0x69c/0x9f0 [ 111.156152][ T5298] ext4_fill_super+0x3408/0x37c0 [ 111.162425][ T5298] ? set_blocksize+0x14c/0x270 [ 111.167240][ T5298] ? setup_bdev_super+0x30e/0x370 [ 111.172360][ T5298] ? __pfx_ext4_fill_super+0x10/0x10 [ 111.177722][ T5298] get_tree_bdev_flags+0x291/0x300 [ 111.183012][ T5298] ? __pfx_ext4_fill_super+0x10/0x10 [ 111.188364][ T5298] get_tree_bdev+0x1f/0x30 [ 111.190144][ T5297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.192828][ T5298] ext4_get_tree+0x1c/0x30 [ 111.211247][ T5298] vfs_get_tree+0x57/0x1d0 [ 111.215799][ T5298] do_new_mount+0x288/0x8d0 [ 111.220549][ T5298] path_mount+0x4d0/0xbc0 [ 111.225200][ T5298] __se_sys_mount+0x28c/0x2e0 [ 111.230031][ T5298] __x64_sys_mount+0x67/0x80 [ 111.234720][ T5298] x64_sys_call+0x2d61/0x3020 [ 111.239705][ T5298] do_syscall_64+0x12c/0x3b0 [ 111.244385][ T5298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.250533][ T5298] RIP: 0033:0x7fd67be3e04a [ 111.254997][ T5298] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.276234][ T5298] RSP: 002b:00007fd67a875e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 111.284749][ T5298] RAX: ffffffffffffffda RBX: 00007fd67a875ee0 RCX: 00007fd67be3e04a [ 111.292788][ T5298] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fd67a875ea0 [ 111.300882][ T5298] RBP: 00002000000009c0 R08: 00007fd67a875ee0 R09: 0000000000800718 [ 111.308926][ T5298] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 111.317113][ T5298] R13: 00007fd67a875ea0 R14: 000000000000048d R15: 0000200000000200 [ 111.326488][ T5298] [ 111.329739][ T5298] ---[ end trace 0000000000000000 ]--- [ 111.335431][ T5298] EXT4-fs (loop1): 1 orphan inode deleted [ 111.341831][ T5298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.358577][ T5298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.402683][ T4346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.491958][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 111.795360][ T28] audit: type=1400 audit(2000000013.780:2478): avc: denied { create } for pid=5306 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 111.873323][ T5310] loop2: detected capacity change from 0 to 512 [ 111.946690][ T5310] EXT4-fs: dax option not supported [ 112.105309][ T28] audit: type=1326 audit(2000000014.090:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.5.536" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c1dcdd9 code=0x7ffc0000 [ 112.136402][ T28] audit: type=1326 audit(2000000014.090:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.5.536" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c1dcdd9 code=0x7ffc0000 [ 112.176915][ T5314] loop2: detected capacity change from 0 to 128 [ 112.209430][ T5314] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.226485][ T28] audit: type=1326 audit(2000000014.090:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.5.536" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c1dcdd9 code=0x7ffc0000 [ 112.253457][ T28] audit: type=1326 audit(2000000014.090:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.5.536" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd29c1dcdd9 code=0x7ffc0000 [ 112.280393][ T28] audit: type=1326 audit(2000000014.090:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.5.536" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c1dcdd9 code=0x7ffc0000 [ 112.304165][ T5314] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.309227][ T28] audit: type=1326 audit(2000000014.090:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.5.536" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c1dcdd9 code=0x7ffc0000 [ 112.343682][ T28] audit: type=1326 audit(2000000014.090:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.5.536" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c1dcdd9 code=0x7ffc0000 [ 112.391324][ T28] audit: type=1326 audit(2000000014.120:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.5.536" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fd29c1dcdd9 code=0x7ffc0000 [ 112.424612][ T5319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.540'. [ 112.435062][ T28] audit: type=1326 audit(2000000014.120:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.5.536" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c1dcdd9 code=0x7ffc0000 [ 112.463094][ T5319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.540'. [ 112.490696][ T5321] netlink: 12 bytes leftover after parsing attributes in process `syz.5.541'. [ 112.505329][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.757470][ T5329] loop5: detected capacity change from 0 to 2048 [ 112.839280][ T5329] loop5: p3 p4 < > [ 112.844979][ T5332] vti0: entered allmulticast mode [ 112.850229][ T5329] loop5: p3 start 11362048 is beyond EOD, truncated [ 112.891507][ T5332] random: crng reseeded on system resumption [ 113.169676][ T5342] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.446331][ T5349] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.613724][ T5357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 113.673729][ T5358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 113.881322][ T5364] loop0: detected capacity change from 0 to 1024 [ 113.917365][ T5364] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 113.947112][ T5364] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.555: lblock 2 mapped to illegal pblock 2 (length 1) [ 113.963194][ T5364] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 113.963722][ T5364] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.555: lblock 0 mapped to illegal pblock 48 (length 1) [ 113.973175][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 113.973210][ C0] EXT4-fs (loop0): initial error at time 2000000015: ext4_map_blocks:791: inode 3: block 2 [ 113.973257][ C0] EXT4-fs (loop0): last error at time 2000000015: ext4_map_blocks:791: inode 3: block 2 [ 114.019621][ T5364] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 114.021342][ T5364] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.555: Failed to acquire dquot type 0 [ 114.046100][ T5364] loop0: lost filesystem error report for type 5 error -117 [ 114.046348][ T5364] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 114.065915][ T5364] loop0: lost filesystem error report for type 5 error -117 [ 114.070459][ T5364] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.555: mark_inode_dirty error [ 114.091672][ T5364] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 114.092258][ T5364] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 114.097666][ T5369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.556'. [ 114.105582][ T5364] EXT4-fs (loop0): 1 orphan inode deleted [ 114.130993][ T270] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 114.146585][ T270] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 114.147040][ T270] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 0 [ 114.172484][ T5364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.186479][ T270] loop0: lost filesystem error report for type 5 error -117 [ 114.194211][ T5364] EXT4-fs: Ignoring removed bh option [ 114.239022][ T5364] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 114.255483][ T5364] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 114.275655][ T5364] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.555: lblock 0 mapped to illegal pblock 48 (length 1) [ 114.275935][ T5373] netlink: 'syz.2.558': attribute type 21 has an invalid length. [ 114.299721][ T5371] Invalid ELF header magic: != ELF [ 114.315652][ T5373] IPv6: NLM_F_CREATE should be specified when creating new route [ 114.330794][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.355374][ T5373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.362683][ T5373] IPv6: NLM_F_CREATE should be set when creating new route [ 114.370011][ T5373] IPv6: NLM_F_CREATE should be set when creating new route [ 114.377331][ T5373] IPv6: NLM_F_CREATE should be set when creating new route [ 114.402274][ T5377] sctp: [Deprecated]: syz.5.560 (pid 5377) Use of int in maxseg socket option. [ 114.402274][ T5377] Use struct sctp_assoc_value instead [ 114.434014][ T5378] sctp: [Deprecated]: syz.5.560 (pid 5378) Use of int in maxseg socket option. [ 114.434014][ T5378] Use struct sctp_assoc_value instead [ 115.034774][ T5392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=5392 comm=syz.0.564 [ 115.075872][ T5385] loop1: detected capacity change from 0 to 1024 [ 115.181503][ T5385] EXT4-fs: Ignoring removed orlov option [ 115.251512][ T5385] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 115.309585][ T5385] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 115.347264][ T5385] EXT4-fs (loop1): orphan cleanup on readonly fs [ 115.374556][ T5402] loop5: detected capacity change from 0 to 512 [ 115.387569][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 115.411169][ T5385] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz.1.562: Invalid inode table block 0 in block_group 0 [ 115.431253][ T5385] loop1: lost filesystem error report for type 5 error -117 [ 115.431625][ T5402] EXT4-fs: test_dummy_encryption option not supported [ 115.435195][ T5385] EXT4-fs (loop1): Remounting filesystem read-only [ 115.452660][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 115.452696][ C1] EXT4-fs (loop1): initial error at time 2000000017: __ext4_get_inode_loc:4885 [ 115.452738][ C1] EXT4-fs (loop1): last error at time 2000000017: __ext4_get_inode_loc:4885 [ 115.489194][ T5401] sctp: [Deprecated]: syz.0.566 (pid 5401) Use of int in max_burst socket option. [ 115.489194][ T5401] Use struct sctp_assoc_value instead [ 115.506299][ T5406] loop2: detected capacity change from 0 to 256 [ 115.522499][ T5385] EXT4-fs (loop1): 1 truncate cleaned up [ 115.552598][ T5406] FAT-fs (loop2): IO charset cp864 not found [ 115.564299][ T5385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.592791][ T5406] tipc: Cannot configure node identity twice [ 115.637899][ T5411] 9p: Bad value for 'wfdno' [ 115.685314][ T5417] loop0: detected capacity change from 0 to 256 [ 115.695106][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.001545][ T5427] loop1: detected capacity change from 0 to 1024 [ 116.082732][ T5427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.183527][ T5427] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.198340][ T5427] openvswitch: netlink: Key type 3846 is out of range max 32 [ 116.215943][ T5427] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.574: bg 0: block 112: padding at end of block bitmap is not set [ 116.234923][ T5417] FAT-fs (loop0): IO charset cp864 not found [ 116.249599][ T5427] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 116.262778][ T5427] EXT4-fs (loop1): This should not happen!! Data will be lost [ 116.262778][ T5427] [ 116.273642][ T5427] EXT4-fs (loop1): Total free blocks count 0 [ 116.280448][ T5427] EXT4-fs (loop1): Free/Dirty block details [ 116.287446][ T5427] EXT4-fs (loop1): free_blocks=0 [ 116.356419][ T5427] EXT4-fs (loop1): dirty_blocks=64 [ 116.395354][ T5427] EXT4-fs (loop1): Block reservation details [ 116.427220][ T5427] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 116.735749][ T5417] tipc: Cannot configure node identity twice [ 118.103096][ T3305] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 118.249742][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 118.527256][ T5450] loop2: detected capacity change from 0 to 4096 [ 118.539275][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 118.539303][ T28] audit: type=1400 audit(2000000020.510:2514): avc: denied { block_suspend } for pid=5448 comm="syz.1.578" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.699941][ T5450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.959820][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.047412][ T5461] loop2: detected capacity change from 0 to 256 [ 119.109788][ T5463] loop5: detected capacity change from 0 to 2048 [ 119.127283][ T5467] loop1: detected capacity change from 0 to 512 [ 119.142828][ T5465] sg_write: data in/out 406493/306 bytes for SCSI command 0x0-- guessing data in; [ 119.142828][ T5465] program syz.3.585 not setting count and/or reply_len properly [ 119.162509][ T5467] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 119.164301][ T5461] FAT-fs (loop2): IO charset cp864 not found [ 119.179107][ T5467] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 119.191823][ T424] Bluetooth: hci0: Frame reassembly failed (-84) [ 119.210904][ T5463] loop5: p2 p3 p7 [ 119.245518][ T5461] tipc: Cannot configure node identity twice [ 119.299526][ T28] audit: type=1326 audit(2000000021.290:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.1.587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67be3cdd9 code=0x7ffc0000 [ 119.333325][ T28] audit: type=1326 audit(2000000021.320:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.1.587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67be3cdd9 code=0x7ffc0000 [ 119.379010][ T5475] program syz.5.589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.394176][ T5478] loop0: detected capacity change from 0 to 512 [ 119.410178][ T28] audit: type=1326 audit(2000000021.320:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.1.587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67be3cdd9 code=0x7ffc0000 [ 119.439500][ T28] audit: type=1326 audit(2000000021.320:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.1.587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67be3cdd9 code=0x7ffc0000 [ 119.479210][ T5478] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.590: invalid indirect mapped block 256 (level 2) [ 119.502608][ T28] audit: type=1326 audit(2000000021.320:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.1.587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd67be3cdd9 code=0x7ffc0000 [ 119.506445][ T5478] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 119.529835][ T28] audit: type=1326 audit(2000000021.370:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.1.587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67be3cdd9 code=0x7ffc0000 [ 119.539074][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 119.539100][ C0] EXT4-fs (loop0): initial error at time 2000000021: ext4_free_branches:1023: inode 11 [ 119.539125][ C0] EXT4-fs (loop0): last error at time 2000000021: ext4_free_branches:1023: inode 11 [ 119.540194][ T5485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.591'. [ 119.581351][ T5478] EXT4-fs (loop0): 2 truncates cleaned up [ 119.588096][ T28] audit: type=1326 audit(2000000021.370:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.1.587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd67be3cb42 code=0x7ffc0000 [ 119.601269][ T5478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.606726][ T28] audit: type=1326 audit(2000000021.370:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.1.587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd67be3cbd7 code=0x7ffc0000 [ 119.676666][ T5485] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5485 comm=syz.1.591 [ 119.685382][ T28] audit: type=1326 audit(2000000021.370:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.1.587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd67bdf9ad1 code=0x7ffc0000 [ 119.729520][ T5485] xt_bpf: check failed: parse error [ 119.763276][ T5489] netlink: 2 bytes leftover after parsing attributes in process `syz.5.592'. [ 119.779245][ T5491] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.797415][ T5491] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.845914][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.982392][ T5498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5498 comm=syz.1.595 [ 120.022211][ T5499] ================================================================== [ 120.030391][ T5499] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 120.038636][ T5499] [ 120.040996][ T5499] write to 0xffff88810dd723a0 of 8 bytes by task 5498 on cpu 0: [ 120.048664][ T5499] filemap_splice_read+0x523/0x780 [ 120.053914][ T5499] splice_direct_to_actor+0x26e/0x670 [ 120.059430][ T5499] do_splice_direct+0x119/0x1a0 [ 120.064341][ T5499] do_sendfile+0x382/0x650 [ 120.068900][ T5499] __x64_sys_sendfile64+0x105/0x150 [ 120.074243][ T5499] x64_sys_call+0x2dc4/0x3020 [ 120.079048][ T5499] do_syscall_64+0x12c/0x3b0 [ 120.083706][ T5499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.089648][ T5499] [ 120.092005][ T5499] write to 0xffff88810dd723a0 of 8 bytes by task 5499 on cpu 1: [ 120.099766][ T5499] filemap_splice_read+0x523/0x780 [ 120.104931][ T5499] splice_direct_to_actor+0x26e/0x670 [ 120.110365][ T5499] do_splice_direct+0x119/0x1a0 [ 120.115298][ T5499] do_sendfile+0x382/0x650 [ 120.119778][ T5499] __x64_sys_sendfile64+0x105/0x150 [ 120.125036][ T5499] x64_sys_call+0x2dc4/0x3020 [ 120.129773][ T5499] do_syscall_64+0x12c/0x3b0 [ 120.134506][ T5499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.140439][ T5499] [ 120.142787][ T5499] value changed: 0x0000000000116000 -> 0x00000000001c8000 [ 120.149925][ T5499] [ 120.152281][ T5499] Reported by Kernel Concurrency Sanitizer on: [ 120.158464][ T5499] CPU: 1 UID: 0 PID: 5499 Comm: syz.1.595 Tainted: G W syzkaller #0 PREEMPT(full) [ 120.169278][ T5499] Tainted: [W]=WARN [ 120.173201][ T5499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.183298][ T5499] ================================================================== [ 120.330182][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.209071][ T4038] Bluetooth: hci0: command 0x1003 tx timeout [ 121.209104][ T3622] Bluetooth: hci0: Opcode 0x1003 failed: -110