last executing test programs: 5m43.119329283s ago: executing program 32 (id=93): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='(\"@]K@{.\"\x00') bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/route\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) lseek(r4, 0x2000, 0x0) times(0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x80, 0x3cc40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36c, &(0x7f00000023c0)="$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") syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x0, 0x1, 0x0, &(0x7f0000000240)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000007c0)='./file0\x00') 4m58.65428111s ago: executing program 33 (id=643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000020601080000000000000000000000000d0003006c6973743a73657400000000050001000700000005000500020000000900020073797a30000008000500040000000000"], 0x48}, 0x1, 0x0, 0x0, 0x2002c8c8}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d8000000180081064e81f78244b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a6a298c971ea561de60c75ee4ce1b223605ad1a66ff83a814d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad80949e1cace81ed0bffe4e0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x20004800) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @rand_addr=0x64010102}, 0x10, 0x0}, 0x3000c085) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x2800) write$vga_arbiter(r3, &(0x7f0000000200), 0xf) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003c00)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(0xffffffffffffffff, 0x323c, 0xca2f, 0x0, &(0x7f00000002c0)={[0xa38]}, 0x8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x70, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2b, 0x1, "d90b00005ed279021ca0e1b2c119b61f49854ca65ec664d92140c870daf040a124678a842bc766"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x56, "d1a4440b99f62565d78e808fac9d096bc0e851df41faeaab9eb4a365831c85e5c57b17c5fc16e67314b3725f85eaea3d1087e9ee1bc15f0abb09e8b4e2ba4c5e833fe88f905852631629e9e1996d84eca86deb0cebdb"}, &(0x7f0000000100)=0x5e) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000140)={r9, 0x7}, 0x8) 4m58.148089274s ago: executing program 34 (id=653): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x2000000000000021, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m37.54855209s ago: executing program 35 (id=1423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007"], 0x13a}, 0x1, 0x5a00, 0x0, 0x2000c880}, 0x0) 3m13.695260239s ago: executing program 36 (id=1691): r0 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e23, 0x4, 0xa, 0x20, 0x80, 0x32, 0x0, r0}, {0x8, 0x5, 0xcec, 0x2, 0x9, 0xfffffffffffffffc, 0x7, 0x5}, {0x7, 0x6, 0x80, 0x4}, 0x2, 0x6e6bb2, 0x2, 0x0, 0x2}, {{@in=@remote, 0x4d6, 0x6c}, 0xa, @in6=@mcast1, 0x3507, 0x2, 0x51bd6af47a2804ae, 0x4, 0x8, 0x5, 0x400}}, 0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0/file0\x00', 0x2200018, &(0x7f0000000200)={[{@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@norecovery}, {@noauto_da_alloc}, {@nobh}, {@jqfmt_vfsv1}, {@resuid={'resuid', 0x3d, r0}}, {@mblk_io_submit}, {@norecovery}]}, 0x3, 0x5a8, &(0x7f0000000a40)="$eJzs3U1rG0cfAPD/ynLenycOhND2UAw5NCWNHNt9SaGQ9Fja0EB7T4WtmGA5CpYcYjeQ5NBceimhUEoDpR+g9x5Dv0C/Qi+BNhBKMO0hF5WVV7EiW7Yli9i1fj9YeWZ35dn/7sxoVrtiAxhYo+lLLuLViPgmiTjasiwf2cLRlfWWn96aSqck6vXP/koiyeY110+yv4ezzCsR8etXEadza8utLi7NFsvl0nyWH6vNXR+rLi6duTpXnCnNlK5NTE6ee2dy4v333u1brG9e+uf7Tx9+dO7rk8vf/fz42P0kLsSRbFkzjoPbK+JOa2Y0RrN9MhwX2lYc3145u06y0xtAT4aydj4caR9wNIayVg/sfbcjog4MqET7hwHVHAc0z+1bz+cHwZMPV06A1safX/luJA7sT18PLScvnBml57sjfSg/LeOXPx/cT6do+z6l3e0Xs0N9KB4YYHfuRsTZfH5t/5dk/V/vzja+PN5YexmD9vkDO+lhOv55a73xT645/mm8to9/Dq/TdnuxefvPPW5bJenntYZ0/PfBuuPf513XyFCW+19jzDecXLlaLp2NiP9HxKkY3p/mN7qec275Ub3TstbxXzql5TfHgtl2PM7vf/E908VacTsxt3pyN+K11fFvEmv6/wONsW778U/3x6UtlnGi9OD1Tss2j7/V7a0HtkX1nyLeWPf4r9ayZOPrk2ON+jDWrBVr/X3vxG+dyu8u/v57cnelom8Q/0jSer222n0ZPx54Vuq0rNf6vy/5vJHetzLrWb1Yq82PR+xLPmmdHzfT+ROr723mb2brp/X/1MmN+7/16v/BiPhii/HfO36v46rdHv9tXp9eI41/uqvj333i0cdf/tB7/Onxf7uROpXN2Ur/t9UN3M6+AwAAAAAAgN0mFxFHIskVnqdzuUJh5f6O43EoV65Ua6evVBauTUfjt7IjMZxrXuk+2nI/xHh2P2wzP9GWn4yIYxHx7dDBRr4wVSlP73TwAAAAAAAAAAAAAAAAAAAAsEsc7vD7/9QfnjAFe59HfsPg2rT99+NJT8Cu1KH99/9pW8CuY/wPg0v7h8HVaP8dH9EJ7GU+/2Fw9dD+3RoAe4TPfxhc+biz05sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe8mlixfTqb789NZUmp++sbgwW7lxZrpUnS3MLUwVpirz1wszlcpMuVSYqsxt9v/Klcr18YlYuDlWK1VrY9XFpctzlYVrtctX54ozpcul4ZcSFQAAAAAAAAAAAAAAAAAAAPy3VBeXZovlcmm+q8Tv0cu7VhO5bZX+shPnY1dsRs+JZLP9fD47HD0Vkd/5ACW6Swxlx3vDlXeoQwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdfwbAAD//39JMAE=") setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000000280)=ANY=[], 0x382, 0x1) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') 2m49.489466456s ago: executing program 37 (id=1983): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @multicast2}, &(0x7f0000000100)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe4, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe4}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000300)={0x9}) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r3) ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000000380)) ioctl(r3, 0x5a7b, &(0x7f00000003c0)="05f58e99bbb993df8e992d11cebc70672b9031e8857898838a72438d14cbad849c58897f8a936937363850a4deafc68471752f25db47db3644e8106200573ade575131721af62a6766f0d8ac845a95a32ace654a6e5cdccafb5a04f871b7af615930e45e4bf8e4d34cf563f2363c8c1f57986a3bd3a74ba4ad857d9a3063c6d82fe38c9af17060879363038115e38e47394b57b435c3") (async) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000480), &(0x7f00000004c0)=0x4) (async) syz_open_dev$usbfs(&(0x7f0000000500), 0x0, 0x202000) (async) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000001740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001700)={&(0x7f0000000580)={0x1180, 0x13, 0x300, 0x70bd27, 0x25dfdbfd, {0x2, 0x8, 0x12, 0xa5, {0x4e21, 0x4e23, [0x75, 0x6, 0x4, 0x3], [0xe, 0x7, 0xfffffff8, 0xb], 0x0, [0x3, 0x8b20]}, 0x7, 0x16}, [@INET_DIAG_REQ_BYTECODE={0x10, 0x1, "502d6d21f5e8a8a4d4363cd4"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "55e733631d6c31271cfced3dc9a4a2d22feb6bbedc775fc5d7449dbf316c89143e9ffae2e8c89cbe302a384b55f210c097ae05c92add986e43f012231593cb2410242970fa60c039dfcc"}, @INET_DIAG_REQ_BYTECODE={0x84, 0x1, "419c64b8b8c1f644b60530dc02f8d4d66a8a28cc33d98687ae5534b099125d172f0b54146d4f3781894dd53e02bac8cd37360789f9569b7a92eadbda51194023e19dfbe118f2ce5d3fadcfb4e36aea7597de04f20d878db5a69115557bad3e17a2643da6c3ed6feb49a8a4019302a43d80be4026592b74fb106331ad516bbbfb"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "3884c1244f55077b8e0822a7abcb861c6e0a80617b0855da747ba6d5eabdced6912f7b6d2e31"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "351e914ba56fcc41c903430b572d2ae3806174eb29a18f478c1e264f1d3a55ba5dae4bf0420d4a749d273fbc00f24c75d74b86c6776342a19f6871313aebf6dc97152c2b35d34d9b4144963089f68c7614011c7fba55dd099b85d7c53d774b3cf769b02a78a5a50f35143b4df1b9aab77f8cbf691613a606ed9eec6cbaa9bbdd90d2ae9eb2fe5ab93162d9f32a2855ca990a0a0f392ac1cb35338f86dd8cb0772ba8074f410e9d74d098b242cdc1280220e4f253ca2bb87d50aff82c7b992b5d430ba27375c00e11551912d999af5005a5d5fd1296e3a220185d7805b09bc0c52f1e71591d4794f1dd263f6d8ec9f653727c8fa03ece57af434a646435fab953f28a6aeba4eaf4461de8f39b49b5581732a5c6095b54e97ab22c7dab6bbef05cfb1916eb7efef0a4979b9fe009f58cef38fce36303204514c13599045c443f9d0162cad64ebbfb35b26574c25ea70cecc53fba006172a7c14592e1307adeddbfda316e4da7d752ca46642a7a976c62b6fbd3e010ef50ea43cf6780c4622f58a59968545b27463ddf524391fd2d5258c1a6bbb0470cf6ee6ddc47f5a5183a4d7e3a936acb4919f6e2598c132a071f291530e369fd94f713cd50d3918619374b50cf54be78db7980ec2ee9c25543aaa48071b05ad9f5fe0ee45057d3daa6d1e5578e9f2b988c28cd7efa6977b8299238bca7481140b65df564a6c19029e325a8fb467f041d55e5606d05bff7a27bd85ef7fab677d9d6ed929847b1eb98d9ca73983d8cd13b046bb81a27039739a6d58ba102eb3f4f7040233ff99e162de92b9d38bbbf19516d8382c01c170f0d7f021a295ad0385b05ca292a6729a24fe798b5420a578b606f2db370c5889e395ea5c25e204f1c97ef361edee96cb448b4ed26c06447c4231d3ac5876a0f2381b6aea52ff01f2fcbbe6ae8dd47c374cbe8242fefd7d3e6e61a59912fb172777f9ba4b1617f5713252126229167305150a1535c207ee00ee2a23a0749e28b208240c3eecbdd8ebdd48b817f6e8b1b567dffff873552204e0dd74fb73f47294bfe03fb9b7e6199ae65c34ef302b189f05544da0a6464ae98524e54d1c5fc58035deb0b28c8df38d3ce480e62b01dfdeb723ca635a1029c29ed99e5ffe8b2598a854729cf186e3b9e671ea78bd0789f0848d4679ababf74455d9604310066380ca5f7df7e0fb54a5f5820c532c60b807b450739560cb4c5bbdc45f91047125bc4eb043fb0e8e8d160e7b458a8659c433309f74e01be77373a9b96dfdab57a894dbd3d41dc5fbc47aac744634e86bc041380c5f64ba792bbf67d87baa09b42bc85d372f510f42f91d34858c11bd6c293a3f25d79638c93eda5bafc73f168f692abe8bd030957f45ff0fd328d7dd6b0634f83b29869883331eae51bc961d1b21c1884cf57c12ef103685b03c5bc94863cce63395079d612cc65f87eb9304c8fc5b3f8746def3a48ceab2c4a622122988ddf1c95365cf71c9eb1ae47c8fa919adf532f1de126a7525d761eeba7ca4f40863431562d805eb799d42b8feb268639f05732da0d234202d1b4fcba8c68d8c1f662efcb9fdbc48eb967b43d803237850223f61e663050c32c9f92cad89258f8fdf49eb578d8ed74b90c65536d73cf69347cdade83ef04a9b787abdbb91fd45491b636e9db79981ed599174bc6246a9dcc119382e020a677cb16fc48b0e408c4e50b6d6c28371b4bbbf143760b32e15f60cc019720d784dbb08594f01b52dbd5aada60d5e4c46e9eb9830e38f814e8e6d4e4063157c85aa863fda95004a7a89526e800a8fe479801d7e983b594f56e06fdbb6a07ebb2f92d25f1861ea04b987de016554bd18e6e1a56b04e6651ab04adb9101fe084023a86da733d30c73786acf15d522ea51779c8a16a4d6ea3e711788b84382cf1abe2f866ff977983eed8102a459c0ce47188f09a2302508b516531c5544dfbf368bbfd6287afc2a0314f3571755f9d540833edec193977c9c144b183833cc78590462913212a0ddf3dec6f727c5142793daf78ee141eaf0dba850d6036ad1667ea2ee27e2db9dc7e8d2fea181219ccd9ecd46c33a85cf658f7f76389d010ac1c1120ecaca2a69c1e71ce249369c44f99de4fbc164b1b74cbd0cd64236818a1b24380b54881c871867ed1ecfa54aafc7dff5b159ee08563f0a0e9651bfa5bf6b9f3762ad5204145d16bb801aaef19e36a7746e7d3e0eefa1009422a28c9d358542882ce0b54e3dce3285c67fd3cc3b8490d366b71c08e069199e9a3c4752caaf0d3087d30fc6e132b376e4e47eebd88a6c7bdae5d5e7e51aad07d9dc422ba0afc1eba569cc76d6572aeeaf310e1ea8458eb8559ae10cf78bd31cb2f88a09340c4fb5a91630b05e1411901cae6b4d96948e448e0fd3eb116336577dcc7a4565e65bb40812debceaa18e57c7c6f4f024df22c79e849336b3a0fb512310d0f3080fd29af010bc5723588b0f0f558278688840a85daf912f5130feedb03a16d48473f9d880743c127d5949f245e1b5a51f31b4a62564f60cc8f95f11c9efe8dd78a1c2376262c9b293548f865cf718866832ed53e311c18964d77b2cb18cdab873abaef53f66c67d1094debdfed05899fb71cc2c73b521a8cdbf0cc0e314b046e1b81a4b599691a1093ad3a2e108bc51e2bf188d5e066b3b10209993e6b0ab1f5a83ba0f5e3a0e37d1f9c434e5eb3196d8b986a391006eb2dbf10765ba40430c26f86927260cceb4197af44ddbd8cdacf38583ec4fbfcb07aa9c853918c4e1ee1ca142adcaedf94b834040b75a12263b03bd0eeacdba52f3b5afc7d1641d0bd4af5b5ad29db70f9f60b6b5eeb83a76dad858931179c1b443c3cf6cc62737894ef0c19cb3398fb241fd451fb5d4d7ff3afc285ef16771b6171349019ad8595c971b9de4a2de184083d4a1cc4dc35b0185ab076f18fa9ce8991812d3f5cee9f813482954ec2ebd4c3b4b5bf46d75e8292fb20190aab6a4288dc9cda1a5003551d2a52fb9d780fbc1a8b135ac2b80886f500eb1adcb9547aee7e0133979f490ae6bbd81f67b3aa00a8f9836ec19ae85b249560208187c8c38ede8d29de6d76278672c1b41a394564eac711e76ddd59e1c7e80c7cbcfee3205bf1d33099e7a232b985bf0b60bbf4f86ac4a5e036a1d97b0ca78892d2d9390d5ee6620582a939c4dc6dac598b4548a21394ae08e7712723ba41a3e13a07d7ec3f72b33d378e73243aae7180e3c37aa820257e55f797492751fd37f061ab31d7ac3b533ac9d824f2d651157dc5704362ea0b891a0c961dd4971663e557327714f0434c002ff6ea45e19958da26f29a6e41be19321e35b416260ab98c1a28bbfdc9d6c4a39a4979cbcad93bbda111ee2c695e703cff796b5da610459c5ef4c77088a921047660b7965d7f1d0e9103e6efa324c7f9986610d1706ae9ad5e99d0c297f5703539d96894e25e50507378f43095972b7908cb72ffc73e8e847b568b5ff1c5b8ddf59e295d4fe369b0315667fe31ef9f0d5faa736751e57648e04021a8aa6dcd3e1fa2ab8b70b4e22888b6791d8a7d82a553e15c5231680617939b4b34d0d2a524648b7557e52ac735539bd4c32ed722f81bf41b4ef37306b044dfbf2b22c9edd1e784e567091c1261cc108ac58fe13f5faf6bfa88a211220429a115739e450707314d66da1f8dcc110f33a2700afcaeabebb29e57f266228af1c30ddfab7eb5e69491ad4906332384c0b324e01c9e28c000e8c96c7b8c5e2ad3192d509d9dee8aea840e34ce5fef90ca3f78d0add2c6e6e1ac10cff10ef60e9e3bd16f802552075687069206f3ff386f496d93774cb4b70d985bfa8f03775afcddba7c0c317145c90c21902a193a2cfc8b12a6eb051f7a96fe241e5e3afe466a85d1557d322237ada9b459222904defc8b41c9a12ddc8ed907fed020d1d464b0517a08fb18a66113c909e3c4f31d2151d80036fbe1b91202be6d3d40f1a6843436bb30b40107bbdfbd27d5d3b37e666b39d829efc7aa2473c1fff20f91afe43b061de8abf2e6c208e92fd7f54f6bad49724428084c4eee785870211bc26e0718e71fe2e2be39e63a5ed7d90664e7054d6c6b2e042ad4ad7dddb9fe473d23842ff18ad01b70d8f29825da9fbe910a249b177b185b27b8fb200758a64b314546c241546913fad3f5ddcbf1f2694ae91d0139aa132e9a57703c0b9e2d9cc07f1a602b46366a3cef4f00866426d3cac0196beb0924db7c6e70be3569c7a170b69920c4fc9b500d0996da4d95829e7b498f4950747479442cbb9ebd7b25c40cd66377cc4ed8bf12631667419ce12e702248dca4810fa02791af2d86c9d02253779977dc38f2fbb4bfafb12b1cbc20aaa1d7db9b35ed1f540e6765522578ba4afb5fa78de28297bc06c9c61f4c70a7f1ba379bb523a8662e9739a3653c6140fc66ff4995a614fbad71b37aeeb0564be3f8c1a2edaa4db904b655da55accb4c0c142ce50c978df8f2fbbc316345c21b599ff094bab71ab15bcf885d93ad7cb1e19534c5b18a1a5e632fe94986e178341742557964b25e65c2a5bea87c23e4588bd4dae00e185592e480ec01e954a460bf443fce840b63d592fcf037caf3dfb332f59432983ba7c2ca0758f5cd6a3827900080d99994a96e16f3eb42eb1d8690948ae8ca1bc0f599cb4c8343a4508118c44446ace45fc62474c970aec33b2be4a6ca1e2597218e41116c5bbb4e16f4e95c807324898223f71b2e55aed54a7af71ef00c5dacf0b220428bbb101aac47a1bf28f7ebe85784b0734adfd1c5ef6d427c566a8915bd1fc00d90ab03ac4900545d1db8d74acba2f6b4c07371e72bf047f2682cf85d1d5f4fc0c09512012a807ecb737f66be368655a3176f7d31565453ca3edaf6b2a3630c981dd7718d6aa3cc1d8fdea609da9266ac52a841b9a8fd3aa21f5b3d9946941d9ea8e01c7f552948409121474c3d1d7f6691fecabae89be283447430595526d3ad8595161169b170bd5790acaeb197ce7ac527604d74b66a6dd7c2c12d02a7a4410bd1b634dd86d079b28b21742fef8ff13b888ee2d2ec4298dfa571f31bc90214c3caf712ea0ff5a5c036092fbbfc0baf822b912516b765a0f5a1382024d23001b109a34357e8f640ae3a5cd2216af74dfe29798b3f715478229fc339c016961389b2206da61edd64c4330f0b245d4652bcbd31cd7d6b54cbf69494103cc657b564719e8ea44c9ae9ca44c72e4b3cb35d2825e83779e5ca792a1a0d4840cd435b6dde8ec9a1fd460d01d98f1a5a0a91a4d1c13dadeeab9f331cd8734d1ed540d75fcc96f20ff4e13264c148e7e70099d3f38235c94aa2355d6c762ededa35107b22c3620f7d03f58174d82ee8730781a236e228c38e1b9206f21c4236c80ffafd630ead41c5a9ceadc25127738c686a49ffb34dd9183611a454939a3acac1d310dd3d71e28732ac86d8ad2a7c56f05cfe05fb94eaf29d42eb39f3cf44d67dc6120877f9fc5e3e476520ce3bccca92e924ecf4f5c0c9e87d802879551dc7ba3643d042cec90d583599bece8423ffe58a608438765c998ac5a882eaca3099656fb3ae780c47c167c8d43f1b1e173333e1850a1247e8089b6b8bf527f0b8e06b7f3f193840957f1ba4f271160264ccf1418e3a3ea37e37e3799c788aee4d391b17214fd46e86ae4208bdebf4223ef0148a004bd1b4c2e257e64a5f5d1f654736c1596906845f49c96da8ddd23564652fd827eaa0f5b864d0cd335c6a8bd24b7f9f9f7aa77093675b3821e498261cc92fbb4ca6a5c8563f004ced08ffea6e"}, @INET_DIAG_REQ_BYTECODE={0x20, 0x1, "33a3036176a2c69bdfd7574928640ea7f85a7e69b6f0fb090680a22a"}]}, 0x1180}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) (async) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000017c0)=@add_del={0x2, &(0x7f0000001780)='veth1_macvtap\x00'}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r3) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x84, r4, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x49}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x47, 0x3}, {0x3, 0x4}, {0x87, 0x5}, {0x7f, 0x3}, {0x7, 0x6}, {0x4d, 0x5}, {0x53, 0x5}, {0x5, 0x3}, {0xdc, 0x4}, {0x4, 0xb1}, {0x4, 0x7}, {0x7, 0x5}, {0x7f, 0x2}, {0xe0, 0x1}, {0x4, 0x3}, {0x8, 0x6}], "b846df6789af3d41"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x5, 0x5}, {0x1f, 0x6}, {0x3, 0x4}, {0x6, 0x7}, {0x2, 0x3}, {0x7, 0x4}, {0xfe, 0x1}, {0x9}, {0x23, 0x3}], "d6213aad21c0e7be"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x9, 0x2}, {0x14}, {0x71, 0x1}, {0x40, 0x1}, {0x7, 0x5}, {0x6, 0x3}], "452aa6479554fc3c"}}]}, 0x84}, 0x1, 0x0, 0x0, 0x400c816}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000019c0)={0x1, 0x0, 'client1\x00', 0x1, "be01a15947f64f1a", "fb80f2872f47eec40c65b40a89efb874aac87fc3af57b5b9e97d8a4f80a07c18", 0x3, 0xf27a}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000001a80)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), r3) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f0000001c80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b40)={0xd0, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x90}, 0x4004814) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000001fc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001d40)={0x23c, r4, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x128, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @tim={0x5, 0xbf, {0xfb, 0x35, 0x3, "434d32ce0ef6422dd877c6f7748d94b2952086fd728a13c9bc4c0de9e0fd628592850e82ecf66b350fb5198601a5b87799070e7b644b3a3b1ffe30ed4b3ff96bd4b72c00be3bb03f22f62f0d0e7a54ae6dd83bcc1891dff23dd634d611fff0673ba47b47f8f4550a84136ab7765223e98785365dfd94a99f0004a2df9afd176452ab4670d577a68a0f05621fd9484a70f8013b9a36577e25a142e92b80588ddb8e52200ca57f587d171c47c2dcb8e92fc4bf4341880f6d4dabc093df"}}, @challenge={0x10, 0x1, 0x18}, @mesh_id={0x72, 0x6}, @random={0x63, 0x35, "b374bce6c0f46d6c2c6e1846bc7a7cd2c4205b7f32a43385aa7b72cb8d8eeec3d2331fa6acb137a52fc86f7024a68a73acd5284901"}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0x8, 0x6}}]}, @NL80211_ATTR_IE={0xf5, 0x2a, [@cf={0x4, 0x6, {0x8, 0x5, 0x0, 0xffc0}}, @random_vendor={0xdd, 0xe7, "e919d02d8a089d4c9d1a088b207c0c90dd9de429f7f59d01993f355ce231b8acf27a265845bc5117aa94f685c7ad6cdee31d26fa3ee3d6c39eb27430a330910bda986f0cbd21e1aed47778cce8b604492c2a4083e729de33bb9c6ba2fc3feecc861a8d7c64abd11a59335a5650b830906fd3cafd5afd5a41c174e205f1b89f2707d7f8883f5cf1c0f1e90e5142a7d979f44120f7be3e36f502100ddd1d3eb21ca4eae3c32b1e74edc377ad37bce7469c371517fa28003c55fb787659646092f4e4f647d1eea0835affb1906aeca297b42868afa0f7df71cf2dd7a36e2ad16022cd778ec3ab0dac"}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) ioctl$RTC_VL_CLR(r5, 0x7014) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x50, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x1800) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002180), r3) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002600)={&(0x7f00000021c0)={0x428, r9, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f54bd19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xce7, @rand_addr=' \x01\x00', 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x400, @remote, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x38a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x375}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe5f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x706}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x190, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "11646983542b67978f16ed4aa5b02608b6211437"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0xf3, 0x3, "6695da602c40601bced82b8ec90e9ac120157b67cff8c5f97003897181b8f9576382df7ed71b1d8a91f7028ee310cdabc62c50c8eaa9b201d1c175cae328ea876b49b4bb70e109f9279e16a35b9288153c04389b971fef04848481dbadefd555dd6bc38f60b53caa97ab563ee144f9f309fb41c7eebc08b032ba3296bcf3456a87b17493e0efe27f827ad9da0eb557de5a97aecdbc6aba5290183d9a63fa2c1ae6518e00c4a2344b1c36d90ed89e7823a1c17ff526b68bc0bb5f45a84ecb820fb88e2d785ea40e2fc606754936f91a0b2dd6bf81d9a47ef5e625d7ce565570deae2559cd9d63adbc02093a458c8e91"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "5020a17f958ab611d5e3f284ac15719e7edf4951bc1d09c123c8de81daba"}}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffbff}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}]}]}, 0x428}}, 0x20008904) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r10, &(0x7f0000002680)="84b2542b7152aab6717c0863d2b2e92ed4cb2d00a4de53118d306c35b0b78cd39200123b8f4d84b3a208f4e266e1ad4bad7c826a212f73c540144b908c0689d4a6ca28f4170c3f388ec21d7c5d3bfbdc6e10d2343e312e4bfda4bb4c58f44d964c7e5be072e055164feb1f4d535f28948e5e30199bb0cb007b95e834a002f6f769c52807cdfa33de8216", 0x8a) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r11, &(0x7f0000002840)={&(0x7f0000002740), 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x20004050) 2m45.205000621s ago: executing program 5 (id=2023): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3000005, 0x13, 0xffffffffffffffff, 0x29f34000) 2m45.134216702s ago: executing program 5 (id=2024): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="080000000000000002004e22e0000001000000000000000000000000a1fc034224459b170060271d51feff00000000000000000000000000001f000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dbc7b597b4138ee40000000000000000000000000000000000000009506945a2c7f91cc6011f9ccf5e2c4a4b31940c8d1dd4cf870258485467e0a3ea8273f1d58fb459eec70fa3f30b42485f3147448fec8f99"], 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff2b32d0ba1298ad320314f008", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40002000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x7, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000001c0)=0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e73657400000800"], 0xd4}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xb07f, 0x5, 0x200, 0x9, 0xfffffffffffffe03, 0x4, 0x8, 0x4, 0x0, 0x8, 0xf17, 0x547875b, 0x1, 0x4, 0x90, 0x7, 0x9, 0xcc7, 0x5f, 0xd8, 0x3, 0x8, 0x2, 0x3d, 0x2, 0x8}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) timer_create(0x0, &(0x7f0000000400)={0x0, 0x2, 0x2, @tid=r4}, &(0x7f0000000480)) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f000001fc00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1814011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg(r5, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x4080) setsockopt$sock_attach_bpf(r5, 0x110, 0x3, 0x0, 0x2f) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x600, 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r2) syz_emit_ethernet(0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="aa0e88a7b7dcb7fa15aaaaaa8100000088635a02"], 0x0) 2m44.642807436s ago: executing program 5 (id=2025): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) ioprio_set$uid(0x3, 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x38, 0x1, 0x0, r0, 0x0}]) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000006a00000a6c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b2800128014004180090001006c6173740000000004000280100001800c000100676f756e7465721008000340000001"], 0x94}, 0x1, 0x0, 0x0, 0x20000}, 0x400c0c0) (async) socket$kcm(0x10, 0x2, 0x0) 2m44.12844767s ago: executing program 5 (id=2032): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2004000, &(0x7f00000007c0)={[{@dioread_lock}, {}, {@abort}], [{@dont_measure}]}, 0x1, 0x563, &(0x7f0000000240)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x600002, 0x0) fcntl$setflags(r0, 0x2, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000140)={[{@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@abort}, {@jqfmt_vfsold}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x20, r2, 0x1, 0x70bd27, 0x25dfdc06, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[], 0x20) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000100)={0x0, 0x2000}) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r5, 0x89f3, &(0x7f00000000c0)={0x0, 0x770000, 0x8, 0x0, 0x19, "bb5dee0403081c012083d08600"}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000840), &(0x7f0000000880)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x81) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x11) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) 2m43.239994553s ago: executing program 5 (id=2048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0xf5ffffff}}, 0xa0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 2m42.710789308s ago: executing program 38 (id=2052): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x58eb, &(0x7f0000000400)={0x0, 0x200c8a2, 0x4, 0x8, 0x285}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x101ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffb}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1c8, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7a1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd27db6}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xad}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfa1c}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x34f0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcbf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf9a1}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc63}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbcb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x41fe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan0\x00'}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4008048}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x400400c0}}], 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='+'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 2m42.416220095s ago: executing program 5 (id=2057): modify_ldt$write2(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0x40, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x6a, 0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv6_delroute={0x2c, 0x19, 0x400, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x20, 0xa, 0xff, 0x0, 0x0, 0xa, 0x2500}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_IIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000050) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m42.306452308s ago: executing program 39 (id=2057): modify_ldt$write2(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0x40, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x6a, 0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv6_delroute={0x2c, 0x19, 0x400, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x20, 0xa, 0xff, 0x0, 0x0, 0xa, 0x2500}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_IIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000050) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m46.597206969s ago: executing program 0 (id=2812): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$eJzs3TFrE2EYB/DHNm1DFjuLw4GLU1C/wSEVxAMhkkEnD6pLK8J1OZ3uY/gZ/Eh+jEzdTpIrTRujiyav6f1+EPInfw6ey5A3w/sm7x9+Ojv9fPGx/fEthsMsBhFNXEYcx17sR+fe1fPeIh/GTU0AALtmMinz1DOwWVWVlwcRcfRLM/2eZCAAAAAAAAAAAAD+mv3/ANA/9v/ffVWVl6Or72+32f8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApHPZtvfbPzxSzwcA/HvWfwDoH+s/APSP9R8A+ufN23ev8qI4mWTZMGLW1O381VlTTyNGEfHiZXHyJFs4Xl41q+vp/iLN+6ddn93uD66vf7a2P4zHj7p+3j1/Xaz0R3G6jTcAAAAAAAAAAAAAAAAAAAAA/gPj7Nra8/3j8e/6Lt34fYCV8/uDeDDY2m0AAAAAAAAAAAAAAAAAAADATrv48vWsPD//UAmC0NMwWlOl/mQCAAAAAAAAAAAAAAAAAID+WR76TT0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKSz/P//zYXU9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w88AAAD//9vbk2A=") syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0xffffffffffffffff) 1m46.385899825s ago: executing program 0 (id=2813): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x24044084) recvfrom$llc(r1, 0x0, 0x0, 0x40010162, 0x0, 0x0) 1m46.16034734s ago: executing program 0 (id=2816): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m45.991168705s ago: executing program 0 (id=2819): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x286, &(0x7f0000001300)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000ed97a381c145c51141000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000080)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x2, &(0x7f0000000640)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r2, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, 0x0]) 1m45.864715858s ago: executing program 0 (id=2820): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x4400, &(0x7f00000003c0)=ANY=[], 0x82, 0x22e, &(0x7f0000000940)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) times(&(0x7f0000000240)) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x26, 0x800, 0x200) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x103e80, 0x160) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xb, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d81cd4a524bd3ffe70c7f3f04002f7b6aa54cc50a1fcaed1e15ee3748", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {0x20}, 0x0, {}, 0x4, 0x2, 0x362f7851, 0x9, "c4eba5d6dbaca362f132fae676d21d10096906854c40551f29f3cbff7bf5c137324111a71ca5a54dc81953be6295711dc70c901ca4e23c9fc0dbd631f0e43833", "c0c9066c84da4d492e18f1397bb9df1f1ff692d6d3ead209fa89b82d75f09329", [0x400, 0x100]}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x3, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {0x14, 0xb, 0xfd}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0xa]}}}}]}) r9 = socket(0x1, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x61, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8644}, 0x0) 1m44.67435532s ago: executing program 0 (id=2823): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x4, 0x5, 0xd, 0x0, 0x9, 0x502, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9753, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x10220, 0xfffffffffffffffe, 0xffffff7f, 0x0, 0xdb4d, 0x2, 0x0, 0x0, 0x2, 0x0, 0x8db}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0xc5) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x20000400) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x8, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0d00000004000000040000000c00000015000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r2], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r5}, 0x38) lchown(0x0, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x6, 0x808}, 0x50) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x3) memfd_create(0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x3204806, &(0x7f0000000540)=ANY=[@ANYBLOB="636865636b3d7374726963742c636865636b3d72656c61786564006d6f64653d3078303030303030300400000000000000312c6d61703d6f66662c63727566742c696f636861727365743d6d6163677265656b416d61703d61636f726e2c676f636861727365743d69736f383835392d322c73657373696f6e3d3078303030303030303030303030303035382c73686f776173736f632c6d6f64653d3078666666666666666666666666666666642c636865636b3d7374726963742c6673636f6e746578743d73797374656d5f752c7065726d69745f646972656374696f2c00"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000171401"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800) 1m44.574618262s ago: executing program 40 (id=2823): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x4, 0x5, 0xd, 0x0, 0x9, 0x502, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9753, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x10220, 0xfffffffffffffffe, 0xffffff7f, 0x0, 0xdb4d, 0x2, 0x0, 0x0, 0x2, 0x0, 0x8db}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0xc5) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x20000400) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x8, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0d00000004000000040000000c00000015000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r2], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r5}, 0x38) lchown(0x0, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x6, 0x808}, 0x50) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x3) memfd_create(0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x3204806, &(0x7f0000000540)=ANY=[@ANYBLOB="636865636b3d7374726963742c636865636b3d72656c61786564006d6f64653d3078303030303030300400000000000000312c6d61703d6f66662c63727566742c696f636861727365743d6d6163677265656b416d61703d61636f726e2c676f636861727365743d69736f383835392d322c73657373696f6e3d3078303030303030303030303030303035382c73686f776173736f632c6d6f64653d3078666666666666666666666666666666642c636865636b3d7374726963742c6673636f6e746578743d73797374656d5f752c7065726d69745f646972656374696f2c00"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000171401"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800) 1m42.741824172s ago: executing program 2 (id=2839): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x9c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0xff, 0x38, 0xd}, {0x6, 0xfd}]}) write$ppp(r0, &(0x7f00000001c0)="22086fa539eb989e8f0dd8ea0084d4e6dff4b73f22df30d1e714bcf2e49834bad6546dd933a4bc9a4795f4e01be028b0888ff85ac7ab9cd9bd7d5a3a1a16eb140a8b5a7f212b8d49264306958af077fb1cf34f73b06dcd83ec82bf1b86a01f09418a75e6e1bed00925e20d6434b5a4bf434d1b548fd6146900ae7b89d554581e", 0x80) 1m42.596791406s ago: executing program 2 (id=2841): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) statx(r0, 0x0, 0x1000, 0x40, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_create(0x2, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r2) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000340)={0x9, 0x9}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x80000000000005, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x3, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffffffffbffff, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r8, @ANYBLOB="9b040400000000001800128008000100736974000c00028008000100", @ANYRES32=r8, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x70, 0x10, 0x400, 0x0, 0xfffffffc, {0x0, 0x0, 0xe403, r8, 0x0, 0x4002}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x75e}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xd}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x40}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) unshare(0x6c040000) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r9, &(0x7f0000003140)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) getpgid(r10) 1m40.517088381s ago: executing program 2 (id=2858): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x80000001}}]}}, 0x0, 0x62, 0x0, 0x1}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1e4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1b8, 0x4, 0x0, 0x1, [{0x15c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0x8, 0x1, 'tos\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f5000000"}]}}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x20c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x80, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) readv(r4, &(0x7f0000000400)=[{&(0x7f0000004900)=""/4068, 0xfe4}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r6, r5, 0x0, 0x3ffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0}, 0xa822, 0x4005, 0xb, 0x3, 0x6, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r8, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r7, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4004000}, 0x4800) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000100)={0x0, 0x10, 0xff}) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 1m39.887316328s ago: executing program 2 (id=2863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001040000000000000000ac1414aa140019800800010004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) (fail_nth: 4) 1m39.508339298s ago: executing program 2 (id=2867): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000040)="ab66c8bda12783cb71d09fffe43b71c6105897064f6a03f28e42f1a821532a9b4642e5902c9985f13da2c271fd0b473454276b540d3ca416fd56520623ae2fcbf0870bd620e8cdfe7e5c238cfbed4006c3a19a0b0b2487f88897fe1f7fcf0769964c392b27c2eb0f4fd7", 0x6a}], 0x1}}], 0x1, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x5, 0x4, 0x6, 0x7}, {0x1, 0x5}], 0x10, 0x7}, 0x94) shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3d0, 0x298, 0x200, 0x0, 0x168, 0x98, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {}, 0x62, 0x0, 0x70}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x2, 0x1}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x1ff, 0x6, 0x8, {0x8f1}}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffffff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@multicast2, @multicast1, 0xff, 0xff, 'nicvf0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 1m39.505648808s ago: executing program 41 (id=2867): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000040)="ab66c8bda12783cb71d09fffe43b71c6105897064f6a03f28e42f1a821532a9b4642e5902c9985f13da2c271fd0b473454276b540d3ca416fd56520623ae2fcbf0870bd620e8cdfe7e5c238cfbed4006c3a19a0b0b2487f88897fe1f7fcf0769964c392b27c2eb0f4fd7", 0x6a}], 0x1}}], 0x1, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x5, 0x4, 0x6, 0x7}, {0x1, 0x5}], 0x10, 0x7}, 0x94) shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3d0, 0x298, 0x200, 0x0, 0x168, 0x98, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {}, 0x62, 0x0, 0x70}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x2, 0x1}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x1ff, 0x6, 0x8, {0x8f1}}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffffff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@multicast2, @multicast1, 0xff, 0xff, 'nicvf0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 1m1.856902395s ago: executing program 6 (id=3339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfffe, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x10000}}}}]}, 0x38}}, 0x0) 1m1.856418205s ago: executing program 6 (id=3341): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = epoll_create1(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1m1.467136026s ago: executing program 6 (id=3354): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x7f, 0xfffff034}, {0x6, 0x2}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x60000000, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x9}]}, &(0x7f00000002c0)=0x10) 1m0.520751781s ago: executing program 6 (id=3367): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x208000, &(0x7f0000000280)={[{@block_validity}, {}, {@data_err_ignore}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(0x0, 0x2) 59.756979781s ago: executing program 6 (id=3375): lseek(0xffffffffffffffff, 0x10001, 0x0) socketpair(0x18, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) (async) socketpair(0x18, 0x5, 0x6, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) (async) 59.491207349s ago: executing program 6 (id=3382): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000020000000000000000000000711816000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 59.394226262s ago: executing program 42 (id=3382): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000020000000000000000000000711816000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.903441808s ago: executing program 3 (id=3767): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xbf2, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x6, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x5, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x49, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0x80000d}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x853}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x7f, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x5, 0x10000, 0x6, 0x4}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x9, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1d, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x49, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x3, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x7, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x81, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") close(0xffffffffffffffff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a31000000000800"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000440)={r1, &(0x7f0000000300)='gact\x00', 0x0, &(0x7f0000000340)={@align=0x7f, {0x0, 0x9, 0x7ff, 0x2}}, 0x8f5, &(0x7f0000000380)={@_ha_fsid}, &(0x7f0000000400)=0x7fffffff}) close(r4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$inet6(0xa, 0x1, 0x0) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x5, 0xfffe, 0x8001, 0x0, 0xd}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) timer_create(0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async) kexec_load(0x0, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 18.952211284s ago: executing program 3 (id=3777): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x4000, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x4040, 0xd7) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 18.752751639s ago: executing program 3 (id=3779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000140)='\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x2}, @typedef={0x5, 0x0, 0x0, 0x8, 0x5}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @fwd={0x5}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x2e, 0x30, 0x30, 0x5f, 0x2e, 0x5f, 0x30]}}, 0x0, 0x61, 0x0, 0x1, 0x1ffffe}, 0x28) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x3) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20c800, &(0x7f0000000140)={[{@oldalloc}, {@debug}, {@bsdgroups}]}, 0xfe, 0x246, &(0x7f0000000ac0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x8, 0x7, 0x4, 0x0, 0x4cd6, 0x5982, 0xfffffffffffffffc, 0xbbde}, 0x0, 0x0, 0x0, 0x0) 16.540101458s ago: executing program 3 (id=3791): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7ffffffffffffffd, 0x8005, 0x0, 0x0, 0x13, 0xd, "ef359f413bb93852f7d6a4ae6dddbbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafaf3afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359628e45668100e3700000e6d60200cd8ffe000000000000000100", [0x4204]}) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2000000, 0x9a) 15.824479737s ago: executing program 3 (id=3798): unshare(0x22020600) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x100, 0xe79c, 0x1, 0x3ff, 0xcdd7}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 15.462602477s ago: executing program 3 (id=3806): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)}], 0x1}, 0x4048055) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x48, r3, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12b5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x48}}, 0x3000c000) 15.393357969s ago: executing program 43 (id=3806): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)}], 0x1}, 0x4048055) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x48, r3, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12b5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x48}}, 0x3000c000) 2.720786078s ago: executing program 8 (id=3970): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="28000000070605000000000008000000050040000900020073797a3100000000050001000750d623a966e5d0e883d72ac03c6f72502f46eb95c0d21c1680baca5256ff7b68f19a13bf9c0a4e7c167b928067a2cf387c5116a8581ea0d8a6659499ad3fb5078478dd5d3753aafc72debfccb8aa4a79bf8350d7c9fe97b4663709fe7bd832511343ccc65b261e8d7bcf9ec6446c7624794d8501fa12b702e80abead02a4aa5b49af5d2be73300000000d8ff427db5b56d4739e142189aa9576b00000000fa15146c41341ce63f79b28c1f67f002e89b661be836593050bfc71b32ba4fab616112ba78000100f47284c4cd06b6508d6f78583e0bdc62023ed2d7f1620054dd7d7de4eaf56da7d185044990784e12700cb741c0bd8b9dd507956f5bdbafb6f52eeca37f4639cb6f7ad3b2cbc1a87a854840df81e81bc5d34f36b3fa97e319335e3fb92e4791990953c9236057c09fb4c83efd1ef09394f3a5068766cb74a903fb2551a9aadad3f8b031162009fa483b4726f9536902a322ba0f2fe7502d0fa34c80f91da5a6cb"], 0x28}}, 0x4000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="dbdf680bc365ae033cf859a268d280256bd04a7c312c76ffaaec29b0b98d2360f373dc04311e2691eec9196cd790bc7365bdcdd40d67ae2f2d2d85ff26fef9d5cf0c101dce78c5f6c9c4158c556260b716dd22b56ee11afe9a930c5397ae4f30aaa0e59c7619fa23d7e1b25ea97bfd7e8656d1a69ad721a76d60165cdce960359bfb2ec6f6b8168f281726defe19f0a56a7a7bbe1ff92c0827398b76024c9c899bc216", @ANYRES16=r1, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000ffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x24048014}, 0x24000040) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00eaf32a02b13fdd57255500000008000120744000000c0099000100000073000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000044) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xb, 0x0, 0x3, 0x6, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x7fff, 0x0, 0x200, 0x3, 0x8, 0x1, 0x200, 0x40, r2}, &(0x7f0000000340)=0x20) socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0xa) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x10020, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0x830d}, 0x101680, 0x2, 0xfffffff9, 0x0, 0x5, 0xa50, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfdfffffffffffffe, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001014010000000000000000000800", @ANYRES32=r4], 0x30}}, 0x94) sigaltstack(&(0x7f0000000040)={&(0x7f0000000000)=""/47, 0x0, 0x2f}, &(0x7f0000000380)={&(0x7f00000000c0)=""/59, 0x0, 0x3b}) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) 2.682075899s ago: executing program 9 (id=3971): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x3000c000) 2.592575191s ago: executing program 7 (id=3973): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) read(r0, &(0x7f0000000380)=""/71, 0x47) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.522756123s ago: executing program 9 (id=3974): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setns(r2, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x24020000) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RREADLINK(r8, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) listen(r9, 0x1e) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) sendmsg(r7, &(0x7f00000004c0)={&(0x7f0000000240)=@xdp={0x2c, 0x6, r10, 0x37}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000400)="ea77305219f0a48c95acf203ad76fd5e53fa1ea7078d7fc23a34592e503207e31177f37488d984792b12935c75214a4f373b25d9cbaad97bbf6b578aa55c90dd677666b6b6", 0x45}], 0x1}, 0x8040) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) fcntl$setstatus(r11, 0x4, 0x2800) ioctl$EXT4_IOC_GETFSUUID(r11, 0x8008662c, &(0x7f0000000080)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r11, 0x5452, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000001c0)=0x1, 0x4) lgetxattr(0x0, 0x0, 0x0, 0x0) 2.504884133s ago: executing program 8 (id=3975): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sched_getattr(0x0, &(0x7f0000000040)={0x38}, 0x38, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r1, r0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000880)="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", 0x106}, {&(0x7f0000000780)="214bb4c747a48879d990a421b4e8ddc40480f09e00253427a111f255623a1e4c6fb707a8486067f61dd1bb54229e7a0bd5610bafa0d05f1e621d53186edf26684d4ab23e288930a6a688e9ade0aa61682b58034733331710bb42431542840356c703ed94c83b47f44efb3ac3c618b8a3675eccad4b540ab17e37d4f0a249929a3612bafb2ffca77842f9772b9aa638a86588bf4ae58a444e8d062fa1bd66669a54c23469bc1277992b887f4234ddc92b709c529babe61b7dd4fb9e4380070be4f791f40f4e60da8e58f1f1f099a5e1d2943faecfbcbdaa347a5c", 0xda}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000140)="1a1ac83f96c8c19f47f37fc1c5a34d20c21512bfa21bc394b468bb22c73228a93dd58ad838ab4b3bf74c729fd9ade1d77b489f5e7decf967ca3ab8a7a894e5039cd313036fadb9fd81db4092e4d3e89691b45f41940f04f69d229bac529a3a7b3739991ac3deb21b5249af1b7c416740c84531698b58f6506ba9cf6403020c1def0261b0b8f1cf15487016a04ca275b3f5b02a67b290cefd4acffaa7fdfbc96f443a12b2c6f49a37", 0xa8}], 0x4, &(0x7f00000023c0)=ANY=[@ANYBLOB="1c00000000e700000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1], 0x38, 0x880}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002400)="24bbb4a15680198e2f1776916daae74d46422951fe814e3946ba1055085a433844915449531b6067d45386f48abd9169baa9c07a7cea34ff65ba6f2750ccb8d1e48844f27a1a3983bb81940aaed5f587bd193ce4563cac215039d3a1f900ea8e6eb3440077139c3cbdd0c0f42df02353a4059c4ad0c9aadb8e9ee8c538427d22027f469ac2a85db2ce91585dcaaffc8e8772fe69003d87b667712f5b7168e0af5ea0fb31425dc2f96a7c12e311d4efe877a5c416437f7dc1a5c118589e6fb1cd276c304a640dbc2c52e3a1048ff4908f4b9339fd5b87ea33d734785ed9f19a78ef51bd7ec7ebb36db79d9811c2a3e0473651b7d11d6e78df1356", 0xfa}, {&(0x7f0000002500)="9fa13f21909f778302a58e9a675b2b76598bd91ba49e79397937b44a92ec03b329c6070c7759a6cd582f85e36e9fbad347f7605783650e11e0f4ffc09cff71c6fa91e72d802506fea0bea169fce6738919b3996786b7cd6b2d68468bc2511d83b5762b7753a9954e8e8bbf69a10cc87579a304dbdf28", 0x76}, {&(0x7f00000009c0)="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", 0x22a}, {&(0x7f0000002640)="b81aaa1f49b9d6d6dc5e214f6da82a94a205b4be163d544d06f150d0e9ea3f189425355486ebcdc834988094e8937179377f85fd", 0x34}], 0x4, &(0x7f00000026c0)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x29, 0x1, 0x1, [r0]}}], 0x60, 0x4000801}}], 0x2, 0x40041) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xa0000008}) epoll_wait(r8, &(0x7f0000000080)=[{}], 0x1, 0xffffff90) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregs(0xd, r9, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x9, r9, 0x7ff, 0x3) ptrace$cont(0x21, r9, 0x80000001, 0x4) 2.404907036s ago: executing program 9 (id=3976): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x60000000}, 0x48) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) 2.290072299s ago: executing program 9 (id=3978): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffe20, 0x45, 0x1, 0x0, 0x3, 0x0, 0x5, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xff, 0xb}, 0x13126, 0x0, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x65, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x4000000006, 0x11000, 0x7, 0x9484, 0x3bf, 0x404, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0xa10844, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000000ac0)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = syz_io_uring_setup(0x759e, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x2, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r2 = getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) epoll_create1(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) socket(0x8000000010, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0x1, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x11, 0x0, 0x4) mknod$loop(&(0x7f0000000180)='./bus\x00', 0x2000, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) creat(0x0, 0x26) socket$packet(0x11, 0x3, 0x300) 2.120738123s ago: executing program 4 (id=3980): openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) ptrace$setopts(0x4206, 0x0, 0x2, 0x100001) setsockopt$sock_attach_bpf(r1, 0x114, 0x3, 0x0, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtaction={0xec8, 0x30, 0xb, 0x0, 0x0, {}, [{0xeb4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe68, 0x2, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {}, {0x100000}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff6ecf}, {}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0xc5}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x8}, {}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x400000, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec8}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0}) r7 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000815}, 0x4000) 1.545592339s ago: executing program 7 (id=3982): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x11, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2b2, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x5f}, @ringbuf_output, @exit, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0xd, 0x14, &(0x7f00000001c0)=""/20, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x7fffffff, 0xffff}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x4, 0x3, 0xf, 0x5}, {0x5, 0x3, 0x5, 0x5}], 0x10, 0x200}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x6c}}, 0x0) 1.416492973s ago: executing program 7 (id=3984): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x3000c000) 1.234377827s ago: executing program 8 (id=3986): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x34, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0xfffffff1, 0x845}, 0x24008004) 1.1279745s ago: executing program 7 (id=3987): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0xc0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r2 = dup(r1) ioctl$PTP_PEROUT_REQUEST2(r2, 0x80503d0a, &(0x7f0000000280)={{0xeb4, 0x7}, {0xeb4, 0x8007}, 0x10000004, 0x7}) (async, rerun: 64) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="289f13d11699", 0x6}, {&(0x7f0000000040)="b59458bd169d31cf0cb94a8f56be0274a35b26215f2e48409498a20d43f62be2e42249363bd8d27b9be1d3505dd1288670d0578275d79efc3e4a2003a7438a486c185a3d428576d98acd00227fe39e4748eaec0081a6e6b36d41b0a7371e33fb573fd1655f368e4eb5e0acf59f1440", 0x6f}], 0x2, &(0x7f0000000300)=[{0xc8, 0x10e, 0x7, "d2e6e3b515bd3215c3bb2ee1c3da222aeb46d5c3ba9fb5ac4a4db17e93130c7187456b15589e194f3ab5be1db102b86c96811b50717e2f159209f8e02d6c1f7d7dd1b34deb5edc8bb620b7f3ab788eab53dc256d823847ea1c6c3d1b9761f43f5357546089e7759e95c2da9f8a439a95acc1920b8a28e2edd5d656a25e822198846c5e4324c768960c9583609fea1754833e182ecae7306cda02da75bab00307c90a0c8e7b290957621a61f8e11c690565"}, {0x78, 0x18f, 0x4, "f4d100e75a74b8fc8f3a315f48fa3ca87a25c1fa9bbf2dda264d34633ea36927fb2c23f66f1f77599c418795c199252ef9b30064510c49c732ddee9231d8050034141e38f5b44fb9a415f91351ee10de6bfa18dc547a7ed0461fa1f37e5e6871bf7a"}], 0x140}, 0x0) (rerun: 64) write$P9_RWALK(r2, &(0x7f0000000140)={0x8b, 0x6f, 0x1, {0xa, [{0x8, 0x3, 0x5}, {0x8, 0x3, 0x8}, {0x0, 0x1, 0x8}, {0x80, 0x1, 0x1}, {0x2, 0x2, 0x6}, {0x40, 0x0, 0x3}, {0x80, 0x4, 0x4}, {0x80, 0x2, 0x3}, {0x40, 0x2, 0x8}, {0x1, 0x3, 0x7}]}}, 0x8b) 1.12757944s ago: executing program 4 (id=3988): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x0, 0x0, 0x27, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbe930da0288a8b78a3f921c40fdc06a"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getrusage(0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002b80)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) 1.12180929s ago: executing program 1 (id=3989): set_mempolicy(0x4005, 0x0, 0x9) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x4000040) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f00000004c0)={[{@nodelalloc}, {@noblock_validity}, {@inlinecrypt}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@minixdf}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9d, 0x4ed, &(0x7f0000000a40)="$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") syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1d, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x68, 0x6, 0x3, 0x4, 0x0, @empty, @remote}}}}}}, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0xa0, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) creat(0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) r4 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000003c0)={0x5, 0x80, 0x70, 0x5, 0x7, 0x0, 0x0, 0x25c9400, 0x0, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0xd}, 0x200, 0x0, 0x0, 0x2, 0x6, 0xfffffff9, 0xc, 0x0, 0x4, 0x0, 0x2}) listen(r6, 0x3) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$mptcp(0x0, r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r9 = dup(r8) ioctl$PTP_PEROUT_REQUEST2(r9, 0x40383d0c, &(0x7f0000000280)={{0xeb4, 0x7}, {0x4, 0x8007}, 0x10000004, 0x4005}) 1.088491721s ago: executing program 7 (id=3990): write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001c00)=""/4094, 0xffe}, {&(0x7f0000002c00)=""/4131, 0x1023}, {&(0x7f0000000840)=""/197, 0xc5}, {&(0x7f0000000500)=""/176, 0xb0}], 0x4}, 0x2000) 1.042971272s ago: executing program 4 (id=3991): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005000000080001005d000000080003"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xf3a, 0x0) unshare(0x20000400) tee(r2, r6, 0x8f5, 0xb) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r4, 0x0, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xdb88da10e01bac4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0xffff, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000e9b000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, 0x0) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$AUTOFS_IOC_PROTOVER(r8, 0x80049363, &(0x7f0000000000)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r10, 0x1, 0x4, 0x8001, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r7, 0x0, 0x40010) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r11 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r11, 0x541b, 0x0) 1.042761472s ago: executing program 9 (id=3992): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) read(r0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.034462803s ago: executing program 7 (id=3993): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x10043, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@loopback, 0x4e21, 0x0, 0x4e23, 0x4, 0xa, 0x20, 0xa0, 0x32, 0x0, r1}, {0x8, 0x5, 0xcec, 0x2, 0x9, 0xfffffffffffffffc, 0x7, 0x5}, {0x7, 0x6, 0x80, 0x800}, 0x2, 0x6e6bb2, 0x2, 0x0, 0x2}, {{@in=@remote, 0x4d3, 0x6c}, 0xa, @in6=@mcast1, 0x3507, 0x2, 0x51bd6af47a2804ae, 0x4, 0x8, 0x5, 0x400}}, 0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x3150050, &(0x7f00000003c0)={[], [{@obj_role={'obj_role', 0x3d, '@@*.&&(-'}}, {@fowner_gt={'fowner>', r0}}, {@appraise_type}, {@obj_role={'obj_role', 0x3d, '%*&\'[{'}}, {@fowner_gt={'fowner>', r1}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0xfd, 0x285, &(0x7f0000000780)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x81) statx(0xffffffffffffffff, 0x0, 0x100, 0x8, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs\x00', 0x1ff) unshare(0x20000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c) listen(r3, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x48041}, 0x800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'nicvf0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "bf1b4087edfe5c3e7dbc31ec412ad7e146e5a136e0aa6ad45eb197bfb937dd8d", "1e0000000000000000000400", "87a906824296668daf4ebd4e96f95ec6d39d32a7238872c45dc65a18f8bf52af", "d8f28fdc3ec20b8facef9aa9d6f53dd7527511d9bb717ba90adf6ac47453a1f1", "51b30ad0a23076c3cb8fe4a5952bf838aaa3f61f9a3b5cc42e3c85f8fa62946b", "6ef390e675e608f771455a4e", 0x400000, 0x2aca, 0x7, 0xcf, 0x7a3}}) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/126, 0x7e}], 0x1, 0x113, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@delchain={0xd8c, 0x65, 0x2, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xe}, {0xd, 0x1}, {0xf, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xa8}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_route={{0xa}, {0xd44, 0x2, [@TCA_ROUTE4_ACT={0x88, 0x6, [@m_simple={0x84, 0x15, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc, 0x3, '[][]N{:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x9, 0x6, 0xffff, 0x8000}}]}, {0x32, 0x6, "898b9ba236d7ca7f2f84f8b1a9e6df7d3889c0e0c22c977be9b717fb8d34fa691b035e6c1004ab9a194f24a3a406"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0xca8, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x1, 0x80db, 0x400, 0x0, {0x1, 0x2, 0xbcee, 0xea, 0x1, 0x4}, {0x9, 0x2, 0x1, 0x5, 0xffff, 0x5}, 0x10001, 0x9, 0xfffffffb}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb2, 0xffffffffffffffff, 0xdee, 0xfffffff5, 0x5, {0x0, 0x1, 0x0, 0x4, 0x7, 0xf}, {0x46, 0x2, 0x8000, 0x5, 0x9}, 0x80000000, 0x6f, 0xa}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9fdf, 0x6, 0x7, 0x1ff, 0x6f0, 0x3b, 0x4, 0xb5, 0x68, 0x9, 0xde4, 0x3, 0x7, 0x3, 0x2, 0x8, 0x2, 0x6, 0x7, 0x8000, 0x0, 0xe8fa, 0x0, 0x7f, 0x4, 0x80000000, 0x5, 0x5, 0x1, 0x40, 0x6, 0x3, 0x9, 0x10000, 0x0, 0x5, 0x8001, 0xfffffff3, 0x9, 0x5, 0x2, 0x3, 0x4, 0x7fffffff, 0x4, 0x5bd, 0x7, 0xfff, 0x200, 0x2, 0x4, 0x4142, 0x2b, 0x2, 0x7c11, 0x10, 0x400, 0xf5, 0x3, 0x3ff, 0x2000fb, 0x8, 0x0, 0x9, 0xd113, 0x1, 0x80000000, 0x31cc, 0x8, 0x7, 0x2, 0x25f, 0x7, 0x5d2c, 0x2, 0x5, 0xadaa, 0x3b, 0x7, 0x0, 0xc6, 0x7, 0x7, 0xd, 0xfffffffb, 0xff, 0x897, 0x5, 0x7f, 0x1d5d, 0x0, 0xcd, 0x2, 0x1, 0x3, 0x2, 0x5, 0x8cb, 0x7fff, 0x95ab, 0x368, 0xa1, 0x0, 0xfffffff7, 0x4, 0x6, 0xfffffff7, 0x9, 0x203, 0x3ff, 0x8, 0x4, 0x4, 0x3, 0x101, 0x3ff, 0xb, 0x1, 0x81, 0xd3c2, 0x5, 0x9, 0x9, 0xe926, 0xd, 0x8, 0xcf95, 0x3, 0x2, 0x4b, 0xe, 0x100, 0xb, 0x7, 0x7fff, 0x101, 0x0, 0x1, 0xe23, 0x4, 0x2, 0x3, 0x2, 0xfffffc00, 0xffffffff, 0x2, 0xb, 0x80000000, 0x7, 0x6, 0x8000, 0x98, 0x5, 0x7fff, 0x74, 0x15, 0x3, 0x6, 0x6f7b, 0x8, 0x65, 0x76, 0xfffffffd, 0xf31, 0x63, 0x9, 0x5, 0x1, 0x800, 0x6, 0xfffffffa, 0xffffffff, 0x6, 0x3, 0x4, 0x8, 0x80000001, 0xa, 0x3, 0x8, 0x80, 0x6, 0x7, 0xfffffff8, 0x0, 0x0, 0x800, 0x3, 0x40, 0x81, 0xfffffffe, 0x4, 0x200, 0x5, 0xfffffff7, 0x101, 0x4, 0x2, 0xffff, 0x0, 0x87ec, 0x8001, 0xfffffff8, 0x3, 0xffffffff, 0x8, 0x2, 0x10000, 0xc3bd, 0x9, 0xfffffff7, 0x0, 0xde9e, 0x8000, 0x4, 0x7361, 0x6, 0x9, 0x1, 0x8, 0x2, 0x7, 0x200, 0x1, 0x7f, 0x3, 0x100, 0xc97a, 0x6, 0x185, 0xff, 0x9, 0xf, 0x0, 0x9, 0x5, 0x4, 0xfff, 0x5, 0x800, 0xf, 0x1, 0x9, 0x7fffffff, 0x0, 0x678, 0x7, 0x0, 0x6, 0x6, 0xfffffffd, 0x401, 0x200, 0x9, 0x9, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x7, 0x6, 0x7, 0x10000, 0x7, 0x6, 0x8, 0x9, 0x9, 0x8001, 0x1, 0x0, 0x0, 0xc, 0x4, 0x1, 0x3, 0x4, 0x1, 0xa6, 0x0, 0x7fffffff, 0x8fee6e94, 0x7ff, 0x2, 0x5, 0x0, 0x19e, 0xfffffffe, 0x200, 0x2, 0x4a, 0x0, 0x9, 0x3, 0x1, 0x9, 0x8, 0x5, 0xdb32, 0x1000, 0x3fffffc, 0xff, 0xca, 0xffffffff, 0xee82, 0x101, 0x5, 0x7, 0xb5f, 0x5, 0x7, 0xb, 0x400, 0x3, 0x7, 0x406, 0xea13, 0x7fffffff, 0x2, 0x101, 0x3f, 0x1, 0x3, 0x28, 0x7, 0x7, 0x2, 0x7fffffff, 0x2, 0xffff7fff, 0x8001, 0x7, 0x2, 0x3, 0xa, 0x5, 0x4, 0x7fffffff, 0x2, 0x6, 0x5, 0xae5f, 0x0, 0x9, 0x0, 0x1, 0x5be, 0x4, 0x9, 0xa, 0x4, 0x8, 0x0, 0xffffff90, 0x401, 0xfffffff9, 0xe3f3, 0x4, 0x1, 0x46, 0x10, 0x1, 0x5, 0xfffffffa, 0x8001, 0x5, 0x4, 0xe3ae, 0x78000000, 0x6, 0x4, 0x2, 0x8, 0x818, 0x4, 0x7, 0x3, 0x2, 0x4, 0x1000000, 0x2a45, 0x2, 0x2, 0x6, 0x2, 0x2, 0x3, 0x100, 0xb09e, 0x4, 0x1623, 0x8, 0xa, 0x0, 0x23, 0x0, 0x8, 0x6, 0x9, 0x7, 0x8000, 0x1, 0x31ed, 0x4, 0x8, 0x4, 0x7, 0x8, 0x8, 0x3, 0x0, 0xf5, 0x5, 0x5, 0x5, 0x1, 0x2, 0x1, 0xfffffff3, 0xb2a, 0xcaa2, 0x3, 0xa, 0x5, 0x2, 0x8, 0x43, 0x400, 0x1, 0x5, 0xfffff739, 0x7, 0x200, 0xe5b0, 0x3ff, 0x0, 0x220e, 0x40, 0x1, 0x1, 0x1, 0xb, 0x10001, 0x5, 0x9, 0x1, 0x4, 0x0, 0x6, 0x1, 0x4, 0x4, 0x3, 0x3, 0x4, 0x5, 0x0, 0x401, 0x6, 0x751, 0xb04, 0xb, 0xfffffffd, 0x392d, 0x8, 0x7fff, 0x7f, 0x6, 0x7f, 0xffffffff, 0x913, 0x0, 0xffffffff, 0x7, 0x6, 0x9, 0x0, 0x5, 0x7, 0x4, 0x0, 0xd, 0x6, 0x0, 0x7, 0x3, 0x44, 0x24, 0x2, 0x2, 0x2, 0xa7a, 0x1, 0x8, 0x4, 0x523, 0x4, 0x8, 0x3a8, 0x2, 0xe, 0x8, 0x8, 0x7, 0x39, 0x10, 0x5, 0x0, 0xd, 0x0, 0xa2e, 0x7, 0xe82, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0x24c8, 0xe7, 0x2, 0x5, 0x3, 0x7, 0xc, 0xfb, 0x1, 0x80000000, 0x9, 0x4, 0x3, 0x5, 0x3, 0x3ff, 0x0, 0x101, 0x9, 0x0, 0x5, 0x6, 0x0, 0x828, 0x5, 0xb77, 0x8, 0x5, 0x3, 0x6, 0x8d3, 0xecfb, 0x1, 0x26, 0x5, 0x10, 0xfffffff9, 0x5, 0x4000, 0x10001, 0x7ff, 0x1, 0xfffffffb, 0x7, 0x100, 0x6, 0x2, 0x200, 0x1000, 0x7, 0x4, 0x1, 0xe4, 0x9, 0x80000000, 0x6, 0x10001, 0x401, 0x10000, 0x2, 0x36e, 0x8, 0xffffffff, 0x3, 0xc, 0x3, 0x3019, 0xfffffff7, 0x101, 0xfb16, 0x1, 0x7, 0x3, 0x7, 0x5, 0x0, 0xc33, 0x79b0, 0x1, 0xffffffc0, 0x2, 0x1, 0x7, 0xfffffffe, 0x6, 0x5, 0x1, 0x9, 0x80, 0xa1c, 0x2, 0x6, 0xb78e, 0x6, 0xf, 0x80000000, 0x4, 0x3, 0x5, 0x646, 0x40000, 0x5, 0x5, 0x800, 0x7f6, 0x7, 0x4, 0x1, 0x100, 0xc9, 0x2, 0x9, 0x8, 0x2, 0x0, 0x8001, 0x21, 0x7f, 0x8a, 0xffffffff, 0x6, 0x0, 0x10, 0x121c, 0x0, 0x5, 0x62b1a60f, 0x2, 0x3, 0x198ee2ed, 0x94f3, 0x401, 0x2, 0x401, 0xfffffbff, 0xfffe00, 0x8, 0x10001, 0x2, 0x3, 0x3ff, 0x5, 0x53, 0xcb, 0x6, 0x3, 0x2, 0x9, 0x48d4, 0x1, 0xfff, 0x5, 0x5, 0x4, 0x6, 0x5, 0x6, 0xfffffffa, 0x40, 0x8, 0x6, 0x1, 0x0, 0x8000, 0x0, 0x8, 0x9, 0x5, 0x9, 0x7f, 0xacf, 0x10000001, 0x4, 0x400, 0x9, 0x2, 0x4, 0x9, 0x6, 0x6, 0x7561, 0xfffffffc, 0x4, 0x3ff, 0x3, 0x7, 0x10000, 0x2, 0x80, 0x9, 0x4, 0x4, 0x81, 0x1, 0x9, 0x1fdbbd75, 0x200, 0x2, 0x40, 0x10000, 0x7f, 0x9, 0x7, 0x6013, 0x6, 0x3e1c, 0x1, 0x3ff, 0x9, 0x8, 0x8, 0x7fff, 0x70c7, 0x8001, 0x14000, 0x0, 0x4, 0x8a, 0x1ba, 0x4, 0x2, 0x9, 0xffff, 0x101, 0x6, 0x5, 0x3, 0x6, 0x8, 0x4a6, 0x6, 0xd, 0x8, 0x3, 0x10001, 0xfff, 0x8, 0x2, 0x3, 0xffffffcb, 0x5, 0x2, 0x0, 0x2, 0xd, 0x0, 0x4, 0x0, 0x6, 0xffffffff, 0x7fffffff, 0x0, 0x4, 0x40]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8001}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbdc}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xbb}]}}, @TCA_CHAIN={0x8, 0xb, 0xe8be49ee}]}, 0xd8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) 977.381294ms ago: executing program 8 (id=3994): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x1000, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x170, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x170}, 0x1, 0x0, 0x0, 0x24064010}, 0x40000) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) setgroups(0x1, &(0x7f0000000080)=[0x0]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00000004c0)={[0x81]}, 0x8) newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) lstat(0x0, 0x0) getgroups(0x0, 0x0) r9 = socket(0x1, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) getgroups(0x5, &(0x7f0000000d00)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee01]) fsetxattr$system_posix_acl(r7, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000100020000000000040000000000000008000700", @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0000050062eb97235f09a9e9cd4e23363aca6a7aaf6e5721196fc56231bcb1b94c80dd28813c64e089a1dd7e5c92d942d5ff984fb571810011b446b0abb2df6e2f1752f9865eb51fb330bb5b1c6c5c2ca411c3378e9a57c8f53693ea9d5a590dc75166f1fbb82c3285cc3cbe2dd26d47064a9d8bad96b97a62f2762febacec0c600d4b28e8a7e7ee7296e2d7baa850c2830dd0c0858399df4bbdc9054fbcad56fed7e37cddfb8be1891f5a88250aefdb68633997586d517789b7be9aed7d79f91e53ba83e1c163bc4dfe9e1ee8300f8f42937d85de6d105606bbe0028b60abe17336dc83baff7af799000c6cc31a6871930be8f7c901", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000200000000002000020000000000"], 0x54, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0f000000", @ANYRES32, @ANYBLOB="7b9bfea5aa8ae40b36b06b3bd2095b6c55138eb86b4ad9b4", @ANYRES64=0x0], 0x20) r11 = creat(0x0, 0x1f9) close(r11) 976.716505ms ago: executing program 1 (id=3995): unshare(0x28040680) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0xa8b8, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="100000000000000000f9ffffffffffff94", @ANYRESHEX=r0], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r1, 0x4, r1}, 0x10) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d6370752000706572665f6576656e74202d70696473202b64657669636573202d637075616363740600696f202d626c6b696f20"], 0x34) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000000000000ffb000000020000001c7d00000000000003000000050000000100008001000000ff03000000c0bd860400000009000000feffffff03000000ff7f0000070000000300000009000000090000007670c0000061004e97a9cbd6324203a39aac3b6889fb7c791f98db8cdb58bf4499e31a6be0bdad2e84a59be7213a8d66ff2c98b347ca41ce5c5dc9ae00"/168], &(0x7f00000002c0)=""/246, 0x73, 0xf6, 0x0, 0x1, 0x10000}, 0x28) getuid() r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x70bd2b, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4008094) 789.158509ms ago: executing program 8 (id=3996): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r2, r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) writev(r1, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000800)="c5e9321dcfb5", 0x6}], 0x2) (async) writev(r1, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000800)="c5e9321dcfb5", 0x6}], 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@stripe={'stripe', 0x3d, 0x40}}], [{@fsname={'fsname', 0x3d, '-,.-'}}, {@subj_role={'subj_role', 0x3d, ']'}}, {@appraise}, {@euid_gt={'euid>', r0}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@stripe={'stripe', 0x3d, 0x40}}], [{@fsname={'fsname', 0x3d, '-,.-'}}, {@subj_role={'subj_role', 0x3d, ']'}}, {@appraise}, {@euid_gt={'euid>', r0}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5000, 0x0, 0x3) 628.101064ms ago: executing program 1 (id=3997): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc002}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x6, 0x7fff0000}]}) clock_getres(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x19c) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="05"], 0x10) close(r2) unshare(0x2020400) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000013c0), 0x280282, 0x0) signalfd(r3, &(0x7f0000000080)={[0x1]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000301, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 627.192023ms ago: executing program 4 (id=3998): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000a7080000000000007b8a20ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1e, &(0x7f0000000540)=""/80, &(0x7f00000001c0)=0x50) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000)={0x4b}, 0x2) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74240000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000"], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) fchown(r6, 0x0, 0x0) 568.812405ms ago: executing program 8 (id=3999): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000100)={'ip6gre0\x00', {0x2, 0x0, @broadcast}}) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0x400c8df, 0xfc00, 0xa, 0x20002f7}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x1, 0x6, 0x401, 0x0, 0x8}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@grpjquota}, {@noinit_itable}, {@quota}, {@debug}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4f1, &(0x7f0000000b00)="$eJzs3V9rXGkZAPDnTDK1f1KTohe1YC22khTtTNLYNnhRFURBKKj1vsZkEkImmZCZtE0omuIHEERU8MorbwQ/gCD9CCIU9F5UlGW33b1Y2N3OMmdm0mw60ySb+bOb+f3gzLznnXPmed4zzJnznvNyJoCBdSkiLkfEi2q1ejUiRhv1mcYU2/WpttzzZ4/malMS1erdN5OIpF5XW2xi13ueaax2MiJ+9L2Inyavxi1vbi3PFouF9cZ8vrKyli9vbl1bWpldLCwWVqenp27O3Jq5MTPZkXaORMTt7/z3N7/843dv//VrD/517/8TP0sa9REv29Fp9aZn023RNBwR690I1ifDaQsBAPg0aB7nfzkirsZoDKVHcwAAAMBxUv3mSLyfRFQBAACAYyuTjoFNMrnGOICRyGRyufoY3s/H6UyxVK58daG0sTpfHys7FtnMwlKxMNkYKzwW2aQ2P5WWX85f3zM/HRHnIuLXo6fS+dxcqTjf75MfAAAAMCDO7On/vzNa7//v8l7fkgMAAAA6Z6zfCQAAAABdp/8PAAAAx5/+PwAAABxrP7hzpzZVm/9/PX9/c2O5dP/afKG8nFvZmMvNldbXcoul0mJ6z76V/d6vWCqtfT1WNx7mK4VyJV/e3Lq3UtpYrdxb+shfYAMAAAA9dO5LT/6ZRMT2N06lU82JficF9MTwYRb+T/fyAHpvqN8JAH1zqN9/4FjJ9jsBoO+SfV5vO3jnb53PBQAA6I7xL7S+/j+077mB7UyPUgS6xPk/GFyu/8Pgcv0fBlc2hkJHHgbbfrcAPfr1/2r1UAkBAAAdN5JOSSYXkZ4HGIlMJpeLOJv2CbLJwlKxMBkRn42If4xmP1Obn0rXTPYdMwwAAAAAAAAAAAAAAAAAAAAAAAAA1FWrSVQBAACAYy0i878kvZt/xPjolZG95wdOJO+Ops8R8eD3d3/7cLZSWZ+q1b+1U1/5XaP+ej/OYAAAAAB7NfvpzX48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTS82eP5ppTL+O+8e2IGGsVfzhOps8nIxsRp99OYnjXeklEDHUg/vbjiDjfKn5SSyvGGlm0in+qz/HPdCA+DLIntf3Pt1p9/zJxKX1u/f27me6hjq79/i+zs/8bahG/Vnf2gDEuPP1zvm38xxEXhlvvf5rxk1fif/9QbfzJj7e22r1W/UPEeMvfn2RnmVopX1lZy5c3t64trcwuFhYLq9PTUzdnbs3cmJnMLywVC43HljF+9cW/vHhd+0+3iT/Wtv31nK4csP0fPH347HP1YnZn9eRl/InLrT//823iZxqf/1ca5drr483ydr2828U//f3i69o/36b97T//esyJA7b/6g9/8e8DLgoA9EB5c2t5tlgsrA904Uhbo3ZY1LF8hqL/W6ODheYhY9djXf5Ya/28C/nUjsw/AVv+yIX+7ZMAAIDueLUPvEe2xwkBAAAAAAAAAAAAAAAAAADAAOrF7cT23kJgO33sxN3zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA658MAAAD//8UQz6k=") r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FITHAW(r4, 0xc0045878) socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0xc) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000500)="88c59fd0238147660aecb9ee1bea88bed56ccd7f4054ff2a276a2376ca6dd6baeafbb91fa3ccd6ed92e21fa42d0bbca99437613b3f2f2987b7e9cd9eb67a0822e400ba1bc56d9039c4492902004e7903d05a709002fcc0c00563788ee95442f14024925633d563a28d0c1b91aa0571d03db392f7f833c3a58884591aa4f25cc6e7931de3c19033b0d807933bcecca173a5ecb742d0bebf1ad64afc7de6293235da64d5520ab84a3a08ab2144f0e34ff896a1ac9f056cfd79a977f90249e6387069d744697d8ccd9713f6ee5d155cbefb46b6f8fc72d36c7d64773ff67646626d12689c297b7c2e2319609802ca426043", 0xf0}], 0x1}, 0x4048043) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, 0x0, &(0x7f00000002c0)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x4, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 392.66889ms ago: executing program 4 (id=4000): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x240081c1}, 0x20000000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 334.538422ms ago: executing program 1 (id=4001): r0 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e5, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) 180.829435ms ago: executing program 1 (id=4002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x3fffffffc}, 0x7, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x107, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000004) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0x3d761324}, {0xa, 0x4e24, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x1000]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e20, 0xfe, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, {0xa, 0x4e23, 0x7, @mcast1, 0xd473}, 0x0, {[0x4, 0x8000, 0x3, 0x3, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b40), r4) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000180)={0x20, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400004c}, 0x804) (async) sendto(r1, &(0x7f0000000200)="bc482618ec6a17bead71c08d", 0xc, 0x24008000, &(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x80) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r5, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb0}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff9}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008011}, 0x40000) 145.374197ms ago: executing program 4 (id=4003): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffe20, 0x45, 0x1, 0x0, 0x3, 0x0, 0x5, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xff, 0xb}, 0x13126, 0x0, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x65, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x4000000006, 0x11000, 0x7, 0x9484, 0x3bf, 0x404, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0xa10844, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000000ac0)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = syz_io_uring_setup(0x759e, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x2, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r2 = getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) epoll_create1(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) socket(0x8000000010, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0x1, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x11, 0x0, 0x4) mknod$loop(&(0x7f0000000180)='./bus\x00', 0x2000, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) creat(0x0, 0x26) 99.995618ms ago: executing program 1 (id=4004): r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x680, 0x4c0, 0x2c8, 0x3f0, 0x1d0, 0x2c8, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @private0, [], [0xffffff00, 0x0, 0xffffff00, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x3, 0x100, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x14}, [0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {0xff}, 0x2b, 0x0, 0x0, 0x2}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0x80, 0x48, 0x1}}, @common=@srh={{0x30}, {0x62, 0xb, 0x2, 0x0, 0x3, 0x424, 0x3022}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xb}}}, {{@ipv6={@private2, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0x0, 0xff, 0xffffffff], 'dummy0\x00', 'team_slave_0\x00', {}, {}, 0x13, 0x1, 0x0, 0x4}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv4=@multicast2, 0xb, 0x19, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xee) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000040)='./file1/file0\x00', 0x0, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x200, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000000002010200000000000000000a000000040003803c0002802c00018014000300fc00000000000000400c4a993f4e303714000400fe8000000000000000000000000000120c000280050001000600000004000180"], 0x58}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r3 = memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r9 = dup(r8) ioctl$PTP_PEROUT_REQUEST2(r9, 0x40383d0c, &(0x7f0000000280)={{0xeb4, 0x7}, {0x4, 0x8007}, 0x10000004, 0x4005}) kernel console output (not intermixed with test programs): 0006) [ 322.485051][T17228] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 322.495312][T17228] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 322.701036][T17231] loop6: detected capacity change from 0 to 764 [ 322.708622][T17231] Symlink component flag not implemented [ 322.714299][T17231] Symlink component flag not implemented [ 322.729686][T17231] lo speed is unknown, defaulting to 1000 [ 322.759762][ T28] audit: type=1400 audit(2000000104.555:6207): avc: denied { recv } for pid=17230 comm="syz.6.3310" saddr=10.128.0.163 src=34990 daddr=10.128.0.123 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 322.864485][T17235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=17235 comm=syz.6.3311 [ 322.950312][T17239] tipc: Started in network mode [ 322.956320][T17239] tipc: Node identity 0047a2b78a0000000000000000000001, cluster identity 4711 [ 322.977748][T17239] tipc: Enabling of bearer rejected, failed to enable media [ 323.045448][T17241] loop8: detected capacity change from 0 to 1024 [ 323.064177][T17241] EXT4-fs: Ignoring removed orlov option [ 323.103122][T17241] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.267375][T17241] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.414807][T17258] loop3: detected capacity change from 0 to 512 [ 323.430237][ T7823] IPVS: starting estimator thread 0... [ 323.436611][T17258] EXT4-fs: Ignoring removed oldalloc option [ 323.453948][T17258] EXT4-fs: Ignoring removed nobh option [ 323.475188][T17258] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.3320: iget: bad extra_isize 90 (inode size 256) [ 323.486714][T17267] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 323.502357][T17258] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 323.502897][T17258] EXT4-fs (loop3): Remounting filesystem read-only [ 323.506073][T17267] SELinux: failed to load policy [ 323.512035][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 323.512052][ C0] EXT4-fs (loop3): initial error at time 2000000105: ext4_xattr_inode_iget:441 [ 323.520451][T17262] netlink: 1319 bytes leftover after parsing attributes in process `syz.8.3321'. [ 323.523483][ C0] : inode 11 [ 323.523503][ C0] EXT4-fs (loop3): last error at time 2000000105: ext4_xattr_inode_iget:441: inode 11 [ 323.561759][T17264] IPVS: using max 2688 ests per chain, 134400 per kthread [ 323.571513][T17258] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 323.590642][T17258] EXT4-fs (loop3): 1 orphan inode deleted [ 323.597780][T17258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.848198][T17276] netlink: 'syz.4.3323': attribute type 21 has an invalid length. [ 323.863892][T17276] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3323'. [ 323.875140][T17276] netlink: 'syz.4.3323': attribute type 4 has an invalid length. [ 323.884371][T17276] netlink: 'syz.4.3323': attribute type 3 has an invalid length. [ 323.893041][T17276] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3323'. [ 323.946083][T17282] loop8: detected capacity change from 0 to 8192 [ 323.991996][T11541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.066673][T17284] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 324.087021][T17284] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 324.100249][T17284] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3327: Corrupt directory, running e2fsck is recommended [ 324.128371][T17284] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 324.133046][T17293] Cannot find set identified by id 0 to match [ 324.137773][T17284] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.3327: corrupted in-inode xattr: e_name out of bounds [ 324.158105][T17284] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 324.160576][T17284] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3327: couldn't read orphan inode 15 (err -117) [ 324.169825][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 324.169898][ C1] EXT4-fs (loop3): initial error at time 2000000105: ext4_iget_extra_inode:5128: inode 15 [ 324.170024][ C1] EXT4-fs (loop3): last error at time 2000000105: ext4_iget_extra_inode:5128: inode 15 [ 324.239478][T17284] loop3: lost filesystem error report for type 5 error -117 [ 324.273843][T17297] vfat: Unknown parameter '' [ 324.310767][T17282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.333236][T17282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.353689][T17284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.477923][T17319] xt_NFQUEUE: number of queues (65533) out of range (got 65539) [ 324.594112][T17327] tipc: Started in network mode [ 324.609766][T17327] tipc: Node identity e4270009, cluster identity 4711 [ 324.628942][T17327] tipc: Node number set to 3827761161 [ 324.686086][T11541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.722321][T17316] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17316 comm=syz.6.3341 [ 324.745040][T17343] lo speed is unknown, defaulting to 1000 [ 324.771335][T17345] usb usb7: check_ctrlrecip: process 17345 (syz.3.3352) requesting ep 01 but needs 81 [ 324.798347][T17345] usb usb7: usbfs: process 17345 (syz.3.3352) did not claim interface 0 before use [ 324.899774][T17364] syzkaller0: entered promiscuous mode [ 324.905332][T17364] syzkaller0: entered allmulticast mode [ 324.979944][T17366] FAULT_INJECTION: forcing a failure. [ 324.979944][T17366] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 324.993898][T17366] CPU: 0 UID: 0 PID: 17366 Comm: syz.1.3359 Tainted: G W syzkaller #0 PREEMPT(full) [ 324.993952][T17366] Tainted: [W]=WARN [ 324.993959][T17366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 324.993971][T17366] Call Trace: [ 324.994026][T17366] [ 324.994034][T17366] __dump_stack+0x1d/0x30 [ 324.994074][T17366] dump_stack_lvl+0x95/0xd0 [ 324.994089][T17366] dump_stack+0x15/0x1b [ 324.994136][T17366] should_fail_ex+0x263/0x280 [ 324.994157][T17366] should_fail_alloc_page+0xf2/0x100 [ 324.994186][T17366] __alloc_frozen_pages_noprof+0x108/0x350 [ 324.994211][T17366] alloc_pages_mpol+0xb3/0x260 [ 324.994273][T17366] alloc_pages_noprof+0x8f/0x140 [ 324.994294][T17366] __pud_alloc+0x47/0x460 [ 324.994318][T17366] handle_mm_fault+0x1eac/0x2e70 [ 324.994390][T17366] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 324.994418][T17366] do_user_addr_fault+0x3fd/0x1050 [ 324.994449][T17366] exc_page_fault+0x62/0xa0 [ 324.994472][T17366] asm_exc_page_fault+0x26/0x30 [ 324.994488][T17366] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 324.994573][T17366] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 1e 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 324.994605][T17366] RSP: 0018:ffffc90005713dc8 EFLAGS: 00050216 [ 324.994619][T17366] RAX: ffff888143ae5ff8 RBX: 0000000000000030 RCX: 0000000000000030 [ 324.994651][T17366] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: ffffc90005713e00 [ 324.994662][T17366] RBP: ffffc90005713ec0 R08: 000000000000058b R09: 0000000000000000 [ 324.994673][T17366] R10: 0001c90005713e00 R11: 0001c90005713e2f R12: 000000000000011f [ 324.994686][T17366] R13: 00002000000003c0 R14: ffffc90005713e00 R15: 00002000000003c0 [ 324.994706][T17366] _copy_from_user+0x6f/0xb0 [ 324.994761][T17366] __se_sys_rt_tgsigqueueinfo+0x5d/0x420 [ 324.994785][T17366] ? mutex_unlock+0x4e/0x90 [ 324.994807][T17366] ? fput+0x8f/0xc0 [ 324.994823][T17366] __x64_sys_rt_tgsigqueueinfo+0x55/0x70 [ 324.994890][T17366] x64_sys_call+0x150e/0x3020 [ 324.994908][T17366] do_syscall_64+0x12c/0x3b0 [ 324.994927][T17366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.994984][T17366] RIP: 0033:0x7f151832cdd9 [ 324.995042][T17366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.995059][T17366] RSP: 002b:00007f1516d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 324.995074][T17366] RAX: ffffffffffffffda RBX: 00007f15185a5fa0 RCX: 00007f151832cdd9 [ 324.995086][T17366] RDX: 0000000000000021 RSI: 0000000000000120 RDI: 000000000000011f [ 324.995099][T17366] RBP: 00007f1516d87090 R08: 0000000000000000 R09: 0000000000000000 [ 324.995170][T17366] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 324.995183][T17366] R13: 00007f15185a6038 R14: 00007f15185a5fa0 R15: 00007fff095af648 [ 324.995202][T17366] [ 325.299344][T17368] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.313466][T17368] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.358437][T17371] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 325.379132][T15292] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.437539][ T28] audit: type=1400 audit(2000000107.119:6208): avc: denied { write } for pid=17376 comm="syz.8.3363" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 325.488233][T17381] FAULT_INJECTION: forcing a failure. [ 325.488233][T17381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.501524][T17381] CPU: 0 UID: 0 PID: 17381 Comm: syz.3.3365 Tainted: G W syzkaller #0 PREEMPT(full) [ 325.501598][T17381] Tainted: [W]=WARN [ 325.501604][T17381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 325.501614][T17381] Call Trace: [ 325.501620][T17381] [ 325.501628][T17381] __dump_stack+0x1d/0x30 [ 325.501651][T17381] dump_stack_lvl+0x95/0xd0 [ 325.501668][T17381] dump_stack+0x15/0x1b [ 325.501736][T17381] should_fail_ex+0x263/0x280 [ 325.501800][T17381] should_fail+0xb/0x20 [ 325.501821][T17381] should_fail_usercopy+0x1a/0x20 [ 325.501847][T17381] _copy_from_user+0x1c/0xb0 [ 325.501920][T17381] kstrtouint_from_user+0x69/0xf0 [ 325.501944][T17381] ? 0xffffffff81000000 [ 325.501958][T17381] ? selinux_file_permission+0x1e1/0x320 [ 325.502018][T17381] proc_fail_nth_write+0x50/0x160 [ 325.502044][T17381] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 325.502064][T17381] vfs_write+0x269/0x9f0 [ 325.502096][T17381] ? __rcu_read_unlock+0x4e/0x70 [ 325.502116][T17381] ? __fget_files+0x184/0x1c0 [ 325.502198][T17381] ? mutex_lock+0x57/0x90 [ 325.502227][T17381] ksys_write+0xdc/0x1a0 [ 325.502252][T17381] __x64_sys_write+0x40/0x50 [ 325.502277][T17381] x64_sys_call+0x27e1/0x3020 [ 325.502316][T17381] do_syscall_64+0x12c/0x3b0 [ 325.502339][T17381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.502359][T17381] RIP: 0033:0x7f581844d60e [ 325.502374][T17381] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 325.502440][T17381] RSP: 002b:00007f5816edefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 325.502457][T17381] RAX: ffffffffffffffda RBX: 00007f5816edf6c0 RCX: 00007f581844d60e [ 325.502467][T17381] RDX: 0000000000000001 RSI: 00007f5816edf0a0 RDI: 0000000000000004 [ 325.502478][T17381] RBP: 00007f5816edf090 R08: 0000000000000000 R09: 0000000000000000 [ 325.502488][T17381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.502497][T17381] R13: 00007f5818706038 R14: 00007f5818705fa0 R15: 00007fffb73205e8 [ 325.502570][T17381] [ 325.770675][T17386] set_capacity_and_notify: 3 callbacks suppressed [ 325.770688][T17386] loop6: detected capacity change from 0 to 1024 [ 325.786637][T17386] EXT4-fs: Ignoring removed orlov option [ 325.932949][T17398] loop8: detected capacity change from 0 to 4096 [ 325.940455][T17398] EXT4-fs: Ignoring removed bh option [ 326.034759][T17398] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.058248][T17386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.076247][T17398] EXT4-fs error (device loop8): ext4_empty_dir:3101: inode #12: block 80: comm syz.8.3363: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 326.096005][T17398] EXT4-fs (loop8): Remounting filesystem read-only [ 326.102810][T17398] EXT4-fs warning (device loop8): ext4_empty_dir:3104: inode #12: comm syz.8.3363: directory missing '..' [ 326.136436][ T28] audit: type=1400 audit(2000000107.717:6209): avc: denied { rename } for pid=17376 comm="syz.8.3363" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 326.254284][ T28] audit: type=1400 audit(2000000107.755:6210): avc: denied { create } for pid=17376 comm="syz.8.3363" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 326.555619][T17414] netlink: 'syz.3.3377': attribute type 1 has an invalid length. [ 326.568017][T14953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.577026][ T28] audit: type=1400 audit(2000000108.167:6211): avc: denied { append } for pid=17412 comm="syz.3.3377" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 326.621468][T17407] syzkaller0: entered promiscuous mode [ 326.658447][T17407] syzkaller0: entered allmulticast mode [ 326.722379][T17419] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 326.761216][T17419] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 326.823124][T17414] bond4: (slave bridge5): Enslaving as an active interface with a down link [ 326.846548][T17429] netlink: 'syz.4.3383': attribute type 3 has an invalid length. [ 326.890164][T17427] bond4: (slave gretap1): making interface the new active one [ 326.899504][T17429] __nla_validate_parse: 9 callbacks suppressed [ 326.899516][T17429] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3383'. [ 326.923242][T17427] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 326.957629][T17429] loop4: detected capacity change from 0 to 512 [ 326.966387][T17419] macvlan3: entered promiscuous mode [ 326.976867][T17419] macvlan3: entered allmulticast mode [ 326.982901][T17429] EXT4-fs: Ignoring removed orlov option [ 327.011055][T17419] bond4: entered promiscuous mode [ 327.017129][T17429] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 327.029287][T17419] gretap1: entered promiscuous mode [ 327.038274][T17429] EXT4-fs (loop4): invalid journal inode [ 327.046154][T17419] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 327.068308][T17419] bond4: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 327.093172][T17419] bond4: left promiscuous mode [ 327.108769][T17419] gretap1: left promiscuous mode [ 327.255601][T15292] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.269795][T17433] lo speed is unknown, defaulting to 1000 [ 327.282734][T17443] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3386'. [ 327.348317][T17447] xfrm1: entered allmulticast mode [ 327.366461][T17449] loop8: detected capacity change from 0 to 1024 [ 327.392861][T17449] EXT4-fs: Ignoring removed bh option [ 327.434715][T17449] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.531411][T17459] netlink: 'syz.1.3390': attribute type 1 has an invalid length. [ 327.555831][T15292] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.618796][T17459] tap0: tun_chr_ioctl cmd 2147767520 [ 327.637858][ T40] bridge_slave_1: left allmulticast mode [ 327.646339][ T40] bridge_slave_1: left promiscuous mode [ 327.657717][T17474] loop3: detected capacity change from 0 to 1024 [ 327.658109][T17466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3391'. [ 327.664228][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.682092][T17474] EXT4-fs: test_dummy_encryption option not supported [ 327.689585][ T40] bridge_slave_0: left allmulticast mode [ 327.695298][ T40] bridge_slave_0: left promiscuous mode [ 327.701400][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.743620][ T28] audit: type=1400 audit(2000000109.271:6212): avc: denied { map } for pid=17450 comm="syz.4.3391" path="socket:[52670]" dev="sockfs" ino=52670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 327.889936][T17478] loop3: detected capacity change from 0 to 512 [ 327.995204][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.004871][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.014013][ T40] bond0 (unregistering): Released all slaves [ 328.014689][T17478] EXT4-fs (loop3): 1 orphan inode deleted [ 328.026583][T17478] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.029048][T17451] lo speed is unknown, defaulting to 1000 [ 328.052116][T17466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.063554][T17466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.106935][T17433] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.113999][T17433] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.117346][ T5451] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 328.121322][T17433] bridge_slave_0: entered allmulticast mode [ 328.137332][T17433] bridge_slave_0: entered promiscuous mode [ 328.147537][ T5451] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:14: Failed to release dquot type 1 [ 328.151444][T17433] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.166638][T17433] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.173874][T17433] bridge_slave_1: entered allmulticast mode [ 328.180564][T17433] bridge_slave_1: entered promiscuous mode [ 328.193825][ T40] tipc: Disabling bearer [ 328.202480][ T40] tipc: Left network mode [ 328.218354][T17433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.230379][T17433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.275516][ T40] hsr_slave_0: left promiscuous mode [ 328.289223][ T40] hsr_slave_1: left promiscuous mode [ 328.295352][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.302822][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.334618][ T40] team0 (unregistering): Port device team_slave_1 removed [ 328.344146][ T40] team0 (unregistering): Port device team_slave_0 removed [ 328.373395][T17433] team0: Port device team_slave_0 added [ 328.379804][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 328.395922][T17433] team0: Port device team_slave_1 added [ 328.416973][T17433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.424367][T17433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.451519][T17433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.462845][T17433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.469981][T17433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.497106][T17433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.589162][T17433] hsr_slave_0: entered promiscuous mode [ 328.606211][T17433] hsr_slave_1: entered promiscuous mode [ 328.612017][T17433] debugfs: 'hsr0' already exists in 'hsr' [ 328.625675][T17433] Cannot create hsr debugfs directory [ 328.652283][T17507] tipc: Started in network mode [ 328.674668][T17507] tipc: Node identity ac14140f, cluster identity 4711 [ 328.692334][T17507] tipc: Enabled bearer , priority 10 [ 328.755593][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 328.833811][ T28] audit: type=1400 audit(2000000110.291:6213): avc: denied { mounton } for pid=17527 comm="syz.3.3402" path="/proc/755/cgroup" dev="proc" ino=52798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 328.864463][T17526] loop8: detected capacity change from 0 to 128 [ 328.865759][T17528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3402'. [ 328.905957][T17528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3402'. [ 328.929846][T17534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3402'. [ 328.994243][T17539] FAULT_INJECTION: forcing a failure. [ 328.994243][T17539] name failslab, interval 1, probability 0, space 0, times 0 [ 329.049046][T17539] CPU: 1 UID: 0 PID: 17539 Comm: syz.3.3404 Tainted: G W syzkaller #0 PREEMPT(full) [ 329.049073][T17539] Tainted: [W]=WARN [ 329.049079][T17539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.049109][T17539] Call Trace: [ 329.049115][T17539] [ 329.049123][T17539] __dump_stack+0x1d/0x30 [ 329.049164][T17539] dump_stack_lvl+0x95/0xd0 [ 329.049292][T17539] dump_stack+0x15/0x1b [ 329.049354][T17539] should_fail_ex+0x263/0x280 [ 329.049438][T17539] ? call_usermodehelper_setup+0x72/0x190 [ 329.049465][T17539] should_failslab+0x8c/0xb0 [ 329.049514][T17539] ? __pfx_free_modprobe_argv+0x10/0x10 [ 329.049532][T17539] __kmalloc_cache_noprof+0x5f/0x400 [ 329.049557][T17539] ? __pfx_free_modprobe_argv+0x10/0x10 [ 329.049579][T17539] call_usermodehelper_setup+0x72/0x190 [ 329.049627][T17539] __request_module+0x264/0x3c0 [ 329.049644][T17539] ? snd_seq_info_dump_subscribers+0x234/0x280 [ 329.049795][T17539] snd_request_card+0x76/0x90 [ 329.049823][T17539] client_load_and_use_ptr+0x213/0x5e0 [ 329.049843][T17539] snd_seq_info_clients_read+0xd1/0x590 [ 329.049973][T17539] ? __pfx_snd_seq_info_clients_read+0x10/0x10 [ 329.049993][T17539] snd_info_seq_show+0x81/0xa0 [ 329.050013][T17539] traverse+0x149/0x3a0 [ 329.050096][T17539] seq_lseek+0xb5/0x170 [ 329.050175][T17539] proc_reg_llseek+0x10c/0x180 [ 329.050274][T17539] __x64_sys_lseek+0xe8/0x160 [ 329.050366][T17539] x64_sys_call+0x27ec/0x3020 [ 329.050383][T17539] do_syscall_64+0x12c/0x3b0 [ 329.050402][T17539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.050471][T17539] RIP: 0033:0x7f581848cdd9 [ 329.050487][T17539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.050503][T17539] RSP: 002b:00007f5816edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 329.050519][T17539] RAX: ffffffffffffffda RBX: 00007f5818705fa0 RCX: 00007f581848cdd9 [ 329.050599][T17539] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000003 [ 329.050642][T17539] RBP: 00007f5816edf090 R08: 0000000000000000 R09: 0000000000000000 [ 329.050655][T17539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.050668][T17539] R13: 00007f5818706038 R14: 00007f5818705fa0 R15: 00007fffb73205e8 [ 329.050687][T17539] [ 329.305399][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 329.522063][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 329.554004][ T28] audit: type=1400 audit(2000000110.945:6214): avc: denied { read } for pid=17566 comm="syz.1.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 329.616012][T17433] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 329.630728][T17433] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.639950][T17433] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 329.655363][T17433] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.676555][T17433] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 329.700816][T17433] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.717054][T17433] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 330.191837][T17433] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.201563][ T3376] tipc: Node number set to 2886997007 [ 330.251316][T17433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.265834][T17433] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.279863][ T5445] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.286967][ T5445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.317675][ T5445] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.324763][ T5445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.381612][T17611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.402218][T17611] team0: Port device batadv0 added [ 330.616591][T17654] loop3: detected capacity change from 0 to 512 [ 330.616983][T17433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.639338][T17654] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 330.652724][T17659] IPv6: NLM_F_CREATE should be specified when creating new route [ 330.662975][T17661] loop4: detected capacity change from 0 to 512 [ 330.677558][T17654] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3418: bg 0: block 104: invalid block bitmap [ 330.690391][T17654] loop3: lost filesystem error report for type 5 error -117 [ 330.695460][T17654] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 330.702837][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 330.702851][ C1] EXT4-fs (loop3): initial error at time 2000000112: ext4_validate_block_bitmap:432 [ 330.702882][ C1] EXT4-fs (loop3): last error at time 2000000112: ext4_validate_block_bitmap:432 [ 330.724335][T17661] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 330.735280][T17654] loop3: lost filesystem error report for type 5 error -117 [ 330.745501][T17661] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 330.754352][T17654] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3418: invalid indirect mapped block 1 (level 1) [ 330.806434][T17654] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 330.808395][T17654] EXT4-fs (loop3): 1 truncate cleaned up [ 330.944358][ T28] audit: type=1400 audit(2000000112.265:6215): avc: denied { name_connect } for pid=17653 comm="syz.3.3418" dest=20000 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 330.961677][T17433] veth0_vlan: entered promiscuous mode [ 330.995633][T17433] veth1_vlan: entered promiscuous mode [ 331.064032][T17433] veth0_macvtap: entered promiscuous mode [ 331.074131][T17694] vhci_hcd vhci_hcd.0: invalid port number 128 [ 331.086000][T17697] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3423'. [ 331.117641][T17433] veth1_macvtap: entered promiscuous mode [ 331.125411][T17694] vhci_hcd vhci_hcd.0: default hub control req: 0030 v0001 i0080 l0 [ 331.189835][T17433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.245631][T17433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.290163][ T5442] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.432384][ T5442] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.505124][ T5442] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.572767][ T5442] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.673949][ T28] audit: type=1326 audit(2000000113.884:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.3.3430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581848cdd9 code=0x7ffc0000 [ 332.695805][T17714] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3430'. [ 332.699786][ T28] audit: type=1326 audit(2000000113.884:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.3.3430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581848cdd9 code=0x7ffc0000 [ 332.758892][ T28] audit: type=1326 audit(2000000113.884:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.3.3430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f581848cdd9 code=0x7ffc0000 [ 332.788572][ T28] audit: type=1326 audit(2000000113.893:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.3.3430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581848cdd9 code=0x7ffc0000 [ 332.814581][ T28] audit: type=1326 audit(2000000113.902:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.3.3430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f581848cdd9 code=0x7ffc0000 [ 332.864584][T17724] loop8: detected capacity change from 0 to 512 [ 332.929157][T17714] lo speed is unknown, defaulting to 1000 [ 332.964862][ T3392] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 332.989804][ T3392] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 333.044610][T17734] loop9: detected capacity change from 0 to 512 [ 333.062510][T17734] EXT4-fs: Ignoring removed bh option [ 333.077982][T17734] EXT4-fs: inline encryption not supported [ 333.097005][T17734] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 333.138437][T17734] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 333.152538][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 333.152551][ T28] audit: type=1326 audit(2000000114.333:6275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.3.3430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581848cdd9 code=0x7ffc0000 [ 333.188722][T17734] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3431: bg 0: block 248: padding at end of block bitmap is not set [ 333.210129][T17734] loop9: lost filesystem error report for type 5 error -117 [ 333.210283][ T28] audit: type=1326 audit(2000000114.333:6276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.3.3430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581848cdd9 code=0x7ffc0000 [ 333.211729][T17734] Quota error (device loop9): write_blk: dquota write failed [ 333.217643][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 333.257070][ C1] EXT4-fs (loop9): last error at time 2000000114: ext4_validate_block_bitmap:441 [ 333.274812][T17734] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 333.284764][T17734] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.3431: Failed to acquire dquot type 1 [ 333.296002][T17734] loop9: lost filesystem error report for type 5 error -28 [ 333.299685][T17734] EXT4-fs (loop9): 1 truncate cleaned up [ 333.315154][T17734] EXT4-fs mount: 4 callbacks suppressed [ 333.315166][T17734] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 333.410992][T17768] netlink: 'syz.3.3439': attribute type 21 has an invalid length. [ 333.431502][T17768] IPv6: NLM_F_CREATE should be specified when creating new route [ 333.530151][T17786] loop3: detected capacity change from 0 to 512 [ 333.563632][T17786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.586894][T17786] FAULT_INJECTION: forcing a failure. [ 333.586894][T17786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.601216][T17786] CPU: 0 UID: 0 PID: 17786 Comm: syz.3.3442 Tainted: G W syzkaller #0 PREEMPT(full) [ 333.601250][T17786] Tainted: [W]=WARN [ 333.601257][T17786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 333.601268][T17786] Call Trace: [ 333.601275][T17786] [ 333.601283][T17786] __dump_stack+0x1d/0x30 [ 333.601312][T17786] dump_stack_lvl+0x95/0xd0 [ 333.601330][T17786] dump_stack+0x15/0x1b [ 333.601348][T17786] should_fail_ex+0x263/0x280 [ 333.601385][T17786] should_fail+0xb/0x20 [ 333.601407][T17786] should_fail_usercopy+0x1a/0x20 [ 333.601448][T17786] _copy_from_user+0x1c/0xb0 [ 333.601469][T17786] ext4_ioctl+0x18ec/0x31b0 [ 333.601536][T17786] ? file_ioctl+0x146/0x5c0 [ 333.601605][T17786] ? ioctl_has_perm+0x27e/0x2d0 [ 333.601631][T17786] ? do_vfs_ioctl+0x7c9/0xe70 [ 333.601656][T17786] ? selinux_file_ioctl+0x338/0x3b0 [ 333.601679][T17786] ? __fget_files+0x184/0x1c0 [ 333.601716][T17786] ? mutex_lock+0x57/0x90 [ 333.601835][T17786] ? __pfx_ext4_ioctl+0x10/0x10 [ 333.601926][T17786] __se_sys_ioctl+0xce/0x140 [ 333.601999][T17786] __x64_sys_ioctl+0x43/0x50 [ 333.602023][T17786] x64_sys_call+0x1563/0x3020 [ 333.602043][T17786] do_syscall_64+0x12c/0x3b0 [ 333.602067][T17786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.602153][T17786] RIP: 0033:0x7f581848cdd9 [ 333.602168][T17786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.602185][T17786] RSP: 002b:00007f5816edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.602202][T17786] RAX: ffffffffffffffda RBX: 00007f5818705fa0 RCX: 00007f581848cdd9 [ 333.602268][T17786] RDX: 0000000000000000 RSI: 000000004008662c RDI: 0000000000000004 [ 333.602279][T17786] RBP: 00007f5816edf090 R08: 0000000000000000 R09: 0000000000000000 [ 333.602288][T17786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.602298][T17786] R13: 00007f5818706038 R14: 00007f5818705fa0 R15: 00007fffb73205e8 [ 333.602329][T17786] [ 333.857061][T11541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.039923][T17803] loop8: detected capacity change from 0 to 4096 [ 334.097203][T17816] netlink: 'syz.1.3449': attribute type 21 has an invalid length. [ 334.121601][T17803] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.146141][T17816] IPv6: NLM_F_CREATE should be specified when creating new route [ 334.182289][T17433] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 334.219095][T17816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.226327][T17816] IPv6: NLM_F_CREATE should be set when creating new route [ 334.282415][T15292] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.368639][T17832] loop4: detected capacity change from 0 to 1024 [ 334.387161][T17832] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 334.419053][T17832] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 334.474069][T17832] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.3454: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 334.531066][T17842] loop9: detected capacity change from 0 to 512 [ 334.538362][T17842] EXT4-fs: inline encryption not supported [ 334.544597][T17842] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 334.589765][T17832] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 334.589959][T17832] EXT4-fs (loop4): Remounting filesystem read-only [ 334.605656][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 334.605671][ C0] EXT4-fs (loop4): initial error at time 2000000115: ext4_ext_check_inode:521: inode 11 [ 334.605711][ C0] EXT4-fs (loop4): last error at time 2000000115: ext4_ext_check_inode:521: inode 11 [ 334.705704][T17842] EXT4-fs (loop9): orphan cleanup on readonly fs [ 334.727098][T17832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.743797][T17842] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 334.760824][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 334.767274][ C1] EXT4-fs (loop9): initial error at time 2000000115: mb_free_blocks:2049: inode 12: block 14 [ 334.777485][ C1] EXT4-fs (loop9): last error at time 2000000115: mb_free_blocks:2049: inode 12: block 14 [ 334.793208][T17842] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.3451: corrupted inode contents [ 334.809363][T17842] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 334.809490][T17842] EXT4-fs error (device loop9): ext4_dirty_inode:6587: inode #12: comm syz.9.3451: mark_inode_dirty error [ 334.830423][T14599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.877433][T17842] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 334.879214][T17842] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.3451: corrupted inode contents [ 334.914921][T17860] loop3: detected capacity change from 0 to 512 [ 334.927176][T17842] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 334.927370][T17842] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #12: comm syz.9.3451: mark_inode_dirty error [ 334.953542][T17860] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 334.962280][T17842] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 334.963226][T17842] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.3451: corrupted inode contents [ 334.984255][T17842] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 334.984400][T17842] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 335.002128][T17842] loop9: lost filesystem error report for type 5 error -117 [ 335.006873][T17842] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.3451: corrupted inode contents [ 335.026429][T17842] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 335.026569][T17842] EXT4-fs error (device loop9): ext4_truncate:4690: inode #12: comm syz.9.3451: mark_inode_dirty error [ 335.047879][T17842] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 335.048083][T17842] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 335.088112][T17876] netlink: 324 bytes leftover after parsing attributes in process `syz.8.3461'. [ 335.097247][T17842] loop9: lost filesystem error report for type 5 error -117 [ 335.097487][T17842] EXT4-fs (loop9): 1 truncate cleaned up [ 335.124611][ T5467] Quota error (device loop9): remove_tree: Cycle in quota tree detected: block 3 index 0 [ 335.145720][ T5467] EXT4-fs error (device loop9): ext4_release_dquot:7070: comm kworker/u8:20: Failed to release dquot type 1 [ 335.171953][ T5467] loop9: lost filesystem error report for type 5 error -5 [ 335.173794][T17842] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 335.179436][T17887] loop4: detected capacity change from 0 to 512 [ 335.205792][T17879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.216017][T17842] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 335.235771][T17893] loop8: detected capacity change from 0 to 512 [ 335.242258][T17879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.253707][T17887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.268639][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3462'. [ 335.277814][T17842] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 335.286577][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3462'. [ 335.295939][T17887] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.316206][T17842] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3451'. [ 335.335692][T17887] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 105 vs 96 free clusters [ 335.368008][T17842] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3451'. [ 335.424939][T17433] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.437095][T14599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.439635][T17907] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3468'. [ 335.448511][T17910] netlink: 92 bytes leftover after parsing attributes in process `syz.8.3469'. [ 335.498441][T17907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.534998][T17923] loop8: detected capacity change from 0 to 256 [ 335.555074][T17907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.612135][T17907] bond0 (unregistering): Released all slaves [ 335.619781][T17923] FAT-fs (loop8): Directory bread(block 64) failed [ 335.626381][T17923] FAT-fs (loop8): Directory bread(block 65) failed [ 335.650872][T17923] FAT-fs (loop8): Directory bread(block 66) failed [ 335.659259][T17936] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3473'. [ 335.674328][T17923] FAT-fs (loop8): Directory bread(block 67) failed [ 335.688161][T17939] vfat: Unknown parameter '' [ 335.688469][T17923] FAT-fs (loop8): Directory bread(block 68) failed [ 335.715242][T17923] FAT-fs (loop8): Directory bread(block 69) failed [ 335.721792][T17923] FAT-fs (loop8): Directory bread(block 70) failed [ 335.732436][T17923] FAT-fs (loop8): Directory bread(block 71) failed [ 335.743709][T17923] FAT-fs (loop8): Directory bread(block 72) failed [ 335.759267][T17923] FAT-fs (loop8): Directory bread(block 73) failed [ 335.945126][T17964] EXT4-fs: inline encryption not supported [ 335.982057][T17964] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 336.034683][T17964] EXT4-fs (loop9): orphan cleanup on readonly fs [ 336.073544][T17964] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 336.096750][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 336.103223][ C1] EXT4-fs (loop9): initial error at time 2000000117: mb_free_blocks:2049: inode 12: block 14 [ 336.113483][ C1] EXT4-fs (loop9): last error at time 2000000117: mb_free_blocks:2049: inode 12: block 14 [ 336.146415][T17964] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.3480: corrupted inode contents [ 336.166396][T17971] netlink: 'syz.3.3482': attribute type 10 has an invalid length. [ 336.183272][T17964] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 336.184327][T17964] EXT4-fs error (device loop9): ext4_dirty_inode:6587: inode #12: comm syz.9.3480: mark_inode_dirty error [ 336.214868][T17964] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 336.215139][T17964] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.3480: corrupted inode contents [ 336.248362][T17964] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 336.248577][T17964] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #12: comm syz.9.3480: mark_inode_dirty error [ 336.282651][T17964] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 336.282814][T17964] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.3480: corrupted inode contents [ 336.319066][T17964] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 336.319206][T17964] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 336.349909][T17964] loop9: lost filesystem error report for type 5 error -117 [ 336.350113][T17964] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.3480: corrupted inode contents [ 336.392102][T17964] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 336.392274][T17964] EXT4-fs error (device loop9): ext4_truncate:4690: inode #12: comm syz.9.3480: mark_inode_dirty error [ 336.431838][T17964] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 336.431984][T17964] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 336.463206][T17964] loop9: lost filesystem error report for type 5 error -117 [ 336.463547][T17964] EXT4-fs (loop9): 1 truncate cleaned up [ 336.482730][ T5442] Quota error (device loop9): remove_tree: Cycle in quota tree detected: block 3 index 0 [ 336.497285][ T5442] EXT4-fs error (device loop9): ext4_release_dquot:7070: comm kworker/u8:10: Failed to release dquot type 1 [ 336.530588][ T5442] loop9: lost filesystem error report for type 5 error -5 [ 336.531393][T17964] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 336.535052][T17981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3487'. [ 336.568686][T17964] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 336.610420][T17964] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 336.685225][T17433] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.448726][T18017] set_capacity_and_notify: 2 callbacks suppressed [ 338.448740][T18017] loop9: detected capacity change from 0 to 1024 [ 338.531874][T18017] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 338.543935][ T28] audit: type=1326 audit(2000000119.385:6277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.1.3499" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151832cdd9 code=0x7ffc0000 [ 338.569444][ T28] audit: type=1326 audit(2000000119.385:6278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.1.3499" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151832cdd9 code=0x7ffc0000 [ 338.589590][T18021] __nla_validate_parse: 3 callbacks suppressed [ 338.589603][T18021] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3499'. [ 338.599508][ T28] audit: type=1326 audit(2000000119.404:6279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.1.3499" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f151832cdd9 code=0x7ffc0000 [ 338.645354][T18017] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 2: comm syz.9.3497: lblock 2 mapped to illegal pblock 2 (length 1) [ 338.683124][ T28] audit: type=1326 audit(2000000119.404:6280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.1.3499" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151832cdd9 code=0x7ffc0000 [ 338.708795][ T28] audit: type=1326 audit(2000000119.404:6281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.1.3499" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f151832cdd9 code=0x7ffc0000 [ 338.734300][ T28] audit: type=1326 audit(2000000119.404:6282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.1.3499" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151832cdd9 code=0x7ffc0000 [ 338.737729][T18017] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 338.759910][ T28] audit: type=1326 audit(2000000119.404:6283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.1.3499" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f151832cdd9 code=0x7ffc0000 [ 338.759933][ T28] audit: type=1326 audit(2000000119.404:6284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.1.3499" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151832cdd9 code=0x7ffc0000 [ 338.759956][ T28] audit: type=1326 audit(2000000119.413:6285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.1.3499" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f151832cdd9 code=0x7ffc0000 [ 338.760022][ T28] audit: type=1326 audit(2000000119.413:6286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.1.3499" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151832cdd9 code=0x7ffc0000 [ 338.938358][T18033] syzkaller1: entered promiscuous mode [ 338.946096][T18017] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 48: comm syz.9.3497: lblock 0 mapped to illegal pblock 48 (length 1) [ 338.960261][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 338.960286][ C0] EXT4-fs (loop9): initial error at time 2000000119: ext4_map_blocks:791: inode 3: block 2 [ 338.960324][ C0] EXT4-fs (loop9): last error at time 2000000119: ext4_map_blocks:791: inode 3: block 2 [ 338.971048][T18033] syzkaller1: entered allmulticast mode [ 338.982654][T18017] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 338.999285][T18017] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.3497: Failed to acquire dquot type 0 [ 339.030855][T18034] xfrm0 speed is unknown, defaulting to 1000 [ 339.034628][T18021] lo speed is unknown, defaulting to 1000 [ 339.047116][T18036] loop4: detected capacity change from 0 to 512 [ 339.049574][T18017] loop9: lost filesystem error report for type 5 error -117 [ 339.059262][T18017] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 339.097464][T18017] loop9: lost filesystem error report for type 5 error -117 [ 339.097544][T18017] EXT4-fs error (device loop9): ext4_evict_inode:267: inode #11: comm syz.9.3497: mark_inode_dirty error [ 339.099008][T18036] EXT4-fs: Mount option(s) incompatible with ext3 [ 339.123898][T18017] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 339.124077][T18017] EXT4-fs warning (device loop9): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 339.158942][T18017] EXT4-fs (loop9): 1 orphan inode deleted [ 339.165651][T18034] xfrm0 speed is unknown, defaulting to 1000 [ 339.174877][ T2509] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 339.189478][T18034] xfrm0 speed is unknown, defaulting to 1000 [ 339.199124][T18017] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.218931][ T2509] EXT4-fs error (device loop9): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 0 [ 339.294081][T17433] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.318567][T17433] EXT4-fs error (device loop9): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 339.346023][T17433] loop9: lost filesystem error report for type 5 error -117 [ 339.347463][T17433] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 339.394545][T17433] loop9: lost filesystem error report for type 5 error -117 [ 339.397315][T17433] EXT4-fs error (device loop9): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 339.454843][T18034] infiniband syz0: set down [ 339.459459][ T3392] xfrm0 speed is unknown, defaulting to 1000 [ 339.473233][T18034] infiniband syz0: added xfrm0 [ 339.483765][T18049] netlink: 'syz.1.3508': attribute type 8 has an invalid length. [ 339.515469][T18034] RDS/IB: syz0: added [ 339.517014][T18052] netlink: 'syz.1.3510': attribute type 8 has an invalid length. [ 339.524533][T18034] smc: adding ib device syz0 with port count 1 [ 339.533536][T18034] smc: ib device syz0 port 1 has no pnetid [ 339.540275][ T7829] xfrm0 speed is unknown, defaulting to 1000 [ 339.546399][T18034] xfrm0 speed is unknown, defaulting to 1000 [ 339.648187][T18034] xfrm0 speed is unknown, defaulting to 1000 [ 339.674422][T18062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18062 comm=syz.4.3513 [ 339.708777][T18060] loop9: detected capacity change from 0 to 2048 [ 339.732276][T18060] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.754352][T18060] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.759765][T18034] xfrm0 speed is unknown, defaulting to 1000 [ 339.784847][T18060] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3512: bg 0: block 345: padding at end of block bitmap is not set [ 339.800942][T18060] EXT4-fs (loop9): Remounting filesystem read-only [ 339.820936][T17433] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.885413][T18034] xfrm0 speed is unknown, defaulting to 1000 [ 339.930364][T18034] xfrm0 speed is unknown, defaulting to 1000 [ 339.971093][T18034] xfrm0 speed is unknown, defaulting to 1000 [ 340.008049][T18069] netlink: 'syz.9.3515': attribute type 21 has an invalid length. [ 340.037358][T18071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3516'. [ 340.058050][T18071] xt_hashlimit: size too large, truncated to 1048576 [ 340.362053][T18079] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3520'. [ 340.375147][T18079] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3520'. [ 340.421105][T18083] netlink: 'syz.8.3518': attribute type 21 has an invalid length. [ 340.440490][T18086] netlink: 'syz.3.3522': attribute type 21 has an invalid length. [ 340.451689][T18083] IPv6: NLM_F_CREATE should be specified when creating new route [ 340.459872][T18083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.467094][T18083] IPv6: NLM_F_CREATE should be set when creating new route [ 340.496701][T18086] lo speed is unknown, defaulting to 1000 [ 340.558581][T18086] xfrm0 speed is unknown, defaulting to 1000 [ 340.724200][T18110] netlink: 'syz.1.3529': attribute type 2 has an invalid length. [ 340.944003][T18131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18131 comm=syz.3.3537 [ 340.995961][T18134] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3538'. [ 341.156249][T18140] loop9: detected capacity change from 0 to 512 [ 341.180700][T18140] EXT4-fs: Ignoring removed nobh option [ 341.198397][T18140] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 341.216113][T18140] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #13: comm syz.9.3539: inode has both inline data and extents flags [ 341.244659][T18140] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3539: couldn't read orphan inode 13 (err -117) [ 341.253230][T18125] ip6gre0: entered promiscuous mode [ 341.256534][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 341.268138][ C0] EXT4-fs (loop9): initial error at time 2000000121: ext4_orphan_get:1397: inode 13 [ 341.268995][T18125] ip6gre0: entered allmulticast mode [ 341.277552][ C0] EXT4-fs (loop9): last error at time 2000000121: ext4_orphan_get:1397: inode 13 [ 341.292649][T18140] loop9: lost filesystem error report for type 5 error -117 [ 341.293817][T18140] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.948565][T18154] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 341.966216][T18160] FAULT_INJECTION: forcing a failure. [ 341.966216][T18160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.979577][T18160] CPU: 0 UID: 0 PID: 18160 Comm: syz.1.3547 Tainted: G W syzkaller #0 PREEMPT(full) [ 341.979603][T18160] Tainted: [W]=WARN [ 341.979632][T18160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 341.979643][T18160] Call Trace: [ 341.979649][T18160] [ 341.979657][T18160] __dump_stack+0x1d/0x30 [ 341.979748][T18160] dump_stack_lvl+0x95/0xd0 [ 341.979765][T18160] dump_stack+0x15/0x1b [ 341.979783][T18160] should_fail_ex+0x263/0x280 [ 341.979806][T18160] should_fail+0xb/0x20 [ 341.979826][T18160] should_fail_usercopy+0x1a/0x20 [ 341.979896][T18160] _copy_from_iter+0x328/0xea0 [ 341.979922][T18160] ? __alloc_skb+0x200/0x690 [ 341.979951][T18160] netlink_sendmsg+0x4ae/0x6f0 [ 341.980007][T18160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.980090][T18160] ____sys_sendmsg+0x563/0x5b0 [ 341.980115][T18160] ___sys_sendmsg+0x195/0x1e0 [ 341.980204][T18160] __x64_sys_sendmsg+0xd4/0x160 [ 341.980229][T18160] x64_sys_call+0x194c/0x3020 [ 341.980248][T18160] do_syscall_64+0x12c/0x3b0 [ 341.980276][T18160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.980301][T18160] RIP: 0033:0x7f151832cdd9 [ 341.980317][T18160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.980353][T18160] RSP: 002b:00007f1516d87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.980370][T18160] RAX: ffffffffffffffda RBX: 00007f15185a5fa0 RCX: 00007f151832cdd9 [ 341.980384][T18160] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 341.980395][T18160] RBP: 00007f1516d87090 R08: 0000000000000000 R09: 0000000000000000 [ 341.980474][T18160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.980551][T18160] R13: 00007f15185a6038 R14: 00007f15185a5fa0 R15: 00007fff095af648 [ 341.980569][T18160] [ 342.222811][T18169] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 342.232519][T18169] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 342.326433][T18162] loop8: detected capacity change from 0 to 512 [ 342.337527][T17433] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.388722][T18162] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 342.407981][T18162] System zones: 0-2, 18-18, 34-34 [ 342.424095][T18162] EXT4-fs (loop8): 1 orphan inode deleted [ 342.446810][ T5442] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:10: Failed to release dquot type 1 [ 342.459131][T18162] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.486664][T18185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3555'. [ 342.496306][ T5442] loop8: lost filesystem error report for type 5 error -117 [ 342.496489][ T5442] EXT4-fs (loop8): Remounting filesystem read-only [ 342.520296][T18162] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.560686][T18192] netlink: 'syz.1.3556': attribute type 4 has an invalid length. [ 342.569887][T15292] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.744097][T18233] lo: entered promiscuous mode [ 343.804841][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3570'. [ 343.928823][T18236] ALSA: seq fatal error: cannot create timer (-19) [ 343.938872][T18236] loop9: detected capacity change from 0 to 512 [ 343.946901][T18236] EXT4-fs: Ignoring removed orlov option [ 343.952565][T18236] EXT4-fs: Ignoring removed mblk_io_submit option [ 343.966804][T18236] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.3570: corrupted in-inode xattr: e_value size too large [ 343.990306][T18251] loop3: detected capacity change from 0 to 128 [ 343.998869][T18236] fserror_report: 3 callbacks suppressed [ 343.998883][T18236] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 344.012477][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 344.013810][T18251] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 344.021623][ C0] EXT4-fs (loop9): initial error at time 2000000124: ext4_iget_extra_inode:5128: inode 15 [ 344.021669][ C0] EXT4-fs (loop9): last error at time 2000000124: ext4_iget_extra_inode:5128: inode 15 [ 344.067892][T18236] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3570: couldn't read orphan inode 15 (err -117) [ 344.087918][T18236] loop9: lost filesystem error report for type 5 error -117 [ 344.088553][T18236] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.117441][T18251] syz.3.3572 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 344.282191][T18263] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 344.292106][T18263] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 344.305585][T18263] netlink: 'syz.4.3574': attribute type 10 has an invalid length. [ 344.313419][T18263] ipvlan0: entered allmulticast mode [ 344.318786][T18263] veth0_vlan: entered allmulticast mode [ 344.326477][T18263] team0: Device ipvlan0 failed to register rx_handler [ 344.708599][T18232] lo: left promiscuous mode [ 344.710845][T17433] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.950711][T18296] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3578'. [ 346.217191][T18317] loop4: detected capacity change from 0 to 128 [ 346.223800][T18317] EXT4-fs: Ignoring removed oldalloc option [ 346.329269][T18317] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 346.340262][T18317] System zones: 1-3, 19-19, 35-36 [ 346.434993][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 346.435020][ T28] audit: type=1400 audit(2000000126.768:6350): avc: denied { ioctl } for pid=18324 comm="syz.8.3590" path="/dev/uhid" dev="devtmpfs" ino=251 ioctlcmd=0x583f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 346.472840][T18317] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 346.492976][T18317] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 346.657835][ T28] audit: type=1400 audit(2000000126.861:6351): avc: denied { compute_member } for pid=18324 comm="syz.8.3590" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 347.196489][T18343] vcan0: tx address claim with different name [ 347.231605][T18343] vcan0: tx address claim with different name [ 347.309765][T18348] netlink: 'syz.9.3592': attribute type 21 has an invalid length. [ 347.347690][T18350] dvmrp1: entered allmulticast mode [ 347.601850][T14599] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 347.865668][T18364] loop4: detected capacity change from 0 to 512 [ 347.898408][T18364] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 347.924965][T18364] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 347.954616][T18364] EXT4-fs (loop4): mount failed [ 348.351497][T18385] netlink: 'syz.8.3603': attribute type 29 has an invalid length. [ 348.497694][T18389] loop8: detected capacity change from 0 to 512 [ 348.528997][T18389] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.580613][T18389] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.653516][T15292] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.408094][T18427] netlink: 116 bytes leftover after parsing attributes in process `syz.8.3606'. [ 349.428085][T18431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3609'. [ 349.447261][T18427] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3606'. [ 349.458258][ T28] audit: type=1400 audit(2000000129.584:6352): avc: denied { setattr } for pid=18426 comm="syz.8.3606" path="pipe:[55058]" dev="pipefs" ino=55058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 349.483223][T18432] loop4: detected capacity change from 0 to 256 [ 349.538961][T18432] FAT-fs (loop4): Directory bread(block 64) failed [ 349.556571][T18432] FAT-fs (loop4): Directory bread(block 65) failed [ 349.576343][T18432] FAT-fs (loop4): Directory bread(block 66) failed [ 349.604519][T18432] FAT-fs (loop4): Directory bread(block 67) failed [ 349.625948][T18432] FAT-fs (loop4): Directory bread(block 68) failed [ 349.642526][T18432] FAT-fs (loop4): Directory bread(block 69) failed [ 349.649713][T18432] FAT-fs (loop4): Directory bread(block 70) failed [ 349.656287][T18432] FAT-fs (loop4): Directory bread(block 71) failed [ 349.662924][T18432] FAT-fs (loop4): Directory bread(block 72) failed [ 349.669533][T18432] FAT-fs (loop4): Directory bread(block 73) failed [ 349.737851][T18439] loop9: detected capacity change from 0 to 2048 [ 349.796333][T18439] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.869503][T17433] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.005400][T18447] lo speed is unknown, defaulting to 1000 [ 350.070264][ T28] audit: type=1400 audit(2000000130.164:6353): avc: denied { create } for pid=18462 comm="syz.9.3620" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 350.120747][T18447] xfrm0 speed is unknown, defaulting to 1000 [ 350.136656][ T28] audit: type=1400 audit(2000000130.164:6354): avc: denied { create } for pid=18462 comm="syz.9.3620" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 350.170484][ T28] audit: type=1400 audit(2000000130.164:6355): avc: denied { read } for pid=18462 comm="syz.9.3620" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 350.187805][T18459] lo speed is unknown, defaulting to 1000 [ 350.224412][ T28] audit: type=1400 audit(2000000130.164:6356): avc: denied { ioctl } for pid=18462 comm="syz.9.3620" path="socket:[55498]" dev="sockfs" ino=55498 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 350.284608][ T28] audit: type=1400 audit(2000000130.164:6357): avc: denied { write } for pid=18462 comm="syz.9.3620" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 350.328624][ T28] audit: type=1400 audit(2000000130.164:6358): avc: denied { sendto } for pid=18462 comm="syz.9.3620" scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 350.532903][T18465] loop3: detected capacity change from 0 to 512 [ 350.545765][T18459] xfrm0 speed is unknown, defaulting to 1000 [ 350.723172][T18473] 9pnet_fd: Insufficient options for proto=fd [ 350.990297][T18482] loop8: detected capacity change from 0 to 512 [ 351.013389][T18482] ext4: Bad value for 'sb' [ 351.078405][T18487] FAULT_INJECTION: forcing a failure. [ 351.078405][T18487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.107983][T18485] loop9: detected capacity change from 0 to 4096 [ 351.120187][T18487] CPU: 1 UID: 0 PID: 18487 Comm: syz.8.3628 Tainted: G W syzkaller #0 PREEMPT(full) [ 351.120268][T18487] Tainted: [W]=WARN [ 351.120275][T18487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 351.120286][T18487] Call Trace: [ 351.120293][T18487] [ 351.120301][T18487] __dump_stack+0x1d/0x30 [ 351.120321][T18487] dump_stack_lvl+0x95/0xd0 [ 351.120391][T18487] dump_stack+0x15/0x1b [ 351.120410][T18487] should_fail_ex+0x263/0x280 [ 351.120435][T18487] should_fail+0xb/0x20 [ 351.120519][T18487] should_fail_usercopy+0x1a/0x20 [ 351.120540][T18487] _copy_to_user+0x20/0xa0 [ 351.120566][T18487] simple_read_from_buffer+0xb5/0x130 [ 351.120655][T18487] proc_fail_nth_read+0x10e/0x150 [ 351.120682][T18487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.120756][T18487] vfs_read+0x1ab/0x7f0 [ 351.120784][T18487] ? __rcu_read_unlock+0x4e/0x70 [ 351.120801][T18487] ? __fget_files+0x184/0x1c0 [ 351.120816][T18487] ? mutex_lock+0x57/0x90 [ 351.120845][T18487] ksys_read+0xdc/0x1a0 [ 351.120907][T18487] __x64_sys_read+0x40/0x50 [ 351.120932][T18487] x64_sys_call+0x2886/0x3020 [ 351.121002][T18487] do_syscall_64+0x12c/0x3b0 [ 351.121025][T18487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.121046][T18487] RIP: 0033:0x7f9612f6d60e [ 351.121060][T18487] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 351.121076][T18487] RSP: 002b:00007f96119fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 351.121130][T18487] RAX: ffffffffffffffda RBX: 00007f96119ff6c0 RCX: 00007f9612f6d60e [ 351.121142][T18487] RDX: 000000000000000f RSI: 00007f96119ff0a0 RDI: 0000000000000004 [ 351.121153][T18487] RBP: 00007f96119ff090 R08: 0000000000000000 R09: 0000000000000000 [ 351.121163][T18487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.121173][T18487] R13: 00007f9613226038 R14: 00007f9613225fa0 R15: 00007ffcbdaa0a18 [ 351.121191][T18487] [ 351.492898][T18492] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.500154][T18492] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.668785][T18485] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.684403][T18465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.723589][T18465] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.827073][T17433] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.842888][ T28] audit: type=1400 audit(2000000131.811:6359): avc: denied { relabelto } for pid=18445 comm="syz.3.3615" name="bus" dev="tmpfs" ino=1721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:kvm_device_t:s0" [ 351.957737][ T28] audit: type=1400 audit(2000000131.811:6360): avc: denied { associate } for pid=18445 comm="syz.3.3615" name="bus" dev="tmpfs" ino=1721 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:kvm_device_t:s0" [ 352.066649][T18501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32768 sclass=netlink_route_socket pid=18501 comm=syz.4.3632 [ 352.161332][ T28] audit: type=1400 audit(2000000132.101:6361): avc: denied { rmdir } for pid=11541 comm="syz-executor" name="bus" dev="tmpfs" ino=1721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:kvm_device_t:s0" [ 352.195931][T11541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.355334][T18523] netlink: 'syz.1.3640': attribute type 28 has an invalid length. [ 352.473947][T18529] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3642'. [ 352.488512][T18529] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3642'. [ 352.735131][T18541] loop4: detected capacity change from 0 to 512 [ 352.759533][T18541] EXT4-fs: Ignoring removed bh option [ 352.770363][T18541] EXT4-fs: inline encryption not supported [ 352.789358][T18541] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 352.815847][T18541] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 352.845532][T18541] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3645: bg 0: block 248: padding at end of block bitmap is not set [ 352.958608][T18541] loop4: lost filesystem error report for type 5 error -117 [ 352.960472][T18541] Quota error (device loop4): write_blk: dquota write failed [ 352.967808][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 352.967823][ C0] EXT4-fs (loop4): last error at time 2000000132: ext4_validate_block_bitmap:441 [ 353.042174][T18541] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 353.064648][T18541] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.3645: Failed to acquire dquot type 1 [ 353.090175][T18541] loop4: lost filesystem error report for type 5 error -28 [ 353.091289][T18541] EXT4-fs (loop4): 1 truncate cleaned up [ 353.120240][T18541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 353.210141][T14599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 353.229009][ T5467] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 353.242665][ T5467] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:20: Failed to release dquot type 1 [ 353.274920][ T5467] loop4: lost filesystem error report for type 5 error -117 [ 353.890344][T18555] netlink: 'syz.1.3649': attribute type 34 has an invalid length. [ 354.047890][T18563] lo speed is unknown, defaulting to 1000 [ 354.057740][ T28] audit: type=1400 audit(2000000133.879:6362): avc: denied { unmount } for pid=14819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 354.291478][T18563] xfrm0 speed is unknown, defaulting to 1000 [ 355.335309][T18599] loop4: detected capacity change from 0 to 4096 [ 355.396114][T18599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.644008][T18606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.660165][T18606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.893545][T14599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.717924][T18625] loop4: detected capacity change from 0 to 512 [ 356.725740][T18625] EXT4-fs: inline encryption not supported [ 356.793199][T18625] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 356.841314][T18625] EXT4-fs (loop4): orphan cleanup on readonly fs [ 356.858563][T18625] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 356.883663][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 356.890141][ C1] EXT4-fs (loop4): initial error at time 2000000136: mb_free_blocks:2049: inode 12: block 14 [ 356.900309][ C1] EXT4-fs (loop4): last error at time 2000000136: mb_free_blocks:2049: inode 12: block 14 [ 356.919248][T18625] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.3669: corrupted inode contents [ 356.936627][T18625] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 356.936781][T18625] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #12: comm syz.4.3669: mark_inode_dirty error [ 356.957810][T18625] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 356.957950][T18625] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.3669: corrupted inode contents [ 356.979229][T18625] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 356.979409][T18625] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.3669: mark_inode_dirty error [ 357.008593][T18625] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 357.008739][T18625] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.3669: corrupted inode contents [ 357.067918][T18625] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 357.069874][T18625] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 357.088266][T18625] loop4: lost filesystem error report for type 5 error -117 [ 357.088451][T18625] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.3669: corrupted inode contents [ 357.107649][T18625] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 357.107871][T18625] EXT4-fs error (device loop4): ext4_truncate:4690: inode #12: comm syz.4.3669: mark_inode_dirty error [ 357.182129][T18625] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 357.182846][T18625] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 357.209332][T18625] loop4: lost filesystem error report for type 5 error -117 [ 357.210294][T18625] EXT4-fs (loop4): 1 truncate cleaned up [ 357.289552][ T5458] Quota error (device loop4): remove_tree: Cycle in quota tree detected: block 3 index 0 [ 357.301574][ T5458] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:17: Failed to release dquot type 1 [ 357.320011][ T5458] loop4: lost filesystem error report for type 5 error -5 [ 357.322891][T18625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 357.348744][T18643] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=18643 comm=syz.1.3677 [ 357.466869][T18648] netlink: 'syz.1.3677': attribute type 10 has an invalid length. [ 357.483598][T18625] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 357.517067][T18625] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 357.562278][ T28] audit: type=1400 audit(2000000137.173:6363): avc: denied { setopt } for pid=18642 comm="syz.1.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 357.562917][T18625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3669'. [ 357.616418][T18648] veth0_macvtap: left promiscuous mode [ 357.637548][T18651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3669'. [ 358.000375][T14599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.082329][ T28] audit: type=1326 audit(2000000137.669:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18659 comm="syz.4.3681" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6e632cdd9 code=0x0 [ 358.140377][T18660] lo speed is unknown, defaulting to 1000 [ 358.198837][T18660] xfrm0 speed is unknown, defaulting to 1000 [ 358.206797][T18670] loop9: detected capacity change from 0 to 128 [ 358.274985][T18670] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3685'. [ 358.317974][T18670] bridge1: port 1(veth3) entered blocking state [ 358.324469][T18670] bridge1: port 1(veth3) entered disabled state [ 358.331098][T18670] veth3: entered allmulticast mode [ 358.345362][T18670] veth3: entered promiscuous mode [ 358.438895][T18670] bridge1: port 2(veth0_to_bond) entered blocking state [ 358.454346][T18670] bridge1: port 2(veth0_to_bond) entered disabled state [ 358.461646][T18670] veth0_to_bond: entered allmulticast mode [ 358.468183][T18670] veth0_to_bond: entered promiscuous mode [ 358.514478][T18680] vlan2: entered allmulticast mode [ 358.530084][T18680] team0: entered allmulticast mode [ 358.546381][T18680] team_slave_0: entered allmulticast mode [ 358.565717][T18680] team_slave_1: entered allmulticast mode [ 358.581747][T18680] bridge1: port 3(vlan2) entered blocking state [ 358.598571][T18666] loop3: detected capacity change from 0 to 512 [ 358.610983][T18680] bridge1: port 3(vlan2) entered disabled state [ 358.638116][T18666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.651559][T18680] vlan2: entered promiscuous mode [ 358.669723][T18680] team0: entered promiscuous mode [ 358.680499][T18666] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.692361][T18680] team_slave_0: entered promiscuous mode [ 358.704454][T18680] team_slave_1: entered promiscuous mode [ 358.891672][T11541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.922238][T18688] loop9: detected capacity change from 0 to 2048 [ 358.958254][T18688] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.008861][T18690] syzkaller0: entered promiscuous mode [ 359.037848][T18688] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.052002][T18690] syzkaller0: entered allmulticast mode [ 359.106010][T18688] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3689: bg 0: block 345: padding at end of block bitmap is not set [ 359.154563][T18688] EXT4-fs (loop9): Remounting filesystem read-only [ 359.179564][ T53] EXT4-fs warning (device loop9): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 359.237112][T17433] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.333589][T18709] loop4: detected capacity change from 0 to 512 [ 359.347957][T18709] EXT4-fs: Ignoring removed mblk_io_submit option [ 359.362952][T18711] loop8: detected capacity change from 0 to 128 [ 359.380177][T18709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 359.410842][T18709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.442167][T18709] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.457223][T18718] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000ff0) [ 359.467298][T18718] FAT-fs (loop8): Filesystem has been set read-only [ 359.474058][T18718] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000ff0) [ 359.491927][T18718] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000ff0) [ 359.513641][T18718] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000ff0) [ 359.523074][T18718] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000ff0) [ 359.531181][T18718] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000ff0) [ 359.539374][T18718] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000ff0) [ 359.548193][T18718] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000ff0) [ 359.556244][T18718] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000ff0) [ 359.566711][T18718] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000ff0) [ 359.586614][T18728] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3703'. [ 359.605371][T14599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.836575][ T28] audit: type=1400 audit(2000000139.306:6365): avc: denied { getopt } for pid=18743 comm="syz.9.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 359.859582][ T28] audit: type=1400 audit(2000000139.306:6366): avc: denied { ioctl } for pid=18743 comm="syz.9.3709" path="socket:[55972]" dev="sockfs" ino=55972 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 359.891984][ T28] audit: type=1400 audit(2000000139.306:6367): avc: denied { setopt } for pid=18743 comm="syz.9.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 360.056524][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3711'. [ 360.084637][T18751] ALSA: seq fatal error: cannot create timer (-19) [ 360.136099][T18751] loop9: detected capacity change from 0 to 512 [ 360.142930][T18751] EXT4-fs: Ignoring removed orlov option [ 360.148593][T18751] EXT4-fs: Ignoring removed mblk_io_submit option [ 360.200050][T18751] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.3711: corrupted in-inode xattr: e_value size too large [ 360.313077][T18751] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 360.315080][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 360.330679][ C0] EXT4-fs (loop9): initial error at time 2000000139: ext4_iget_extra_inode:5128: inode 15 [ 360.340616][ C0] EXT4-fs (loop9): last error at time 2000000139: ext4_iget_extra_inode:5128: inode 15 [ 360.354908][T18751] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3711: couldn't read orphan inode 15 (err -117) [ 360.367263][T18751] loop9: lost filesystem error report for type 5 error -117 [ 360.369030][T18751] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.630985][T17433] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.655895][T18768] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 360.655895][T18768] program syz.8.3716 not setting count and/or reply_len properly [ 360.883184][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3718'. [ 360.892110][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3718'. [ 360.900960][T18780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3718'. [ 361.184760][T18785] loop3: detected capacity change from 0 to 128 [ 361.192457][T18785] FAT-fs (loop3): bogus number of FAT sectors [ 361.201495][T18785] FAT-fs (loop3): Can't find a valid FAT filesystem [ 361.214762][T18785] Timeout policy `syz0' can only be used by L3 protocol number 9 [ 362.427812][T18818] loop3: detected capacity change from 0 to 4096 [ 362.449556][T18818] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 362.471373][T18818] System zones: 0-5 [ 362.498676][T18818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.518920][T18823] loop9: detected capacity change from 0 to 512 [ 362.533564][T18819] loop4: detected capacity change from 0 to 1024 [ 362.540209][T18819] EXT4-fs: test_dummy_encryption option not supported [ 362.574880][ T28] audit: type=1400 audit(2000000141.823:6368): avc: denied { bind } for pid=18813 comm="syz.3.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 362.660122][T18823] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 362.690442][ T5442] Bluetooth: hci0: Frame reassembly failed (-84) [ 362.713744][T18823] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 362.737018][T18823] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.3733: Corrupt directory, running e2fsck is recommended [ 362.772728][T18823] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 362.792378][T18823] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.3733: corrupted in-inode xattr: e_name out of bounds [ 362.820968][T18823] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 362.826456][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 362.842015][ C1] EXT4-fs (loop9): initial error at time 2000000142: ext4_iget_extra_inode:5128: inode 15 [ 362.851966][ C1] EXT4-fs (loop9): last error at time 2000000142: ext4_iget_extra_inode:5128: inode 15 [ 362.862712][T18823] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3733: couldn't read orphan inode 15 (err -117) [ 362.875082][T18823] loop9: lost filesystem error report for type 5 error -117 [ 362.879719][T18823] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.993094][T18838] lo speed is unknown, defaulting to 1000 [ 363.010863][T17433] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.029918][T11541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.086112][T18838] xfrm0 speed is unknown, defaulting to 1000 [ 363.130641][T18843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3738'. [ 363.155402][T18843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3738'. [ 363.266891][T18840] loop8: detected capacity change from 0 to 512 [ 363.362271][T18840] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.534705][T15292] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.886218][ T28] audit: type=1326 audit(2000000143.096:6369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18876 comm="syz.8.3748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9612facdd9 code=0x7fbf0000 [ 364.212822][T18879] loop4: detected capacity change from 0 to 512 [ 364.249893][T18879] loop4: detected capacity change from 0 to 512 [ 364.264611][T18879] EXT4-fs: Ignoring removed orlov option [ 364.279542][T18879] EXT4-fs: Ignoring removed mblk_io_submit option [ 364.303385][T18879] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.3749: corrupted in-inode xattr: e_value size too large [ 364.319371][T18879] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 364.319792][T18879] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3749: couldn't read orphan inode 15 (err -117) [ 364.328991][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 364.329017][ C1] EXT4-fs (loop4): initial error at time 2000000143: ext4_iget_extra_inode:5128: inode 15 [ 364.329110][ C1] EXT4-fs (loop4): last error at time 2000000143: ext4_iget_extra_inode:5128: inode 15 [ 364.367819][T18879] loop4: lost filesystem error report for type 5 error -117 [ 364.369295][T18879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.390295][T18879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.414019][T18884] loop3: detected capacity change from 0 to 256 [ 364.434936][T18884] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 364.461596][T18884] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 364.481269][T18884] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 364.504013][T18884] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 364.524390][T18884] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 364.547887][T18884] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 364.563569][T18888] loop4: detected capacity change from 0 to 8192 [ 364.569567][T18884] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 364.582146][T18884] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 364.592458][T18884] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 364.602725][T18884] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 364.888686][ T3880] Bluetooth: hci0: command 0x1003 tx timeout [ 364.894723][ T3509] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 365.065748][T18903] loop8: detected capacity change from 0 to 1024 [ 365.091776][T18903] EXT4-fs: Mount option(s) incompatible with ext2 [ 365.248767][T18905] ip6t_rpfilter: unknown options [ 365.255978][T18905] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3759'. [ 366.287253][T18918] IPv6: NLM_F_CREATE should be specified when creating new route [ 366.316256][T18918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.323526][T18918] IPv6: NLM_F_CREATE should be set when creating new route [ 366.746760][T18931] sg_write: data in/out 439260/178 bytes for SCSI command 0x0-- guessing data in; [ 366.746760][T18931] program syz.1.3769 not setting count and/or reply_len properly [ 366.779142][T18927] loop3: detected capacity change from 0 to 1024 [ 366.797066][T18933] netlink: 92 bytes leftover after parsing attributes in process `syz.8.3770'. [ 366.819591][T18927] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 366.842727][T18927] System zones: 0-1, 3-36 [ 366.855251][T18927] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.3767: bad orphan inode 134217728 [ 367.029631][T18927] loop3: lost filesystem error report for type 5 error -117 [ 367.030169][T18927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.093295][T18926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3767'. [ 367.227882][ T28] audit: type=1400 audit(2000000146.211:6370): avc: denied { audit_write } for pid=18945 comm="syz.4.3775" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 367.300448][T11541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.360026][T18954] loop3: detected capacity change from 0 to 128 [ 367.386316][T18953] syzkaller0: entered promiscuous mode [ 367.395373][T18954] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 367.409064][T18953] syzkaller0: entered allmulticast mode [ 367.415029][T18954] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.476970][T11541] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.524884][T18961] loop4: detected capacity change from 0 to 128 [ 367.635676][T18965] loop3: detected capacity change from 0 to 128 [ 367.642764][T18965] EXT4-fs: Ignoring removed oldalloc option [ 367.735352][T18965] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 367.744234][T18965] System zones: 1-3, 19-19, 35-36 [ 367.758585][T18965] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 367.788606][T18965] ext4 filesystem being mounted at /343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 368.705951][T18974] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3783'. [ 369.218939][T18981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3786'. [ 369.267220][T18983] netlink: 324 bytes leftover after parsing attributes in process `syz.8.3787'. [ 369.735391][T11541] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.142459][T19001] loop4: detected capacity change from 0 to 512 [ 370.178113][T19002] loop9: detected capacity change from 0 to 512 [ 370.187147][T18995] loop3: detected capacity change from 0 to 8192 [ 370.200590][T19002] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.218458][T19002] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.218723][ T28] audit: type=1400 audit(2000000405.035:6371): avc: denied { mounton } for pid=18994 comm="syz.3.3791" path="/344/file2/bus" dev="loop3" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 370.232855][T19001] Quota error (device loop4): v2_read_file_info: Free block number 1536 out of range (1, 6). [ 370.265482][T19001] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 370.267511][T18995] loop3: detected capacity change from 8192 to 0 [ 370.280986][ C1] blk_print_req_error: 18 callbacks suppressed [ 370.280999][ C1] I/O error, dev loop3, sector 8176 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 370.288244][T19001] EXT4-fs (loop4): mount failed [ 370.295033][T19010] FAT-fs (loop3): Directory bread(block 65) failed [ 370.317159][T19010] FAT-fs (loop3): Directory bread(block 66) failed [ 370.331534][T19010] FAT-fs (loop3): Directory bread(block 67) failed [ 370.338473][T19010] FAT-fs (loop3): Directory bread(block 68) failed [ 370.352956][T19010] FAT-fs (loop3): Directory bread(block 69) failed [ 370.359537][T19010] FAT-fs (loop3): Directory bread(block 70) failed [ 370.366519][T19010] FAT-fs (loop3): Directory bread(block 71) failed [ 370.406250][T11541] FAT-fs (loop3): Directory bread(block 65) failed [ 370.420494][T11541] FAT-fs (loop3): Directory bread(block 66) failed [ 370.425019][T19016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3797'. [ 370.436494][T11541] FAT-fs (loop3): Directory bread(block 67) failed [ 370.457246][T11541] FAT-fs (loop3): unable to read boot sector to mark fs as dirty [ 370.476077][T11541] bond0: (slave syz_tun): Releasing backup interface [ 370.529661][T11541] syz_tun (unregistering): left promiscuous mode [ 370.544854][T11541] syz_tun (unregistering): left allmulticast mode [ 370.607312][T19026] program syz.4.3802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.798911][ T28] audit: type=1400 audit(2000000405.582:6372): avc: denied { shutdown } for pid=19022 comm="syz.8.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 371.056846][T17433] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.235873][T19038] lo speed is unknown, defaulting to 1000 [ 371.308414][T19038] xfrm0 speed is unknown, defaulting to 1000 [ 371.308617][T19059] syzkaller0: entered promiscuous mode [ 371.329190][T19059] syzkaller0: entered allmulticast mode [ 371.403944][T19063] loop8: detected capacity change from 0 to 512 [ 371.431527][T19063] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 371.457489][T19063] EXT4-fs error (device loop8): __ext4_iget:5481: inode #11: block 12: comm syz.8.3814: invalid block [ 371.473304][T19063] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 371.474492][T19063] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3814: couldn't read orphan inode 11 (err -117) [ 371.483844][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 371.483872][ C0] EXT4-fs (loop8): initial error at time 2000000406: __ext4_iget:5481: inode 11: block 12 [ 371.483908][ C0] EXT4-fs (loop8): last error at time 2000000406: __ext4_iget:5481: inode 11: block 12 [ 371.527484][T19063] loop8: lost filesystem error report for type 5 error -117 [ 371.528097][T19063] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.600102][T15292] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.691615][T19038] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.703098][T19080] loop4: detected capacity change from 0 to 512 [ 371.709449][T19038] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.709559][T19038] bridge_slave_0: entered allmulticast mode [ 371.710144][T19038] bridge_slave_0: entered promiscuous mode [ 371.731264][T19038] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.742915][T19080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.755775][T19038] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.763287][T19080] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 371.774348][T19038] bridge_slave_1: entered allmulticast mode [ 371.782089][T19038] bridge_slave_1: entered promiscuous mode [ 371.800352][T19038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.810890][T19038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.831198][T19038] team0: Port device team_slave_0 added [ 371.837686][T19038] team0: Port device team_slave_1 added [ 371.856490][T19038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.863632][T19038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.889611][ T28] audit: type=1400 audit(2000000406.592:6373): avc: denied { getopt } for pid=19087 comm="syz.8.3821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 371.909596][T19038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.920965][T19038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.927905][T19038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.957086][T19038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.982989][T19038] hsr_slave_0: entered promiscuous mode [ 371.988890][T19038] hsr_slave_1: entered promiscuous mode [ 371.994835][T19038] debugfs: 'hsr0' already exists in 'hsr' [ 372.000569][T19038] Cannot create hsr debugfs directory [ 372.012852][T19093] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3823'. [ 372.258239][T19129] syzkaller0: entered promiscuous mode [ 372.263911][T19129] syzkaller0: entered allmulticast mode [ 372.405289][T19154] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3825'. [ 372.447926][T19038] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 372.462699][T19038] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.475541][T19038] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 372.489736][T19038] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.502688][T19038] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 372.515480][T19038] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.529643][T19038] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 372.539863][T19173] sg_write: data in/out 393180/130 bytes for SCSI command 0x0-- guessing data in; [ 372.539863][T19173] program syz.8.3825 not setting count and/or reply_len properly [ 372.573808][T19038] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 372.599446][T14599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.603278][T19038] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.615564][T19038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.651020][T19190] loop8: detected capacity change from 0 to 512 [ 372.757620][T19038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.784474][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.812050][T19038] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.825715][T19213] IPv6: NLM_F_CREATE should be specified when creating new route [ 372.834111][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.841186][ T5451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.864186][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.871254][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.897731][ T28] audit: type=1400 audit(2000000407.564:6374): avc: denied { write } for pid=19217 comm="syz.9.3831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 372.971081][T19221] loop4: detected capacity change from 0 to 128 [ 372.980775][T19224] syzkaller0: entered promiscuous mode [ 372.982349][T19221] EXT4-fs: Ignoring removed oldalloc option [ 373.006565][T19221] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 373.015531][T19221] System zones: 1-3, 19-19, 35-36 [ 373.020726][T19224] syzkaller0: entered allmulticast mode [ 373.031382][T19221] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.056110][T19235] loop8: detected capacity change from 0 to 512 [ 373.074177][T19235] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.086774][T19235] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 373.100289][T19221] ext4 filesystem being mounted at /200/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 373.191786][T14599] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.271373][T19261] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3841'. [ 373.303230][T19266] loop4: detected capacity change from 0 to 512 [ 373.331464][T19038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.340495][T19273] IPv6: NLM_F_CREATE should be specified when creating new route [ 373.352069][T19266] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 373.546904][T19038] veth0_vlan: entered promiscuous mode [ 373.564821][T19038] veth1_vlan: entered promiscuous mode [ 373.582746][T19038] veth0_macvtap: entered promiscuous mode [ 373.590203][T19038] veth1_macvtap: entered promiscuous mode [ 373.616375][T19038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.640523][T19038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.658661][ T53] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.669807][ T53] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.686303][ T53] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.710160][ T53] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.791080][T19328] loop7: detected capacity change from 0 to 1024 [ 373.801266][T19328] EXT4-fs (loop7): Can't support bigalloc feature without extents feature [ 373.801266][T19328] [ 373.821238][T19328] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 373.898796][T19345] netlink: 'syz.7.3849': attribute type 1 has an invalid length. [ 373.907905][T19345] netlink: 'syz.7.3849': attribute type 1 has an invalid length. [ 373.916050][T19345] netlink: 'syz.7.3849': attribute type 1 has an invalid length. [ 373.925105][T19345] netlink: 'syz.7.3849': attribute type 1 has an invalid length. [ 373.933219][T19345] netlink: 'syz.7.3849': attribute type 1 has an invalid length. [ 373.944853][T19345] netlink: 'syz.7.3849': attribute type 1 has an invalid length. [ 373.952681][T19345] netlink: 'syz.7.3849': attribute type 1 has an invalid length. [ 373.961853][T19345] netlink: 'syz.7.3849': attribute type 1 has an invalid length. [ 373.962093][T15292] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.969879][T19345] netlink: 'syz.7.3849': attribute type 1 has an invalid length. [ 373.987037][T19345] netlink: 'syz.7.3849': attribute type 1 has an invalid length. [ 374.056826][T19361] syzkaller0: entered promiscuous mode [ 374.063227][T19361] syzkaller0: entered allmulticast mode [ 374.116138][T19354] loop8: detected capacity change from 0 to 8192 [ 374.163231][T19354] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3850'. [ 374.316374][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3857'. [ 374.318155][T19381] loop8: detected capacity change from 0 to 2048 [ 374.332289][ T28] audit: type=1400 audit(2000000408.914:6375): avc: denied { lock } for pid=19382 comm="syz.1.3857" path="socket:[57956]" dev="sockfs" ino=57956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 374.370757][T19381] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.447308][T15292] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.492241][T19389] loop8: detected capacity change from 0 to 2048 [ 374.534530][T19391] loop8: detected capacity change from 0 to 512 [ 374.544043][T19391] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.556927][T19391] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 374.680119][ T28] audit: type=1400 audit(2000000409.234:6376): avc: denied { append } for pid=19386 comm="syz.4.3858" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 375.199564][T19414] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3868'. [ 375.338718][T19432] sctp: [Deprecated]: syz.7.3872 (pid 19432) Use of int in max_burst socket option. [ 375.338718][T19432] Use struct sctp_assoc_value instead [ 375.429801][T15292] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.641999][ T28] audit: type=1400 audit(2000000410.159:6377): avc: denied { setattr } for pid=19455 comm="syz.4.3883" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.697054][T19458] loop9: detected capacity change from 0 to 512 [ 375.739433][T19458] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.804576][T19458] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 375.830969][T19458] Quota error (device loop9): find_block_dqentry: Quota for id 0 referenced but not present [ 375.845504][T19458] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 375.856617][T19458] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.3884: Failed to acquire dquot type 1 [ 375.876106][T19469] Symlink component flag not implemented [ 375.882992][T19458] EXT4-fs (loop9): Remounting filesystem read-only [ 375.890739][T19469] Symlink component flag not implemented [ 375.934600][T17433] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.986150][ T28] audit: type=1400 audit(2000000410.470:6378): avc: denied { mounton } for pid=19468 comm="syz.4.3887" path="/208/file1" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 375.986224][T19469] 9pnet_virtio: no channels available for device 127.0.0.1 [ 376.026808][T19481] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3889'. [ 376.038378][T19481] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3889'. [ 376.063163][T19469] tipc: Failed to remove unknown binding: 66,0,0/10070698:805181826/805181827 [ 376.085367][T19469] tipc: Failed to remove unknown binding: 66,0,0/10070698:805181826/805181827 [ 376.368756][T19500] lo speed is unknown, defaulting to 1000 [ 376.408433][T19500] xfrm0 speed is unknown, defaulting to 1000 [ 376.720441][ T28] audit: type=1400 audit(2000000411.055:6379): avc: granted { setsecparam } for pid=19506 comm="syz.8.3899" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 376.781732][T19513] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3900'. [ 376.982686][ T5442] kworker/u8:10: attempt to access beyond end of device [ 376.982686][ T5442] loop4: rw=1, sector=2432, nr_sectors = 2072 limit=512 [ 377.009958][ T5442] kworker/u8:10: attempt to access beyond end of device [ 377.009958][ T5442] loop4: rw=1, sector=4504, nr_sectors = 2072 limit=512 [ 377.066971][ T5442] kworker/u8:10: attempt to access beyond end of device [ 377.066971][ T5442] loop4: rw=1, sector=6576, nr_sectors = 2160 limit=512 [ 377.110961][ T5442] kworker/u8:10: attempt to access beyond end of device [ 377.110961][ T5442] loop4: rw=1, sector=8736, nr_sectors = 2104 limit=512 [ 377.152886][ T5442] kworker/u8:10: attempt to access beyond end of device [ 377.152886][ T5442] loop4: rw=1, sector=10840, nr_sectors = 2552 limit=512 [ 377.172609][ T5442] kworker/u8:10: attempt to access beyond end of device [ 377.172609][ T5442] loop4: rw=1, sector=13392, nr_sectors = 3072 limit=512 [ 377.243103][ T28] audit: type=1326 audit(2000000411.659:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.9.3909" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5903fcdd9 code=0x7ffc0000 [ 377.306068][ T28] audit: type=1326 audit(2000000411.659:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.9.3909" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5903fcdd9 code=0x7ffc0000 [ 377.339657][ T28] audit: type=1326 audit(2000000411.659:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.9.3909" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5903fcdd9 code=0x7ffc0000 [ 377.365760][ T28] audit: type=1326 audit(2000000411.659:6383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.9.3909" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5903fcdd9 code=0x7ffc0000 [ 377.397585][ T28] audit: type=1326 audit(2000000411.659:6384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.9.3909" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5903fcdd9 code=0x7ffc0000 [ 377.425690][T19542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.500995][T14599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.231650][T19567] set_capacity_and_notify: 4 callbacks suppressed [ 378.231678][T19567] loop9: detected capacity change from 0 to 512 [ 378.259944][T19567] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 378.311759][T19570] loop7: detected capacity change from 0 to 128 [ 378.319139][T19570] EXT4-fs: Ignoring removed oldalloc option [ 378.394704][T19567] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 378.444933][T19570] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 378.464447][T19570] System zones: 1-3, 19-19, 35-36 [ 378.478874][T19570] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 378.510833][T19570] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 378.614858][T19567] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 378.624139][T19567] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 378.632257][T19567] System zones: 0-2, 18-18, 34-35 [ 378.638388][T19567] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.778080][T17433] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.032616][T19587] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3925'. [ 379.126057][T19589] loop4: detected capacity change from 0 to 128 [ 379.141840][T19589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.324173][T19589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.379517][T19589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.420448][T19589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.944491][T19602] loop9: detected capacity change from 0 to 128 [ 379.955960][T19602] EXT4-fs: Ignoring removed oldalloc option [ 379.977154][T19602] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 379.985245][T19602] System zones: 1-3, 19-19, 35-36 [ 379.991562][T19602] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.004311][T19602] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 380.160547][T19038] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.332065][T19607] loop4: detected capacity change from 0 to 512 [ 380.369730][T19607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.407330][T19607] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.476701][T14599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.754159][T19625] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3937'. [ 380.790074][T19627] loop4: detected capacity change from 0 to 4096 [ 380.812037][T19627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 380.845538][T19627] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 380.876298][T19627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.896623][T19632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.903824][T19632] IPv6: NLM_F_CREATE should be set when creating new route [ 380.910998][T19632] IPv6: NLM_F_CREATE should be set when creating new route [ 380.929717][T14599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.037236][ T28] kauditd_printk_skb: 735 callbacks suppressed [ 381.037251][ T28] audit: type=1400 audit(2000000415.242:7120): avc: denied { accept } for pid=19634 comm="syz.4.3941" laddr=172.20.20.170 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 381.068413][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 381.128812][T19639] lo speed is unknown, defaulting to 1000 [ 381.165628][T19639] xfrm0 speed is unknown, defaulting to 1000 [ 381.362600][T17433] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.391825][T19648] loop8: detected capacity change from 0 to 4096 [ 381.407364][T19648] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.426532][T19648] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 381.440081][T19648] SELinux: failed to load policy [ 381.529367][T15292] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.544028][T19661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3949'. [ 382.197526][T19694] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3962'. [ 382.626093][T19700] lo speed is unknown, defaulting to 1000 [ 382.741134][T19700] xfrm0 speed is unknown, defaulting to 1000 [ 382.950208][T19706] loop7: detected capacity change from 0 to 4096 [ 383.022319][T19706] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.438309][T19711] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3968'. [ 383.512412][ T28] audit: type=1400 audit(2000000417.570:7121): avc: denied { watch watch_reads } for pid=19712 comm="syz.9.3969" path="/115/cgroup" dev="tmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 383.635847][T19038] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.989045][ T28] audit: type=1400 audit(2000000418.023:7122): avc: denied { map } for pid=19741 comm="syz.4.3977" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 384.032587][T19744] loop9: detected capacity change from 0 to 512 [ 384.651129][T19755] xt_TPROXY: Can be used only with -p tcp or -p udp [ 384.730263][T19744] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.829467][T19744] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 384.991740][T19762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19762 comm=syz.1.3983 [ 385.019289][T19767] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3985'. [ 385.035929][T19768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3985'. [ 385.044872][T19767] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3985'. [ 385.133647][T19770] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3987'. [ 385.183227][T19776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3989'. [ 385.202444][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3991'. [ 385.232078][T17433] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.297403][T19783] loop7: detected capacity change from 0 to 128 [ 385.530883][ T28] audit: type=1400 audit(2000000419.471:7123): avc: denied { create } for pid=19777 comm="syz.4.3991" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 385.721323][T19804] loop8: detected capacity change from 0 to 512 [ 385.760893][T19804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 385.816903][T19804] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 385.895205][T19804] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 385.938865][T19804] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.3999: Allocating blocks 41-42 which overlap fs metadata [ 385.959484][T19804] loop8: lost filesystem error report for type 5 error -117 [ 385.959870][T19804] Quota error (device loop8): write_blk: dquota write failed [ 385.967192][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 385.967208][ C1] EXT4-fs (loop8): initial error at time 2000000419: ext4_mb_mark_diskspace_used:4222 [ 385.967227][ C1] EXT4-fs (loop8): last error at time 2000000419: ext4_mb_mark_diskspace_used:4222 [ 386.021059][T19811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19811 comm=syz.4.4000 [ 386.080989][T19804] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 386.151571][T19804] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 386.183483][T19820] loop4: detected capacity change from 0 to 512 [ 386.196761][T19804] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.3999: Failed to acquire dquot type 1 [ 386.227165][T19820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.272869][T19804] loop8: lost filesystem error report for type 5 error -117 [ 386.282875][T19822] ================================================================== [ 386.290969][T19822] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 386.298002][T19822] [ 386.300322][T19822] read-write to 0xffff888237c1b8d8 of 4 bytes by interrupt on cpu 0: [ 386.308383][T19822] hrtimer_interrupt+0x5d/0x850 [ 386.313240][T19822] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 386.319132][T19822] sysvec_apic_timer_interrupt+0x6f/0x80 [ 386.324775][T19822] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 386.330758][T19822] __tsan_unaligned_write8+0x11a/0x180 [ 386.336217][T19822] filemap_get_entry+0x4a/0x2d0 [ 386.341072][T19822] shmem_get_folio_gfp+0x1e3/0xd60 [ 386.346183][T19822] shmem_fault+0xf6/0x250 [ 386.350510][T19822] handle_mm_fault+0x16cb/0x2e70 [ 386.355451][T19822] __get_user_pages+0x1290/0x1f10 [ 386.360482][T19822] __mm_populate+0x242/0x390 [ 386.365080][T19822] vm_mmap_pgoff+0x23b/0x2d0 [ 386.369672][T19822] ksys_mmap_pgoff+0xc1/0x310 [ 386.374348][T19822] x64_sys_call+0x14df/0x3020 [ 386.379025][T19822] do_syscall_64+0x12c/0x3b0 [ 386.383616][T19822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.389507][T19822] [ 386.391830][T19822] read to 0xffff888237c1b8d8 of 4 bytes by task 19822 on cpu 1: [ 386.399455][T19822] print_cpu+0x346/0x670 [ 386.403697][T19822] timer_list_show+0x107/0x170 [ 386.408458][T19822] seq_read_iter+0x636/0x940 [ 386.413083][T19822] proc_reg_read_iter+0x110/0x180 [ 386.418113][T19822] copy_splice_read+0x471/0x6c0 [ 386.422967][T19822] splice_direct_to_actor+0x26e/0x670 [ 386.428346][T19822] do_splice_direct+0x119/0x1a0 [ 386.433199][T19822] do_sendfile+0x382/0x650 [ 386.437610][T19822] __x64_sys_sendfile64+0x105/0x150 [ 386.442813][T19822] x64_sys_call+0x2dc4/0x3020 [ 386.447494][T19822] do_syscall_64+0x12c/0x3b0 [ 386.450469][T19820] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 386.452085][T19822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.468196][T19822] [ 386.470509][T19822] value changed: 0x0013fd9d -> 0x0013fda3 [ 386.476211][T19822] [ 386.478521][T19822] Reported by Kernel Concurrency Sanitizer on: [ 386.484658][T19822] CPU: 1 UID: 0 PID: 19822 Comm: syz.1.4004 Tainted: G W syzkaller #0 PREEMPT(full) [ 386.495581][T19822] Tainted: [W]=WARN [ 386.499364][T19822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 386.499558][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 386.509400][T19822] ================================================================== [ 386.526399][T19804] EXT4-fs error (device loop8): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 386.556491][T19804] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #12: comm syz.8.3999: corrupted inode contents [ 386.574610][T19825] loop9: detected capacity change from 0 to 512 [ 386.580825][T19804] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 386.581029][T19804] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #12: comm syz.8.3999: mark_inode_dirty error [ 386.583623][T19825] EXT4-fs: inline encryption not supported [ 386.603288][T19804] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 386.607781][T19804] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #12: comm syz.8.3999: corrupted inode contents [ 386.629351][T19804] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 386.631032][T19804] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #12: comm syz.8.3999: mark_inode_dirty error [ 386.651852][T19825] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 386.652153][T19804] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 386.661153][T19804] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #12: comm syz.8.3999: corrupted inode contents [ 386.683008][T19804] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 386.683295][T19804] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 386.701126][T19804] loop8: lost filesystem error report for type 5 error -117 [ 386.701347][T19825] EXT4-fs (loop9): orphan cleanup on readonly fs [ 386.701378][T19804] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #12: comm syz.8.3999: corrupted inode contents [ 386.729313][T19825] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 386.743965][T19825] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.4005: corrupted inode contents [ 386.755811][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 386.755830][ C0] EXT4-fs (loop9): initial error at time 2000000420: mb_free_blocks:2049: inode 12: block 14 [ 386.755867][ C0] EXT4-fs (loop9): last error at time 2000000420: mb_free_blocks:2049: inode 12: block 14 [ 386.786019][T19804] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 386.786144][T19804] EXT4-fs error (device loop8): ext4_truncate:4690: inode #12: comm syz.8.3999: mark_inode_dirty error [ 386.800834][T19825] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 386.807312][T19825] EXT4-fs error (device loop9): ext4_dirty_inode:6587: inode #12: comm syz.9.4005: mark_inode_dirty error [ 386.817785][T19804] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 386.828204][T19825] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 386.837694][T19825] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.4005: corrupted inode contents [ 386.837853][T19804] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 386.861859][T19825] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 386.868156][T19804] loop8: lost filesystem error report for type 5 error -117 [ 386.877482][T19804] EXT4-fs (loop8): 1 truncate cleaned up [ 386.891075][T19825] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #12: comm syz.9.4005: mark_inode_dirty error [ 386.891435][T19804] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.923034][T19825] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.4005: corrupted inode contents [ 386.948977][T19825] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 386.967707][T19825] loop9: lost filesystem error report for type 5 error -117 [ 386.967912][T19825] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.4005: corrupted inode contents [ 386.994591][T19825] EXT4-fs error (device loop9): ext4_truncate:4690: inode #12: comm syz.9.4005: mark_inode_dirty error [ 387.005850][T19825] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 387.014854][T19825] loop9: lost filesystem error report for type 5 error -117 [ 387.015032][T19825] EXT4-fs (loop9): 1 truncate cleaned up [ 387.055306][ T5458] Quota error (device loop9): remove_tree: Cycle in quota tree detected: block 3 index 0 [ 387.071683][ T5458] EXT4-fs error (device loop9): ext4_release_dquot:7070: comm kworker/u8:17: Failed to release dquot type 1 [ 387.083391][ T5458] loop9: lost filesystem error report for type 5 error -5 [ 387.085489][T19825] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 387.087567][T15292] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.093539][T14599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.137556][T19825] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 387.165415][T19825] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 387.190023][T19825] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4005'. [ 387.233896][T17433] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.