last executing test programs: 26m56.624645545s ago: executing program 32 (id=106): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x0, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0x0, &(0x7f0000000040)={0x60, 0x7, 0x84b6, 0x4, 0x4004}, 0x8, 0x7, 0x3, 0x0, 0x7ffe, 0x0, 0x0}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0xfebc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32], 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000180)={0x6, 0xf, 0xc, 0x1000, 0x4}) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r8}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2c5, &(0x7f0000000600)="$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") syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x50000, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@grpquota}, {@jqfmt_vfsv1}, {@lazytime}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0xfe, 0x477, &(0x7f0000001dc0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=@getnexthop={0x18, 0x6a, 0x200, 0x70bd27, 0x25dfdbfd}, 0x18}}, 0x0) 22m40.273588034s ago: executing program 33 (id=971): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0xa, 0x5, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid\x00') fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2010000, &(0x7f0000000080)=ANY=[@ANYBLOB='mode=00000000000000000111147,uid=', @ANYRESHEX=r1]) syz_io_uring_complete(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080600010800"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0x4a, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x1, 0x5}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66cd, &(0x7f0000000200)={0x0, 0xf454, 0x80, 0x2, 0x1ae}, &(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_complete(r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208001240"], 0x68}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000001940)={0xa, 0xfffe, 0x1000006, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) mmap(&(0x7f0000277000/0x4000)=nil, 0x4000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x20) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r6, &(0x7f0000000000)=@known='system.posix_acl_default\x00') ioctl$EVIOCSREP(r6, 0x40084503, &(0x7f0000000000)=[0x3, 0x3]) 21m45.22847663s ago: executing program 34 (id=1066): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet(0x2, 0x2, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r5 = socket$packet(0x11, 0x2, 0x300) file_getattr(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x46, 0x1000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xe860}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x10}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x26}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '>'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) bind$packet(r5, &(0x7f0000008680)={0x11, 0xd, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003940)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r5, @ANYBLOB, @ANYRESDEC, @ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) r8 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f0000000ac0)="$eJzs3TFrE2EYB/DHNm1DFzuLw4GLU1An1yAVxIAQuUEnD6pLK8J1OZ3uY/gZ/Eh+jE7dTuzFpq3RpU3f693vB+Ee+BN4XgJ5Mzzvmw8PPx8efDn+1Pz8HuNxFqOIumki9mIjNqN1b/HcOKu346I6AIC7Zj4vpql7YL3KclpsRcTOX0n+I0lDAAAAAAAAAAAAXNuq+f84Nf8PAH1m/r//ynJa7C5+v11m/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABI57Rp7jf/eaXuDwC4efZ/ABge+z8ADI/9HwCG5+2796+ns9n+PMvGESd1lVd5+2zzl69m+0+yM3vLd51UVb55nj9t8+xyvhW7i/zZynw7Hj9q89/ZizezK/lOHKx/+QAAAAAAAAAAAAAAAAAAANAJk+zcyvP9k8m/8ra6cD/AlfP7o3gwurVlAAAAAAAAAAAAAAAAAAAAwJ12/PXbYXF09LEcbvHnXoOu9HPtIp53oo3bLnr0CXahSPzFBAAAAAAAAAAAAAAAAAAAA7Q89Ju6EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIZ/n//+srIqJuWqmXCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTYrwAAAP//gGWXaQ==") open(0x0, 0x4827e, 0xdc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) splice(r8, 0x0, r7, 0x0, 0x8, 0x1) 18m1.290221023s ago: executing program 35 (id=1865): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000002, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, r6, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000080)={0x2, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040095}, 0x40010) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r4, 0xffffffffffffffff, 0xd, 0x0, @void}, 0x10) futex(&(0x7f0000000180), 0x5, 0xfffffffd, 0x0, &(0x7f0000004000)=0x2, 0x9a020006) 10m26.130879426s ago: executing program 36 (id=3252): r0 = socket$kcm(0x10, 0x2, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev(r2, 0x0, 0x0, 0xde, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe01000000000000", 0x1c) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x22f0}, @void, @eth={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xd, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "c5029b0727402b59c52bb5ab2dc2ac9e97c848c11dab8921", "fcf88afea078dd44ba61387fdaa1e9b063878af25aa29d3a35b994c14e1023eb"}}}}}}}, 0x76) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, &(0x7f00000000c0)=[{0x0}], 0x1, 0x12, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000080)=0x65d6, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) sendmsg$inet(r8, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, 0xffffffffffffffff, &(0x7f0000000040)=0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a000a00053582c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 10m6.023523231s ago: executing program 37 (id=3326): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 8m36.762269878s ago: executing program 5 (id=3531): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000440)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") 8m36.703959569s ago: executing program 5 (id=3532): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x7fffffffe, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x0, @perf_bp={0x0}, 0x800, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9000, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x6e0f81, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) clock_settime(0xfffffffb, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x9) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) pread64(r2, &(0x7f0000000140)=""/59, 0x3b, 0x151) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x25, 0xa, 0x0) setuid(0xee01) shmctl$SHM_LOCK(0x0, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) dup(r3) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) 8m36.374878973s ago: executing program 5 (id=3535): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fa, &(0x7f00000002c0)={'bond0\x00', @random="d8b30100"}) 8m36.125726616s ago: executing program 5 (id=3538): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000090000000400", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x24b, &(0x7f0000000940)="$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") r4 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) preadv2(r4, 0x0, 0x0, 0x80, 0x0, 0xd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f00000000c0)}, 0x20) modify_ldt$write2(0x11, &(0x7f0000000040)={0x7ed, 0x20000000, 0x400, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>-0\t\t\t') prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) 8m32.374069976s ago: executing program 5 (id=3546): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x7fffffffe, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x0, @perf_bp={0x0}, 0x800, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9000, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x6e0f81, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) clock_settime(0xfffffffb, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x9) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) pread64(r2, &(0x7f0000000140)=""/59, 0x3b, 0x151) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x25, 0xa, 0x0) setuid(0xee01) shmctl$SHM_LOCK(0x0, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) dup(r3) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) 8m30.061172626s ago: executing program 5 (id=3555): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000001e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 8m29.926176758s ago: executing program 38 (id=3555): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000001e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 5m32.658535761s ago: executing program 8 (id=6127): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x400, 0xde0b, 0x3, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, &(0x7f0000006240), 0x2ab, 0x40010001, 0x0) 5m32.621590681s ago: executing program 8 (id=6128): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x48084) 5m32.591614432s ago: executing program 8 (id=6131): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040)=0x751f, 0x4) 5m32.569926732s ago: executing program 8 (id=6133): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000090000000400", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x24b, &(0x7f0000000940)="$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") r4 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) preadv2(r4, 0x0, 0x0, 0x80, 0x0, 0xd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f00000000c0)}, 0x20) modify_ldt$write2(0x11, &(0x7f0000000040)={0x7ed, 0x20000000, 0x400, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>-0\t\t\t') prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) 5m31.343908369s ago: executing program 8 (id=6145): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d022abd7000fedbdf250100000005000600020000000500050004000000080003"], 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) 5m29.599799073s ago: executing program 8 (id=6171): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10e88d, 0x2, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x2, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8000a001, 0x7fffffff, 0xc265, 0xe3df, 0xc265, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x1ff, 0x2, 0x6, 0x8918, 0x0, 0x3, 0x4, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x2, 0xa, 0x3, 0x7, 0x5, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x80000001, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0x80ff, 0x1400, 0x7, 0x3, 0x7ff, 0x807fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x3ff8000, 0x3, 0x57, 0x8, 0x7fff, 0x4f, 0x0, 0x8, 0x100a0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0x100, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x100, 0x5, 0x1, 0x103, 0xd4a, 0x65ad, 0x0, 0x7ff, 0x7, 0x9, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x8001, 0xffffffff, 0x5, 0x0, 0x6, 0xe0, 0x7, 0x0, 0x100, 0x100, 0x200, 0x0, 0x5, 0xffff, 0x5, 0x1, 0x2, 0x3, 0x6335, 0x2, 0x6, 0x200, 0x3, 0x48, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x1, 0x3, 0xc0000001, 0x7fffffff, 0xc08, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff7, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff8d, 0xfff, 0x3, 0x9, 0x5, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0xfffffff9, 0x2, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca44, 0x5, 0x3, 0x7, 0x0, 0x6, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x3, 0x3, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x6, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x9, 0x2, 0x2, 0x9, 0x7, 0x7, 0x3, 0x400, 0x8, 0x2, 0x401, 0x20000006, 0x9982, 0x6, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x1, 0x5, 0x8, 0x2, 0x2, 0x3, 0xc, 0x4, 0xfff, 0x100000c5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x0, 0x7, 0x40, {0x4, 0x0, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x3, 0x435e, 0x5a44}, 0x8c79, 0x5, 0x4000006}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20004814}, 0x0) 5m29.577840423s ago: executing program 39 (id=6171): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10e88d, 0x2, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x2, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8000a001, 0x7fffffff, 0xc265, 0xe3df, 0xc265, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x1ff, 0x2, 0x6, 0x8918, 0x0, 0x3, 0x4, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x2, 0xa, 0x3, 0x7, 0x5, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x80000001, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0x80ff, 0x1400, 0x7, 0x3, 0x7ff, 0x807fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x3ff8000, 0x3, 0x57, 0x8, 0x7fff, 0x4f, 0x0, 0x8, 0x100a0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0x100, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x100, 0x5, 0x1, 0x103, 0xd4a, 0x65ad, 0x0, 0x7ff, 0x7, 0x9, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x8001, 0xffffffff, 0x5, 0x0, 0x6, 0xe0, 0x7, 0x0, 0x100, 0x100, 0x200, 0x0, 0x5, 0xffff, 0x5, 0x1, 0x2, 0x3, 0x6335, 0x2, 0x6, 0x200, 0x3, 0x48, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x1, 0x3, 0xc0000001, 0x7fffffff, 0xc08, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff7, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff8d, 0xfff, 0x3, 0x9, 0x5, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0xfffffff9, 0x2, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca44, 0x5, 0x3, 0x7, 0x0, 0x6, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x3, 0x3, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x6, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x9, 0x2, 0x2, 0x9, 0x7, 0x7, 0x3, 0x400, 0x8, 0x2, 0x401, 0x20000006, 0x9982, 0x6, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x1, 0x5, 0x8, 0x2, 0x2, 0x3, 0xc, 0x4, 0xfff, 0x100000c5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x0, 0x7, 0x40, {0x4, 0x0, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x3, 0x435e, 0x5a44}, 0x8c79, 0x5, 0x4000006}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20004814}, 0x0) 3m58.101615825s ago: executing program 9 (id=7868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 3m58.006879207s ago: executing program 9 (id=7870): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000002c0)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000780)={0x8, 0x81, 0x9, 0x4, 0x15, "a2f47bed89349d0d"}) 3m57.908451388s ago: executing program 9 (id=7875): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'vlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 3m57.706288531s ago: executing program 9 (id=7878): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8080, &(0x7f0000000040)={[{@usrquota}, {@journal_dev}]}, 0x1, 0x63c, &(0x7f0000001bc0)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000000700)=""/197, 0xc5) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m57.209167358s ago: executing program 9 (id=7885): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) 3m56.798003324s ago: executing program 9 (id=7895): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x1, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0xc}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x36}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100005800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 3m56.797901924s ago: executing program 40 (id=7895): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x1, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0xc}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x36}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100005800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 2m57.654886029s ago: executing program 4 (id=8897): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2m57.502086702s ago: executing program 4 (id=8898): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x104010, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r1, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 2m57.483180162s ago: executing program 4 (id=8899): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x1000, @empty, 0x5}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x679f, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000/0x8000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) 2m57.432795123s ago: executing program 4 (id=8900): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8052, &(0x7f00000005c0), 0x6, 0x4ef, &(0x7f0000000740)="$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") mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x10b440, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 2m57.145914806s ago: executing program 4 (id=8901): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0x20, 0x4040}, 0x20040000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_uring_setup(0x18e5, 0x0) syz_open_procfs$userns(r0, &(0x7f00000008c0)) r6 = syz_clone3(0x0, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@nolazytime}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$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") mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1011084, &(0x7f0000000800)={[], [{@flag='posixacl'}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) r8 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xfb, 0x9, 0x94, 0x7, 0x0, 0x10001, 0x800, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x2214, 0x8000000000000000, 0x800, 0x5, 0x4, 0x6939, 0x61, 0x0, 0x2, 0x0, 0x10000}, r6, 0x6, r5, 0x2) recvfrom$inet6(r8, 0x0, 0x0, 0x100, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x80, 0x1, 0xd956, 0x6, {{0x10, 0x4, 0x3, 0x1, 0x40, 0x68, 0x0, 0x19, 0x2, 0x0, @private=0xa010102, @empty, {[@generic={0x89, 0x3, "fe"}, @noop, @timestamp_prespec={0x44, 0xc, 0x44, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}]}, @cipso={0x86, 0x1c, 0x3, [{0x2, 0x8, "f7074380b774"}, {0x0, 0x8, "55c2198b9cab"}, {0x2, 0x6, "06210547"}]}]}}}}}) 2m56.801975761s ago: executing program 4 (id=8910): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) socket$l2tp6(0xa, 0x2, 0x73) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() sendmmsg$unix(r1, &(0x7f0000007440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x804}}], 0x2, 0x0) 2m56.790988031s ago: executing program 41 (id=8910): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) socket$l2tp6(0xa, 0x2, 0x73) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() sendmmsg$unix(r1, &(0x7f0000007440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x804}}], 0x2, 0x0) 1m34.400486708s ago: executing program 7 (id=9861): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x4, 0x5b55}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40015) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.events\x00', 0x275a, 0x0) getpgrp(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000d0429bd7000fcffff1f00000000", @ANYRES32=0x0, @ANYBLOB="4600c000000000002400128009000100626f6e6400000000140002800500010004000001060018"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x804) 1m34.102257362s ago: executing program 7 (id=9864): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc1) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4046855) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m34.057253123s ago: executing program 7 (id=9866): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0x20, 0x4040}, 0x20040000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_uring_setup(0x18e5, 0x0) syz_open_procfs$userns(r0, &(0x7f00000008c0)) r6 = syz_clone3(&(0x7f0000000900)={0x22801100, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@nolazytime}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$eJzs3MtvG8UfAPDvrpO26eOX/Ep59AEECiLikTRpgR44AAKJA0hIXMoxJGlV6jaoCRKtKggIlSOqxB1xROIv4AQXBJyQuMIdVapQLxRORmvv1o/abpI6cag/H2mTmd1xZr6eHXt2p9sABtZ49iOJ2B0Rv0XEaC3bXGC89uvG9Utzf1+/NJdEpfLWn0m13F/XL80VRYvX7cozE2lE+mkSB9vUu3Th4pnZcnnhfJ6fWj773tTShYvPnD47e2rh1MK5mePHjx2dfv65mWd7Euf/s7Ye+HDx0P7X3r7yxtyJK+/89E1SxN8Sxx0bqf4c71bk8UqlZ9VtBXsa0slQHxvCmpQiIuuu4er4H41S1DtvNF79pK+NAzZUJdfh8EoFuIsl0e8WAP1RfNFn17/Ftnmzj/679lLtAiiL+0a+1Y4MRRq1C6PhluvbXhqPiBMr/3yZbdHr+xAAAG18l81/nm43/0vjvoZy/8vXhsbytZS9EXFPROyLiHsjqmXvj4gH1lh/6yLJrfOf9Oq6AlulbP73Qr621Tz/S4siY6U8t6eaGU5Oni4vHMnfk4kY3p7lp7vU8f0rv37e6Vjj/C/bsvqLuWDejqtD25tfMz+7PHsnMTe69nHEgaF28Sc3VwKSiNgfEQfWWcfpJ78+1OlYa/yVpNtferE524N1pspXEU/U+n8lWuIvJN3XJ6d2RHnhyFRxVtzq518uv9mp/tv3/8bK+n9n2/P/ZvxjSeN67dLa67j8+2cdr2km13X+13dsy39/MLu8fH46Ylvyeq3Rjftn6q8t8kX5LP6Jw+3H/96ovxMHIyI7iR+MiIci4uG87x6JiEcj4nCnAFcifnz5sXc7Hd4K/T/f0v9jzUVa+r+e2Bate9onSmd++Lb5L9aTq/v8O1ZNTeR7VvP5t5p2re9sBgAAgP+eNCJ2R5JO3kyn6eRk7d/w74udaXlxafmpk4vvn5uvPSMwFsNpcaerdj+4dj90Or+sL/IzLfmj+X3jL0oj1fzk3GJ5vt/Bw4Db1WH8Z/4o9bt1wIbzvBYMLuMfBpfxD4PL+IfB1Wb8j/SjHcDma/f9/1E9WRndzMYAm6pl/Fv2gwHi+h8Gl/EPg6tx/Hd9/h64myyNxO0fkpfYyokdRVdubu2RboHYe5VINngU7O53gI2J4v/+7F64zx9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPfJvAAAA//+Zfec0") mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1011084, &(0x7f0000000800)={[], [{@fsmagic={'fsmagic', 0x3d, 0x2}}, {@flag='posixacl'}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) r8 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xfb, 0x9, 0x94, 0x7, 0x0, 0x10001, 0x800, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x2214, 0x8000000000000000, 0x800, 0x5, 0x4, 0x6939, 0x61, 0x0, 0x2, 0x0, 0x10000}, r6, 0x6, r5, 0x2) recvfrom$inet6(r8, 0x0, 0x0, 0x100, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x80, 0x1, 0xd956, 0x6, {{0x10, 0x4, 0x3, 0x1, 0x40, 0x68, 0x0, 0x19, 0x2, 0x0, @private=0xa010102, @empty, {[@generic={0x89, 0x3, "fe"}, @noop, @timestamp_prespec={0x44, 0xc, 0x44, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}]}, @cipso={0x86, 0x1c, 0x3, [{0x2, 0x8, "f7074380b774"}, {0x0, 0x8, "55c2198b9cab"}, {0x2, 0x6, "06210547"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'ip6_vti0\x00', r9, 0x29, 0x8, 0xc, 0x8, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x10, 0x5269, 0x8}}) 1m30.945906186s ago: executing program 7 (id=9872): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getown(r0, 0x9) signalfd4(r0, 0x0, 0x0, 0x800) syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x70060, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0xecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYBLOB="de2920f6cdf293eb6ac61e66ba2d0a22d8c944a221edc9f20e84eed0d52be1e08a9e3cf13dd9be5c2dd3af0247a417fef23897e4e071b47a587a14d96b1cb34804a37bc9f05bd4bc", @ANYRES32=r0], 0xff, 0x2c2, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8088, &(0x7f0000002480)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRES64, @ANYRESDEC], 0x3, 0x232, &(0x7f00000002c0)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 1m30.160673987s ago: executing program 7 (id=9876): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "653c1b4e82844461df245d602e571157637b2b264d65f76409a869d62cec2666", "2e2bb08b16c51ac62f5a95c880e2467137a74f00e71e64160700", "aed417062feee7c199b98743ad7e98588e00", "9fcc63648d5ca6f91b8d245971ee8a08460e7400", "21acd16f247aae4d9e6d207292339e96294b6d8b1491fae6922d6d21831cdac0", "81f44df52305410a0af0460a", 0x4, 0x5, 0x6, 0x7, 0x7ffffffd}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000001, 0x40010, 0xffffffffffffffff, 0x99f36000) socket(0x1e, 0x4, 0x0) syz_pidfd_open(0x0, 0x0) 1m28.942206623s ago: executing program 7 (id=9892): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a010102"], 0x40}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1m28.942099883s ago: executing program 42 (id=9892): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a010102"], 0x40}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 9.735072066s ago: executing program 3 (id=10499): syz_open_dev$sg(0x0, 0x0, 0x8082) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary="98"}]}]}, 0x2c}], 0x1}, 0x0) eventfd(0xfffffffd) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r0]) timer_create(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x50d, &(0x7f0000001280)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x1300c5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) 9.125388245s ago: executing program 3 (id=10505): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x4eda0a90bb2acc2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 6.033535288s ago: executing program 1 (id=10508): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, 0x1c) r1 = dup2(r0, r0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, 0x0, 0xa50003d1) readv(r4, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x41, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bind$tipc(r5, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000008380), 0x400000000000174, 0x4008890) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e21, 0x6, @remote, 0x8}}}, 0x38) 4.790219875s ago: executing program 6 (id=10510): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 4.203210383s ago: executing program 1 (id=10511): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x200) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000314010000000000000000000900020000000000000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 4.168758913s ago: executing program 1 (id=10512): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8970, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8140}, {r2, 0x1412}, {r1, 0x33cec81750b577e4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x2000}, {r0, 0x200}, {r2, 0x250}, {0xffffffffffffffff, 0xb000}], 0x8, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000080000007910000000000000d31030001001000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) 4.168448433s ago: executing program 0 (id=10513): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents(r0, 0x0, 0x0) getdents(r0, 0xffffffffffffffff, 0x5a) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000280)={{0x0, 0x1}, {0xe}, 0x0, 0x1}) syz_usb_connect$printer(0x4, 0x0, 0x0, &(0x7f0000000b00)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x310, 0x4, 0x0, 0x60, 0x10, 0x9f}, 0x0, 0x0}) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x2}) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) 4.094209734s ago: executing program 3 (id=10514): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x10000051}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, 0x0) creat(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x321}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/126, 0x7e}], 0x1, 0x111, 0x0) 4.029756435s ago: executing program 2 (id=10516): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0xe) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000063000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSSOFTCAR(r1, 0x5433, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x8, 0xe}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x2, 0xa, 0x5, 0x9, 0x2, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x10}}, 0x40004) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11"], 0x0) 3.838200898s ago: executing program 6 (id=10517): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000087cd000000"], 0x0, 0x8, 0x0, 0x0, 0x1e00, 0x8}, 0x94) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000405000000070000000000000e0100000000000000060000000000000700000000000000000000000d030000000000000000000002030000000000000000002e5f"], 0x0, 0x61, 0x0, 0x3}, 0x28) memfd_create(0x0, 0x0) pipe2(0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x44802, 0x20c18}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xf}, @IFLA_TXQLEN={0xffffffffffffff72, 0xd, 0x7fff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8804}, 0x880) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, 0x0, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000b00), 0x91) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="88a9131cf90d056c26f9fbb61532bc6dbee9e4688070d97f50f7d9a5578d7083867c1dd810c17b510db0c6f5b5fbe4847f462a360060ac10cb674c18f7992a2b194205b585face7efa1d5efaeb182e3a51eb551626185e1546e26810157fdb825f5ff6ab936e5607499c2191ff3ed92cc1398ad4e52345", 0x77) socket$tipc(0x1e, 0x7, 0x0) 3.822053638s ago: executing program 3 (id=10518): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r3}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) chroot(&(0x7f0000000200)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) 3.807482238s ago: executing program 6 (id=10519): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4011) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000680)=ANY=[], 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) clock_adjtime(0x4, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x22, 0x0, 0x36) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, 0x0) unshare(0x24020400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x200c2) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0xffffffffffffffff, 0x0) 3.740258049s ago: executing program 1 (id=10520): r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9fd) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b3243078b089b3330076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94c6f0d000000000000f8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb08ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 3.71026452s ago: executing program 2 (id=10522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x635e, 0x5, 0xffffffff, 0x847}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x13, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.65843629s ago: executing program 6 (id=10523): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r4, 0x0, r0, 0x0, 0xfea8, 0xa) 3.510947822s ago: executing program 2 (id=10524): openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000019c0)=@newchain={0x30, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x44004) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f0000001c80)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @private0, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=ANY=[], 0x12c8}}], 0x1, 0x4001c00) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000fec000/0x3000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fed000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x2004c0a0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, 0x0) 3.442713713s ago: executing program 0 (id=10525): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x2, 0x0, 0x2, 0xa, 0xa}, {0xc, 0x2, 0x1, 0x800, 0x3}, 0x6, 0x3027, 0x1a52}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 3.370232794s ago: executing program 2 (id=10526): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fefffffc}, 0x0, 0x0, 0x0, 0x3, 0xffb, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x259, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x9) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, 0x0, 0x20008040) socket$inet(0xa, 0x801, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) preadv(r3, 0x0, 0x0, 0x9f2, 0x2b7) socket$l2tp(0x2, 0x2, 0x73) 2.466122186s ago: executing program 6 (id=10527): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0xfe, 0x2ce, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000740), 0x101000) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@empty, 0x1, 0x0, 0x70, 0x0, [{@remote}, {@initdev}, {@dev}, {@dev}, {@empty}, {@remote}, {@dev}]}}) 2.056550472s ago: executing program 3 (id=10528): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@dioread_nolock}, {@quota}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") open$dir(0x0, 0x0, 0x0) socket(0x1, 0x5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, 0x0, 0x0, 0x80) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) 1.994849003s ago: executing program 0 (id=10529): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020400) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000006d80)=""/4082, 0xff2}], 0x1) 1.941184954s ago: executing program 1 (id=10530): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 375.043135ms ago: executing program 2 (id=10531): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) keyctl$read(0xb, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) 278.280247ms ago: executing program 0 (id=10532): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0xa, 0x2, 0x0) getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x3f9) symlinkat(&(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 275.676717ms ago: executing program 3 (id=10533): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x6, 0x6, 0x0, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getrandom(0x0, 0x0, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x528, 0x0, 0x1a0, 0x2b8, 0x388, 0xd0, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7e, 0x80}}}, {{@ipv6={@mcast1, @local, [0xffff00, 0x0, 0xffffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x1, 0x40}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x9, 0x0, [0xa80, 0x6108, 0x2, 0x9, 0x8001, 0x9, 0x6, 0x7, 0xfffe, 0x8000, 0x5, 0xfffb, 0x6d1, 0x1, 0x5, 0x8000], 0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r2 = socket$inet(0x2, 0x2, 0x0) socket(0x1e, 0x1, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) bind$inet(r2, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r2, 0x1}, 0x20) 192.046678ms ago: executing program 2 (id=10534): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket(0xa, 0x800, 0x3a) sendmsg$inet(0xffffffffffffffff, 0x0, 0x45) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, @perf_bp={0x0}, 0x424, 0x0, 0x0, 0x2, 0x8000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xaa) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xcc, 0x30, 0x51b, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xcc}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x6, 0x201, 0xd92cc367, 0x8001, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r1, 0x5}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) sendmsg$AUDIT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x3e9, 0x400, 0x70bd2d, 0x25dfdbff, {0x22, 0x0, 0x0, r3, 0x3, 0x3, 0x8, 0xb9, 0x0, 0x0, 0x7}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24080050) 149.849329ms ago: executing program 6 (id=10535): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x4, 0x10000000}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @local, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x0, 0x38}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb269}, 0x94) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) io_uring_enter(r1, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x51e, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0x8c, 0x6d, 0x83, 0x20, 0x5ac, 0x217, 0x668b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50c, 0x3, 0x4, 0xc4, 0xc0, 0x1, "", [{{0x9, 0x4, 0xc8, 0x5, 0x0, 0x3, 0x99, 0x2, 0xf3, [@generic={0x2, 0xe}, @hid_hid={0x9, 0x21, 0x8, 0xa, 0x1, {0x22, 0x4a6}}]}}, {{0x9, 0x4, 0xa, 0x2, 0x5, 0xe, 0x1, 0x0, 0xfe, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "dad1"}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x81, 0x0, 0x5}, [@dmm={0x7, 0x24, 0x14, 0x1f92}, @acm={0x4}]}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x5, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x7, 0x7, 0xfe}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0xd, 0x7, 0xe6}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0x7, 0x76, 0x5}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x1, 0xe, 0x1}}]}}, {{0x9, 0x4, 0x53, 0x9, 0xd, 0xf9, 0xe7, 0xfa, 0x9, [@generic={0x2, 0x31}], [{{0x9, 0x5, 0xd, 0x1, 0x200, 0x2, 0x40, 0x80}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x4b, 0x0, 0x5, [@generic={0x3c, 0x22, "7e234d0aaf1bddda39d60c976d93dd77fda4d6f1ac4e2acd54802885b843a5e343dcef60378c50ef316dc12cafef97b27300a3572023686a6045"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x3, 0x1b, 0xf}}, {{0x9, 0x5, 0x1, 0xa, 0x400, 0x1f, 0x2, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8f, 0x5}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x4, 0x9, 0x3, [@generic={0xfc, 0xf, "9e5fa5a70252d1d4942ea704c1953ea0a50393f4b7eb8bb9dca51175c8fb77cd496bc0c1a955df092fa06f2cb781bdd1eb07a0075c27d77e7b12558a1d64ec7e4f06c24249adfd6920ef8352fc3665ecc3ad8236d291c130d81cec86314daa0a9820948d11afbd44610d428d8d074dff41add440b9bc6c292bb5925d08f55fee72cc4a60287f62a5c53f1841032ef75194c739de51db4ccbdbe329f5e8239bd15e833020f1e3992319ba5f89635a73a2e85342b3ff9c399d52ad72ddd72a6d641550477421d364cb32c1c4b5312c1926bc289b8fb784d4f6c0c949a7df173cab547a3543859ac80650d25ee9465e61656a371a13cfef7dc2b7d5"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xe00}]}}, {{0x9, 0x5, 0x5, 0x16, 0x20, 0xf9, 0x4, 0x1, [@generic={0xe2, 0x22, "eb781e57b5e978c66525ccb3a0124a6a2c40faeb92f00e6f7007e9bac822a72e19677060e00b47b482b773fd8e45a0e125e91ffa8e4286848d64aee9d72d2612d186f1f0976ad89b407ffe1624d970c2d5c9926b0fcffe2977992f64527aa06741b5a2601f81296fea134a2720b6134a0b555c54e60b20c0a207b2f29e8044c9a1ac619722c54119a14c8a9881aad9b4f6a0c3135bd92294b6f4386f0372722417c71c28e514da0ab90fa63a57c60d027ccdaed3961b58a12ddc4d3ef92a5380b8f79755daf1eba6fe772386d20b81d7bae054f37296a1ee831843eed9d81f35"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x61, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x5e, 0xc, 0x6}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x7, 0xe0, 0x9}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0x5, 0xe0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x9, 0x80, 0x6}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x0, 0x5, 0x3, [@generic={0xf3, 0x11, "d8b8fe24a893e37be4aaf76b97af4d61ebcdf115cb8a76d05d3209985f8621ddfb975ed19601813ecf8a01cff6aa318e762b6533717541db6546e7492c936d34ee859a2e9751ae8aeabc816b13075aa2714b2b248ac79960ed3d04e55a3935da51311d61d2cd1a75638f414a771749623f3d6df454cd542332cd547172bd40b54ccf1879051d802fff1cb20bcd6789e3a3635dc66b9d806ddeba4c100137eb4f4dd83cce3d1170c22a3bb983c22444f5e41e56092afbabb2b8df942805ae9a41713e21a6b1b92d5e8f2b983d6866ddf789a40c7377f5dc29e97164609e889ffe70a7f88e50f825fb18be433898116e9b90"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x18, 0xd, 0x8, 0x9, [@generic={0xde, 0x23, "526f2c5b35c1a4614d63b054d5eae3a2fdd2f86f87a07fe6ec680d96b656318e48a3b6f407fa0772e978a6a2fc805d70ef2b4a487c4a6b602025e146cebd963a34d94b86dac162b5abf789d587b5c333a6074faa4dd90509b9d4ce8788a128631cab4f9d0739bc4655503b468808d6ff6561345b58dab548d69b706e105c36145c184f49d21172b245c139a3cc60270967e64be4a9f421c9d65785d3086ef89928a568d449ad58c50889026098d493daf998692e0ae4e369f9f940a5678a029362320e559310cca28eb242556de7feb00990664751b8ebc388fc2de4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x1}]}}]}}]}}]}}, &(0x7f0000002080)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x310, 0x3, 0x5, 0xf, 0xff, 0x5}, 0x0, 0x0, 0x6, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x423}}, {0x0, 0x0}, {0x5a, &(0x7f0000000ec0)=@string={0x5a, 0x3, "600583cef0d3fee19db3d8010c6bc06e83459cb91bbc0c1abe7cbec3a4a3fcb6b81ca6616e43aae43f5794426a7f1afe37d63da610cee098739d739608eac52ba2eac95f9c113fb939f85dc3cb481a800d8108f9f2955684"}}, {0x5d, &(0x7f0000000f40)=@string={0x5d, 0x3, "44432c838cd6471d665699f8e08b90668afffd33f8ac7ee7382a1451cc3ea6d7a6607b6315520880ef12e41f65f1b6c91b414e766b9817cd62dda51e3b0935bf52f64251a5705b96642820a24a65b20359c9c0fc16a60663ee60a9"}}, {0x44, &(0x7f0000000fc0)=@string={0x44, 0x3, "09544b45c276ddd4e747af81e977e8777c96c8f71c1a97546da08224cbeea242cdb830d2a621322e3f8671976d4408b854bc60ea905550dab74daf31c548b79fbf78"}}, {0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x44a}}]}) dup2(r0, 0xffffffffffffffff) 541.391µs ago: executing program 1 (id=10536): socket(0x10, 0x80003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x100, 0x7ff, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x80400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r1, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 264.571µs ago: executing program 0 (id=10537): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2b, 0x1, 0x1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005880)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000005840)={r2, 0xb4, &(0x7f0000001100)}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x20000040) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0xffffffffffffff5a, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64=0x1f}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 0s ago: executing program 0 (id=10538): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x50001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7fffffff, 0x5}, 0x11100a, 0x200, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x10800, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='maps\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r4, @ANYBLOB="100001800400", @ANYRES8=r1], 0x28}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): s/virtual/misc/uhid/report_descriptor': No such file or directory [ 1609.737298][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1609.876212][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1609.994263][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1610.165640][ T4068] loop2: detected capacity change from 0 to 512 [ 1610.187941][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9834'. [ 1610.208035][ T4068] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1610.215993][ T4068] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 1610.224040][ T4068] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1610.237420][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1610.248298][ T4068] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.9838: iget: bad i_size value: 12154761577498 [ 1610.248334][ T4068] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1610.257941][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1610.278669][ C0] EXT4-fs (loop2): initial error at time 2000001661: ext4_orphan_get:1399: inode 13 [ 1610.288115][ C0] EXT4-fs (loop2): last error at time 2000001661: ext4_orphan_get:1399: inode 13 [ 1610.309758][ T4068] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.9838: couldn't read orphan inode 13 (err -117) [ 1610.326643][ T4077] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9841'. [ 1610.330133][ T4068] loop2: lost filesystem error report for type 5 error -117 [ 1610.347169][ T4068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1610.424215][T19348] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1610.705461][ T4096] loop6: detected capacity change from 0 to 512 [ 1610.726527][ T4096] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.9847: inode has both inline data and extents flags [ 1610.740021][ T4096] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1610.740283][ T4096] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.9847: couldn't read orphan inode 15 (err -117) [ 1610.777869][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1610.784379][ C0] EXT4-fs (loop6): initial error at time 2000001661: ext4_orphan_get:1399: inode 15 [ 1610.793847][ C0] EXT4-fs (loop6): last error at time 2000001661: ext4_orphan_get:1399: inode 15 [ 1610.803381][ T4096] loop6: lost filesystem error report for type 5 error -117 [ 1610.804016][ T4096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1610.827950][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 1610.828035][ T28] audit: type=1400 audit(2000001661.723:7743): avc: denied { write } for pid=4095 comm="syz.6.9847" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1610.860135][ T4096] SELinux: Context system_u:object_r:systemd_systemctl_exec_t:s0 is not valid (left unmapped). [ 1610.861558][ T28] audit: type=1400 audit(2000001661.733:7744): avc: denied { mac_admin } for pid=4095 comm="syz.6.9847" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1610.903375][ T28] audit: type=1400 audit(2000001661.733:7745): avc: denied { relabelto } for pid=4095 comm="syz.6.9847" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_systemctl_exec_t:s0" [ 1610.937262][T30494] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1611.255222][ T4115] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 1611.446154][T18244] IPVS: stop unused estimator thread 0... [ 1611.470089][ T4122] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9857'. [ 1611.553069][ T4122] syzkaller1: entered promiscuous mode [ 1611.558591][ T4122] syzkaller1: entered allmulticast mode [ 1611.658641][ T4130] bond1: option ad_actor_sys_prio: invalid value (0) [ 1611.665385][ T4130] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1611.684183][ T4130] bond1 (unregistering): Released all slaves [ 1612.037909][ T28] audit: type=1400 audit(2000001662.773:7746): avc: denied { getopt } for pid=4143 comm="syz.7.9864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1613.776378][ T4155] loop7: detected capacity change from 0 to 512 [ 1613.784164][ T4155] EXT4-fs: Ignoring removed orlov option [ 1614.352473][ T4155] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1614.763301][ T4155] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.9866: invalid indirect mapped block 32768 (level 2) [ 1614.776846][ T4155] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1614.784003][ T4155] EXT4-fs (loop7): 1 orphan inode deleted [ 1614.798948][ T4155] EXT4-fs (loop7): 1 truncate cleaned up [ 1614.805031][ T4155] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1614.840358][ T28] audit: type=1400 audit(2000001665.733:7747): avc: denied { wake_alarm } for pid=4163 comm="syz.1.9869" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1614.888186][ T4164] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9870'. [ 1614.926662][ T4164] syzkaller1: entered promiscuous mode [ 1614.936318][ T28] audit: type=1400 audit(2000001665.803:7748): avc: denied { write } for pid=4166 comm="syz.2.9871" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1615.034069][ T943] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1615.044118][ T4164] syzkaller1: entered allmulticast mode [ 1615.140600][ T28] audit: type=1400 audit(2000001665.803:7749): avc: denied { ioctl } for pid=4166 comm="syz.2.9871" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1615.195893][ T4172] loop7: detected capacity change from 0 to 128 [ 1615.287518][ T28] audit: type=1400 audit(2000001666.153:7750): avc: denied { block_suspend } for pid=4174 comm="syz.6.9874" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1615.401123][ T28] audit: type=1400 audit(2000001666.153:7751): avc: denied { mount } for pid=4171 comm="syz.7.9872" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1615.814802][ T28] audit: type=1400 audit(2000001666.643:7752): avc: denied { unmount } for pid=943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1615.845761][ T4179] loop2: detected capacity change from 0 to 128 [ 1615.852265][ T28] audit: type=1400 audit(2000001666.733:7753): avc: denied { mount } for pid=4178 comm="syz.2.9877" name="/" dev="ramfs" ino=106451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1615.879430][ T28] audit: type=1400 audit(2000001666.773:7754): avc: denied { mounton } for pid=4178 comm="syz.2.9877" path="/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=106459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1615.952912][ T28] audit: type=1400 audit(2000001666.823:7755): avc: denied { bind } for pid=4183 comm="syz.0.9879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1615.979563][ T4179] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1615.996836][ T4179] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1616.039914][ T4179] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1616.295498][ T28] audit: type=1400 audit(2000001667.133:7756): avc: denied { cpu } for pid=4189 comm="syz.6.9880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1616.401460][ T28] audit: type=1400 audit(2000001667.283:7757): avc: denied { create } for pid=4198 comm="syz.0.9885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1616.427592][ T28] audit: type=1400 audit(2000001667.313:7758): avc: denied { read } for pid=4198 comm="syz.0.9885" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1616.466189][ T28] audit: type=1400 audit(2000001667.313:7759): avc: denied { open } for pid=4198 comm="syz.0.9885" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1616.500570][ T4202] loop6: detected capacity change from 0 to 512 [ 1616.508004][ T4202] EXT4-fs: Ignoring removed oldalloc option [ 1616.526446][ T4202] EXT4-fs: Ignoring removed i_version option [ 1616.550986][ T4202] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1616.570093][ T4202] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1616.586701][ T4202] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.9886: invalid indirect mapped block 4294967295 (level 1) [ 1616.610410][ T4202] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1616.610625][ T4202] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.9886: invalid indirect mapped block 4294967295 (level 1) [ 1616.633887][ T4202] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1616.634461][ T4202] EXT4-fs (loop6): 2 truncates cleaned up [ 1616.649831][ T4202] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1616.669297][ T4202] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 6: comm syz.6.9886: lblock 5 mapped to illegal pblock 6 (length 1) [ 1616.694996][T30494] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1616.749857][ T4211] loop6: detected capacity change from 0 to 128 [ 1616.810919][ T4211] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9889'. [ 1616.877778][ T28] audit: type=1400 audit(2000001667.713:7760): avc: denied { create } for pid=4214 comm="syz.6.9890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1616.898515][ T28] audit: type=1400 audit(2000001667.713:7761): avc: denied { bind } for pid=4214 comm="syz.6.9890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1617.110227][ T28] audit: type=1400 audit(2000001667.993:7762): avc: denied { mounton } for pid=4222 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1617.404820][ T4222] lo speed is unknown, defaulting to 1000 [ 1617.478145][ T4248] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1617.489209][ T4245] loop6: detected capacity change from 0 to 1024 [ 1617.745817][ T4245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1617.859121][ T4245] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1618.336799][ T3932] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:16: bg 0: block 112: padding at end of block bitmap is not set [ 1618.431362][ T3932] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 1618.457533][ T4222] lo speed is unknown, defaulting to 1000 [ 1618.463680][ T4222] gre0 speed is unknown, defaulting to 1000 [ 1618.475411][ T3932] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1618.475411][ T3932] [ 1618.514133][ T3932] EXT4-fs (loop6): Total free blocks count 0 [ 1618.532323][ T3932] EXT4-fs (loop6): Free/Dirty block details [ 1618.550276][ T3932] EXT4-fs (loop6): free_blocks=0 [ 1618.561080][ T3932] EXT4-fs (loop6): dirty_blocks=16 [ 1618.578523][ T3932] EXT4-fs (loop6): Block reservation details [ 1618.586478][ T3932] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 1618.606032][T30494] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1618.639531][T30494] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1618.867419][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.875048][ T4222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.883231][ T4222] bridge_slave_0: entered allmulticast mode [ 1618.891285][ T4222] bridge_slave_0: entered promiscuous mode [ 1618.899480][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.907179][ T4222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.915080][ T4222] bridge_slave_1: entered allmulticast mode [ 1618.922611][ T4222] bridge_slave_1: entered promiscuous mode [ 1618.953504][ T4222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1618.966124][ T4222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.996147][ T4222] team0: Port device team_slave_0 added [ 1619.003875][ T4222] team0: Port device team_slave_1 added [ 1619.027883][ T4222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1619.035422][ T4222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1619.069082][ T4222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1619.082076][ T4222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1619.089686][ T4222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1619.120590][ T4222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1619.150070][ T4222] hsr_slave_0: entered promiscuous mode [ 1619.156227][ T4222] hsr_slave_1: entered promiscuous mode [ 1619.162068][ T4222] debugfs: 'hsr0' already exists in 'hsr' [ 1619.168342][ T4222] Cannot create hsr debugfs directory [ 1619.451723][ T4300] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1620.877882][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 1620.877910][ T28] audit: type=1400 audit(2000001671.774:7791): avc: denied { write } for pid=4418 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1620.973543][ T28] audit: type=1400 audit(2000001671.864:7792): avc: denied { write } for pid=4422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1621.006141][ T28] audit: type=1400 audit(2000001671.864:7793): avc: denied { write } for pid=4433 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1621.100901][ T28] audit: type=1400 audit(2000001671.974:7794): avc: denied { write } for pid=4435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1621.146845][ T28] audit: type=1400 audit(2000001672.034:7795): avc: denied { write } for pid=4446 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1621.182779][ T4449] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9925'. [ 1621.224538][ T28] audit: type=1400 audit(2000001672.114:7796): avc: denied { bind } for pid=4452 comm="syz.6.9926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1621.252398][ T28] audit: type=1400 audit(2000001672.114:7797): avc: denied { setopt } for pid=4452 comm="syz.6.9926" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1621.275274][ T28] audit: type=1400 audit(2000001672.164:7798): avc: denied { nlmsg_read } for pid=4452 comm="syz.6.9926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1621.333946][ T28] audit: type=1400 audit(2000001672.224:7799): avc: denied { write } for pid=4450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1621.365973][ T28] audit: type=1400 audit(2000001672.224:7800): avc: denied { write } for pid=4465 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1622.267778][ T4532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9937'. [ 1622.283487][ T4532] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1622.295569][ T4532] veth1_vlan: left allmulticast mode [ 1622.301576][ T4532] macvlan1: left promiscuous mode [ 1622.306975][ T4532] macvlan1: left allmulticast mode [ 1622.320476][ T4532] bond3: (slave macvlan1): Enslaving as an active interface with an up link [ 1622.340071][ T4532] bond3 (unregistering): (slave macvlan1): Releasing backup interface [ 1622.351898][ T4532] bond3 (unregistering): Released all slaves [ 1622.512320][ T4314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1622.522738][ T4222] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1622.534440][ T4537] netlink: 'syz.1.9939': attribute type 1 has an invalid length. [ 1622.553520][ T4222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1622.579499][ T4537] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1622.589954][ T4222] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1622.602832][ T4222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1622.610766][ T4222] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1622.620078][ T4222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1622.630735][ T4222] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1622.647946][ T4222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1622.660112][ T4537] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 1622.727579][ T4222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1622.745952][ T4222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1622.758477][T18244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.765605][T18244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1622.784235][T18244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.791372][T18244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1622.810464][ T4222] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1622.820866][ T4222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1623.712553][ T4583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4583 comm=syz.0.9947 [ 1624.759697][ T4222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1625.101701][ T4222] veth0_vlan: entered promiscuous mode [ 1625.136019][ T4222] veth1_vlan: entered promiscuous mode [ 1625.179460][ T4222] veth0_macvtap: entered promiscuous mode [ 1625.202294][ T4222] veth1_macvtap: entered promiscuous mode [ 1625.242014][ T4222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1625.266401][ T4222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1625.288161][T18249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.305430][T18249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.352328][T18249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.361122][T18249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.477753][ T4650] netlink: 666 bytes leftover after parsing attributes in process `syz.6.9959'. [ 1625.546376][ T4655] loop5: detected capacity change from 0 to 7 [ 1625.601567][ T4657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9961'. [ 1625.769374][ T4667] loop3: detected capacity change from 0 to 1024 [ 1625.781910][ T4667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1625.917632][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 1625.917664][ T28] audit: type=1400 audit(2000001676.814:7836): avc: denied { write } for pid=4666 comm="syz.3.9966" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1625.929769][ T4667] EXT4-fs warning (device loop3): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 1625.967598][ T28] audit: type=1400 audit(2000001676.814:7837): avc: denied { create } for pid=4666 comm="syz.3.9966" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1625.987758][ T28] audit: type=1400 audit(2000001676.814:7838): avc: denied { write } for pid=4666 comm="syz.3.9966" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1626.009685][ T28] audit: type=1400 audit(2000001676.814:7839): avc: denied { write } for pid=4666 comm="syz.3.9966" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1626.031407][ T28] audit: type=1400 audit(2000001676.814:7840): avc: denied { remove_name } for pid=4666 comm="syz.3.9966" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1626.098922][ T28] audit: type=1400 audit(2000001676.814:7841): avc: denied { rename } for pid=4666 comm="syz.3.9966" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1626.120819][ T28] audit: type=1400 audit(2000001676.814:7842): avc: denied { rmdir } for pid=4666 comm="syz.3.9966" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1626.244123][ T4678] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9970'. [ 1626.274063][ T4222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1626.414519][ T28] audit: type=1400 audit(2000001677.304:7843): avc: denied { map } for pid=4681 comm="syz.2.9971" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=108123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1626.466316][ T28] audit: type=1400 audit(2000001677.304:7844): avc: denied { read write } for pid=4681 comm="syz.2.9971" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=108123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1626.512823][ T28] audit: type=1400 audit(2000001677.304:7845): avc: denied { create } for pid=4679 comm="syz.3.9969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1626.724718][ T4689] syz.0.9973 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1626.739036][ T4689] CPU: 1 UID: 0 PID: 4689 Comm: syz.0.9973 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1626.739073][ T4689] Tainted: [W]=WARN [ 1626.739080][ T4689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1626.739160][ T4689] Call Trace: [ 1626.739167][ T4689] [ 1626.739183][ T4689] __dump_stack+0x1d/0x30 [ 1626.739238][ T4689] dump_stack_lvl+0x95/0xd0 [ 1626.739260][ T4689] dump_stack+0x15/0x1b [ 1626.739280][ T4689] dump_header+0x80/0x240 [ 1626.739304][ T4689] oom_kill_process+0x295/0x350 [ 1626.739398][ T4689] out_of_memory+0x981/0xbc0 [ 1626.739495][ T4689] try_charge_memcg+0x621/0xa00 [ 1626.739584][ T4689] ? __rcu_read_unlock+0x4e/0x70 [ 1626.739629][ T4689] __memcg_kmem_charge_page+0x199/0x3a0 [ 1626.739661][ T4689] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1626.739743][ T4689] alloc_pages_mpol+0xa9/0x1d0 [ 1626.739775][ T4689] alloc_pages_noprof+0x8f/0x140 [ 1626.739805][ T4689] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 1626.739900][ T4689] __kvmalloc_node_noprof+0x3a0/0x590 [ 1626.739972][ T4689] ? futex_hash_allocate+0x192/0x920 [ 1626.740052][ T4689] ? futex_hash_allocate+0x192/0x920 [ 1626.740073][ T4689] ? futex_hash_allocate+0x192/0x920 [ 1626.740097][ T4689] futex_hash_allocate+0x192/0x920 [ 1626.740129][ T4689] ? __se_sys_prctl+0x8e/0x13b0 [ 1626.740236][ T4689] futex_hash_prctl+0xd8/0xf0 [ 1626.740257][ T4689] __se_sys_prctl+0x4f4/0x13b0 [ 1626.740289][ T4689] __x64_sys_prctl+0x67/0x80 [ 1626.740353][ T4689] x64_sys_call+0x2533/0x3020 [ 1626.740378][ T4689] do_syscall_64+0x136/0x3c0 [ 1626.740537][ T4689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.740596][ T4689] RIP: 0033:0x7f2a2139ce59 [ 1626.740615][ T4689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1626.740686][ T4689] RSP: 002b:00007f2a1fdf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1626.740707][ T4689] RAX: ffffffffffffffda RBX: 00007f2a21615fa0 RCX: 00007f2a2139ce59 [ 1626.740722][ T4689] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1626.740736][ T4689] RBP: 00007f2a21432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1626.740791][ T4689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1626.740805][ T4689] R13: 00007f2a21616038 R14: 00007f2a21615fa0 R15: 00007fffe1535398 [ 1626.740905][ T4689] [ 1626.741228][ T4689] memory: usage 307200kB, limit 307200kB, failcnt 5641 [ 1627.002079][ T4689] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 1627.010289][ T4689] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1627.022653][ T4689] Memory cgroup stats for /syz0: [ 1627.023467][ T4689] cache 0 [ 1627.031729][ T4689] rss 0 [ 1627.034734][ T4689] shmem 0 [ 1627.038188][ T4689] mapped_file 0 [ 1627.041883][ T4689] dirty 0 [ 1627.045049][ T4689] writeback 0 [ 1627.084773][ T4689] workingset_refault_anon 391 [ 1627.089942][ T4689] workingset_refault_file 5014 [ 1627.094799][ T4689] swap 376832 [ 1627.101104][ T4689] swapcached 87248896 [ 1627.105239][ T4689] pgpgin 498588 [ 1627.109083][ T4689] pgpgout 498588 [ 1627.112803][ T4689] pgfault 599768 [ 1627.116695][ T4689] pgmajfault 239 [ 1627.120339][ T4689] inactive_anon 0 [ 1627.124195][ T4689] active_anon 0 [ 1627.128113][ T4689] inactive_file 0 [ 1627.131837][ T4689] active_file 0 [ 1627.135370][ T4689] unevictable 0 [ 1627.139263][ T4689] hierarchical_memory_limit 314572800 [ 1627.144843][ T4689] hierarchical_memsw_limit 9223372036854771712 [ 1627.197535][ T4689] total_cache 0 [ 1627.204550][ T4689] total_rss 0 [ 1627.212633][ T4689] total_shmem 0 [ 1627.225129][ T4689] total_mapped_file 0 [ 1627.237805][ T4689] total_dirty 0 [ 1627.244156][ T4689] total_writeback 0 [ 1627.251769][ T4689] total_workingset_refault_anon 391 [ 1627.263546][ T4689] total_workingset_refault_file 5014 [ 1627.274632][ T4689] total_swap 376832 [ 1627.283992][ T4689] total_swapcached 87248896 [ 1627.291881][ T4689] total_pgpgin 498588 [ 1627.296179][ T4689] total_pgpgout 498588 [ 1627.311808][ T4689] total_pgfault 599768 [ 1627.316471][ T4689] total_pgmajfault 239 [ 1627.320790][ T4689] total_inactive_anon 0 [ 1627.325060][ T4689] total_active_anon 0 [ 1627.329058][ T4689] total_inactive_file 0 [ 1627.333237][ T4689] total_active_file 0 [ 1627.337255][ T4689] total_unevictable 0 [ 1627.341263][ T4689] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9973,pid=4686,uid=0 [ 1627.355953][ T4689] Memory cgroup out of memory: Killed process 4686 (syz.0.9973) total-vm:94036kB, anon-rss:1232kB, file-rss:22160kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1627.465111][ T4719] loop2: detected capacity change from 0 to 512 [ 1627.542717][ T4719] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1627.553771][ T4719] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1627.560729][ T4719] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1627.564165][ T4731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9993'. [ 1627.578073][ T4730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9994'. [ 1627.593470][ T4731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9993'. [ 1627.602652][ T4730] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9994'. [ 1627.603782][ T4719] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1627.619766][ T4719] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #16: comm syz.2.9990: inode has both inline data and extents flags [ 1627.640861][ T4719] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1627.646352][ T4719] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.9990: couldn't read orphan inode 16 (err -117) [ 1627.667388][ T4719] loop2: lost filesystem error report for type 5 error -117 [ 1627.668087][ T4719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1627.719653][T19348] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1628.118869][ T4750] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10003'. [ 1628.842586][ T4758] netlink: 'syz.6.10007': attribute type 39 has an invalid length. [ 1629.334036][ T4780] loop2: detected capacity change from 0 to 512 [ 1629.346152][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10015'. [ 1629.356083][ T4780] EXT4-fs error (device loop2): ext4_quota_enable:7232: comm syz.2.10016: inode #262144: comm syz.2.10016: iget: illegal inode # [ 1629.369696][ T4780] loop2: lost filesystem error report for type 5 error -117 [ 1629.369821][ T4780] EXT4-fs error (device loop2): ext4_quota_enable:7235: comm syz.2.10016: Bad quota inode: 262144, type: 2 [ 1629.377268][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1629.377290][ C0] EXT4-fs (loop2): initial error at time 2000001680: ext4_quota_enable:7232 [ 1629.377324][ C0] EXT4-fs (loop2): last error at time 2000001680: ext4_quota_enable:7232 [ 1629.429909][ T4780] loop2: lost filesystem error report for type 5 error -117 [ 1629.430224][ T4780] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=262144). Please run e2fsck to fix. [ 1629.456506][ T4780] EXT4-fs (loop2): mount failed [ 1629.635372][ T4787] loop3: detected capacity change from 0 to 512 [ 1629.768010][ T4787] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.10014: corrupted inode contents [ 1629.780260][ T4787] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1629.780899][ T4787] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.10014: mark_inode_dirty error [ 1629.801611][ T4787] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1629.802282][ T4787] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.10014: corrupted inode contents [ 1629.823393][ T4787] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1629.823984][ T4787] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.10014: mark_inode_dirty error [ 1629.844574][ T4787] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1629.848040][ T4787] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.10014: corrupted inode contents [ 1629.857937][ C0] EXT4-fs (loop3): error count since last fsck: 4 [ 1629.858163][ C0] EXT4-fs (loop3): initial error at time 2000001680: ext4_do_update_inode:5742: inode 16 [ 1629.858331][ C0] EXT4-fs (loop3): last error at time 2000001680: __ext4_ext_dirty:207: inode 16 [ 1629.904731][ T4787] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1629.918529][ T4787] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1629.937702][ T4787] loop3: lost filesystem error report for type 5 error -117 [ 1629.940312][ T4787] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.10014: corrupted inode contents [ 1629.967745][ T4787] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1629.969418][ T4787] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.10014: mark_inode_dirty error [ 1629.989918][ T4787] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1629.990815][ T4787] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1630.008860][ T4787] loop3: lost filesystem error report for type 5 error -117 [ 1630.011692][ T4787] EXT4-fs (loop3): 1 truncate cleaned up [ 1630.025899][ T4787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1630.038854][ T4787] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1630.073515][T18244] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:14: Failed to release dquot type 1 [ 1630.552675][ T4814] loop6: detected capacity change from 0 to 1024 [ 1630.605291][ T4814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1630.638093][ T4814] EXT4-fs warning (device loop6): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 1630.660275][T30494] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1630.921705][ T4823] syzkaller0: entered promiscuous mode [ 1630.927860][ T4823] syzkaller0: entered allmulticast mode [ 1631.336608][ T4830] syzkaller0: entered promiscuous mode [ 1631.347178][ T4830] syzkaller0: entered allmulticast mode [ 1631.561691][ T4840] loop6: detected capacity change from 0 to 512 [ 1631.577406][ T4840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1631.603123][ T4840] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 1631.619450][ T4840] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.10039: corrupted in-inode xattr: e_value size too large [ 1631.641388][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1631.641442][ T28] audit: type=1400 audit(2000001682.535:7862): avc: denied { connect } for pid=4845 comm="syz.0.10041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1631.678984][ T4840] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1631.679183][ T4840] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.10039: couldn't read orphan inode 15 (err -117) [ 1631.688377][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1631.688400][ C0] EXT4-fs (loop6): initial error at time 2000001682: ext4_iget_extra_inode:5180: inode 15 [ 1631.688442][ C0] EXT4-fs (loop6): last error at time 2000001682: ext4_iget_extra_inode:5180: inode 15 [ 1631.732727][ T28] audit: type=1400 audit(2000001682.565:7863): avc: denied { write } for pid=4845 comm="syz.0.10041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1631.778389][ T28] audit: type=1400 audit(2000001682.675:7864): avc: denied { mount } for pid=4847 comm="syz.0.10042" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1631.832856][ T4840] loop6: lost filesystem error report for type 5 error -117 [ 1631.833545][ T4840] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1631.863621][ T28] audit: type=1400 audit(2000001682.755:7865): avc: denied { unmount } for pid=26133 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1631.894786][T30494] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1632.066245][ T4222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1632.077629][ T4852] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10053'. [ 1632.172541][ T4855] lo speed is unknown, defaulting to 1000 [ 1632.228402][ T4855] lo speed is unknown, defaulting to 1000 [ 1632.234637][ T4855] gre0 speed is unknown, defaulting to 1000 [ 1632.387063][ T28] audit: type=1400 audit(2000001683.235:7866): avc: denied { read } for pid=4867 comm="syz.0.10049" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1632.677887][ T4875] loop3: detected capacity change from 0 to 512 [ 1632.829873][ T4875] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.10050: corrupted inode contents [ 1632.842834][ T4875] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1632.844796][ T4875] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.10050: mark_inode_dirty error [ 1632.854759][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1632.854809][ C1] EXT4-fs (loop3): initial error at time 2000001683: ext4_do_update_inode:5742: inode 16 [ 1632.854852][ C1] EXT4-fs (loop3): last error at time 2000001683: ext4_do_update_inode:5742: inode 16 [ 1632.894602][ T4875] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1632.905467][ T4875] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.10050: corrupted inode contents [ 1632.927928][ T4875] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1632.929267][ T4875] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.10050: mark_inode_dirty error [ 1632.949866][ T4875] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1632.950841][ T4875] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.10050: corrupted inode contents [ 1632.971927][ T4875] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1632.972436][ T4875] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1632.990261][ T4875] loop3: lost filesystem error report for type 5 error -117 [ 1632.991175][ T4875] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.10050: corrupted inode contents [ 1633.010467][ T4875] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1633.010971][ T4875] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.10050: mark_inode_dirty error [ 1633.037093][ T4875] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1633.047333][ T4875] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1633.066735][ T4875] loop3: lost filesystem error report for type 5 error -117 [ 1633.067494][ T4794] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1633.087029][ T4875] EXT4-fs (loop3): 1 truncate cleaned up [ 1633.095873][ T4875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1633.109557][ T4875] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1633.502449][T12139] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1633.526892][T12139] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:13: Failed to release dquot type 1 [ 1634.423251][ T4893] loop6: detected capacity change from 0 to 512 [ 1634.576191][ T23] hid_parser_main: 7 callbacks suppressed [ 1634.576220][ T23] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1634.592748][ T23] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1634.607408][ T4893] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.10054: corrupted inode contents [ 1634.619409][ T4893] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1634.620791][ T4893] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #16: comm syz.6.10054: mark_inode_dirty error [ 1634.641998][ T4893] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1634.642808][ T4893] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.10054: corrupted inode contents [ 1634.670375][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 1634.670402][ C1] EXT4-fs (loop6): initial error at time 2000001685: ext4_do_update_inode:5742: inode 16 [ 1634.670436][ C1] EXT4-fs (loop6): last error at time 2000001685: ext4_dirty_inode:6639: inode 16 [ 1634.696150][ T4893] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1634.702253][ T4893] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.10054: mark_inode_dirty error [ 1634.723341][ T4893] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.10054: corrupted inode contents [ 1634.735899][ T4893] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1634.744571][ T4893] loop6: lost filesystem error report for type 5 error -117 [ 1634.745259][ T4893] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.10054: corrupted inode contents [ 1634.765167][ T4893] EXT4-fs error (device loop6): ext4_truncate:4691: inode #16: comm syz.6.10054: mark_inode_dirty error [ 1634.787477][ T4893] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1634.796494][ T4893] loop6: lost filesystem error report for type 5 error -117 [ 1634.800905][ T4893] EXT4-fs (loop6): 1 truncate cleaned up [ 1634.815242][ T4893] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1634.828050][ T4893] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1635.380747][ T3930] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1635.390553][ T3930] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:15: Failed to release dquot type 1 [ 1635.510209][ T4222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1635.571166][ T4915] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10058'. [ 1635.716184][ T28] audit: type=1400 audit(2000001686.606:7867): avc: denied { write } for pid=4923 comm="syz.3.10064" name="tcp6" dev="proc" ino=4026532716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1635.814188][ T4917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1636.107455][ T4937] loop3: detected capacity change from 0 to 512 [ 1636.160874][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1636.174193][T30494] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1636.236980][ T23] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1636.237935][ T4937] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1636.254586][ T4937] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 1636.262649][ T4937] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1636.319378][ T4937] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.10069: iget: bad i_size value: 12154761577498 [ 1636.346746][ T28] audit: type=1400 audit(2000001687.146:7868): avc: denied { mount } for pid=4946 comm="syz.1.10074" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1636.375184][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1636.375210][ C1] EXT4-fs (loop3): initial error at time 2000001687: ext4_orphan_get:1399: inode 13 [ 1636.375246][ C1] EXT4-fs (loop3): last error at time 2000001687: ext4_orphan_get:1399: inode 13 [ 1636.376529][ T4937] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.10069: couldn't read orphan inode 13 (err -117) [ 1636.412332][ T4937] loop3: lost filesystem error report for type 5 error -117 [ 1636.415808][ T4937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1636.425681][ T28] audit: type=1400 audit(2000001687.276:7869): avc: denied { watch watch_reads } for pid=4946 comm="syz.1.10074" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 1636.467094][ T4954] loop6: detected capacity change from 0 to 512 [ 1636.473884][ T4954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1636.511367][ T4937] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.10069: dx entry: limit 65535 != root limit 120 [ 1636.523664][ T4937] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.10069: Corrupt directory, running e2fsck is recommended [ 1636.545758][ T4954] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.10071: corrupted in-inode xattr: invalid ea_ino [ 1636.559379][ T4954] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.10071: couldn't read orphan inode 15 (err -117) [ 1636.571335][ T4954] loop6: lost filesystem error report for type 5 error -117 [ 1636.572067][ T4954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1636.607402][ T4962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10078'. [ 1636.619307][ T4962] geneve3: entered promiscuous mode [ 1636.619670][ T4222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1636.637974][T30494] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1636.863433][ T28] audit: type=1400 audit(2000001687.716:7870): avc: denied { create } for pid=4980 comm="syz.1.10087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1636.897919][ T28] audit: type=1400 audit(2000001687.716:7871): avc: denied { write } for pid=4980 comm="syz.1.10087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1636.925157][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1637.013075][ T4988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.021666][ T4988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.086711][ T4989] loop6: detected capacity change from 0 to 512 [ 1638.079076][ T4989] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.10083: corrupted inode contents [ 1638.091073][ T4989] fserror_report: 6 callbacks suppressed [ 1638.091088][ T4989] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1638.097464][ T4989] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #16: comm syz.6.10083: mark_inode_dirty error [ 1638.118096][ T4989] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1638.175877][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 1638.192488][ C1] EXT4-fs (loop6): initial error at time 2000001688: ext4_do_update_inode:5742: inode 16 [ 1638.202968][ C1] EXT4-fs (loop6): last error at time 2000001688: ext4_dirty_inode:6639: inode 16 [ 1639.135618][ T4989] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.10083: corrupted inode contents [ 1639.147634][ T4989] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1639.429004][ T4989] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.10083: mark_inode_dirty error [ 1639.449562][ T4989] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1639.603295][ T4989] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.10083: corrupted inode contents [ 1639.625748][ T4989] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1639.627380][ T4989] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1639.645165][ T4989] loop6: lost filesystem error report for type 5 error -117 [ 1639.645898][ T4989] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.10083: corrupted inode contents [ 1639.665244][ T4989] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1639.665836][ T4989] EXT4-fs error (device loop6): ext4_truncate:4691: inode #16: comm syz.6.10083: mark_inode_dirty error [ 1639.686255][ T4989] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1639.686669][ T4989] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1639.707277][ T4989] loop6: lost filesystem error report for type 5 error -117 [ 1639.715560][ T4989] EXT4-fs (loop6): 1 truncate cleaned up [ 1639.744066][ T4989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1639.782027][ T4989] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1639.810962][T12130] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1639.820752][T12130] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 1 [ 1639.879971][ T28] audit: type=1400 audit(2000001690.776:7872): avc: denied { sqpoll } for pid=4999 comm="syz.1.10093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1639.936889][ T28] audit: type=1400 audit(2000001690.836:7873): avc: denied { mount } for pid=5012 comm="syz.2.10095" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1639.995874][ T28] audit: type=1400 audit(2000001690.876:7874): avc: denied { read } for pid=5015 comm="syz.2.10096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1640.175622][T30494] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1640.431908][ T5031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10104'. [ 1640.956058][ T5046] loop6: detected capacity change from 0 to 128 [ 1640.973899][ T28] audit: type=1400 audit(2000001691.816:7875): avc: denied { setopt } for pid=5043 comm="syz.1.10117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1641.001864][ T5046] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 1641.033605][ T28] audit: type=1400 audit(2000001691.876:7876): avc: denied { watch } for pid=5050 comm="syz.0.10110" path="/882" dev="tmpfs" ino=4521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1641.070386][ T5046] System zones: 1-3, 19-19, 35-36 [ 1641.086931][ T5048] loop3: detected capacity change from 0 to 2048 [ 1641.103066][ T5046] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1641.123001][ T5048] EXT4-fs: dax option not supported [ 1641.145152][ T5046] ext4 filesystem being mounted at /419/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1641.191628][ T28] audit: type=1400 audit(2000001691.876:7877): avc: denied { watch_reads } for pid=5050 comm="syz.0.10110" path="/882" dev="tmpfs" ino=4521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1641.251284][ T28] audit: type=1400 audit(2000001692.116:7878): avc: denied { write } for pid=5045 comm="syz.6.10099" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1641.329758][T30494] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1642.134668][ T5084] netlink: 'syz.6.10122': attribute type 1 has an invalid length. [ 1642.294268][ T5084] bond1: (slave bridge4): Enslaving as a backup interface with an up link [ 1642.351111][ T5088] macvlan2: entered promiscuous mode [ 1642.370615][ T5088] macvlan2: entered allmulticast mode [ 1642.380931][ T5088] bond1: entered promiscuous mode [ 1642.387181][ T5088] bridge4: entered promiscuous mode [ 1642.396486][ T5088] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1642.408613][ T5088] bond1: left promiscuous mode [ 1642.416149][ T5088] bridge4: left promiscuous mode [ 1642.504032][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1642.504062][ T28] audit: type=1400 audit(2000001693.326:7880): avc: denied { ioctl } for pid=5090 comm="syz.3.10124" path="socket:[110912]" dev="sockfs" ino=110912 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1642.730703][ T5089] syzkaller0: entered promiscuous mode [ 1642.741121][ T5089] syzkaller0: entered allmulticast mode [ 1642.770074][ T5094] tipc: Enabled bearer , priority 0 [ 1642.804674][ T5093] syzkaller0: entered promiscuous mode [ 1642.810265][ T5093] syzkaller0: entered allmulticast mode [ 1642.992205][ T5086] tipc: Resetting bearer [ 1643.144657][ T5086] tipc: Disabling bearer [ 1643.622096][ T28] audit: type=1400 audit(2000001694.496:7881): avc: denied { create } for pid=5122 comm="syz.3.10133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1643.756375][ T28] audit: type=1400 audit(2000001694.646:7882): avc: denied { create } for pid=5122 comm="syz.3.10133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1643.870936][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10139'. [ 1643.879943][ T28] audit: type=1400 audit(2000001694.766:7883): avc: denied { bind } for pid=5138 comm="syz.0.10139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1643.973215][ T5145] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10141'. [ 1643.983484][ T5145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10141'. [ 1643.993221][ T5145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10141'. [ 1644.031814][ T28] audit: type=1326 audit(2000001694.926:7884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5141 comm="syz.2.10140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6575ece59 code=0x7ffc0000 [ 1644.070306][ T28] audit: type=1326 audit(2000001694.926:7885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5141 comm="syz.2.10140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6575ece59 code=0x7ffc0000 [ 1644.099148][ T28] audit: type=1326 audit(2000001694.926:7886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5141 comm="syz.2.10140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6575ece59 code=0x7ffc0000 [ 1644.106675][ T5152] bond0: entered promiscuous mode [ 1644.129460][ T28] audit: type=1326 audit(2000001694.926:7887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5141 comm="syz.2.10140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd6575ece59 code=0x7ffc0000 [ 1644.129766][ T5152] bond_slave_0: entered promiscuous mode [ 1644.161011][ T5152] bond_slave_1: entered promiscuous mode [ 1644.168584][ T5152] batadv0: entered promiscuous mode [ 1644.174897][ T5152] debugfs: 'hsr1' already exists in 'hsr' [ 1644.180649][ T5152] Cannot create hsr debugfs directory [ 1644.186287][ T5152] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1644.204916][ T28] audit: type=1326 audit(2000001695.026:7888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5141 comm="syz.2.10140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6575ad68e code=0x7ffc0000 [ 1644.407129][ T28] audit: type=1326 audit(2000001695.026:7889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5141 comm="syz.2.10140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6575ad68e code=0x7ffc0000 [ 1644.517719][ T5158] loop6: detected capacity change from 0 to 512 [ 1646.436192][ T5167] lo speed is unknown, defaulting to 1000 [ 1646.474194][ T5167] lo speed is unknown, defaulting to 1000 [ 1646.480287][ T5167] gre0 speed is unknown, defaulting to 1000 [ 1647.325797][ T5158] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.10145: corrupted inode contents [ 1647.340530][ T5158] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1647.343815][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1647.359439][ C0] EXT4-fs (loop6): initial error at time 2000001698: ext4_do_update_inode:5742: inode 16 [ 1647.369287][ C0] EXT4-fs (loop6): last error at time 2000001698: ext4_do_update_inode:5742: inode 16 [ 1647.386220][ T5158] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #16: comm syz.6.10145: mark_inode_dirty error [ 1647.398557][ T5158] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1647.401965][ T5158] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.10145: corrupted inode contents [ 1647.425093][ T5158] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1647.426650][ T5158] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.10145: mark_inode_dirty error [ 1647.448046][ T5158] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1647.452458][ T5158] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.10145: corrupted inode contents [ 1647.479524][ T5158] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1647.485011][ T5158] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1647.503751][ T5158] loop6: lost filesystem error report for type 5 error -117 [ 1647.503990][ T5158] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.10145: corrupted inode contents [ 1647.523243][ T5158] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1647.523447][ T5158] EXT4-fs error (device loop6): ext4_truncate:4691: inode #16: comm syz.6.10145: mark_inode_dirty error [ 1647.543713][ T5158] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1647.544980][ T5158] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1647.563012][ T5158] loop6: lost filesystem error report for type 5 error -117 [ 1647.638529][ T5158] EXT4-fs (loop6): 1 truncate cleaned up [ 1647.654296][ T5158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1647.666852][ T5158] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1647.707200][ T68] __quota_error: 29 callbacks suppressed [ 1647.707218][ T68] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1647.722699][ T68] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 1 [ 1647.737085][ T28] audit: type=1400 audit(2000001698.597:7919): avc: denied { getopt } for pid=5178 comm="syz.1.10150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1647.980459][ T5185] bond0: entered promiscuous mode [ 1647.985594][ T5185] geneve2: entered promiscuous mode [ 1648.070347][ T5185] bond0: left promiscuous mode [ 1648.084879][ T5172] loop3: detected capacity change from 0 to 512 [ 1648.091783][ T5185] geneve2: left promiscuous mode [ 1648.368390][ T5192] syzkaller0: entered promiscuous mode [ 1648.382719][ T5192] syzkaller0: entered allmulticast mode [ 1648.388551][ T28] audit: type=1400 audit(2000001699.237:7920): avc: denied { create } for pid=5193 comm="syz.3.10156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1648.673695][T30494] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1648.711410][ T5199] syzkaller0: entered promiscuous mode [ 1648.717424][ T5199] syzkaller0: entered allmulticast mode [ 1648.729230][ T5200] netlink: 'syz.2.10158': attribute type 1 has an invalid length. [ 1648.743348][ T5200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1648.804311][ T5200] bond1: (slave veth0_to_bond): making interface the new active one [ 1648.826033][ T5200] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1648.846994][ T5200] bond1: entered promiscuous mode [ 1648.852076][ T5200] veth0_to_bond: entered promiscuous mode [ 1648.857931][ T5200] bond1: entered allmulticast mode [ 1648.863136][ T5200] veth0_to_bond: entered allmulticast mode [ 1648.936333][ T5205] IPVS: persistence engine module ip_vs_pe_€ not found [ 1649.048963][ T5200] macvlan3: entered promiscuous mode [ 1649.055089][ T5200] macvlan3: entered allmulticast mode [ 1649.061387][ T5200] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1649.078903][ T5200] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1649.149415][ T28] audit: type=1400 audit(2000001700.017:7921): avc: denied { create } for pid=5213 comm="syz.1.10164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1651.624684][ T5237] loop2: detected capacity change from 0 to 8192 [ 1652.233520][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1652.814589][ T5233] loop6: detected capacity change from 0 to 512 [ 1653.608491][ T5244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10173'. [ 1655.057446][ T5233] EXT4-fs warning (device loop6): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop6. [ 1655.446213][ T28] audit: type=1400 audit(2000001706.288:7922): avc: denied { setopt } for pid=5265 comm="syz.1.10183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1655.465832][ T28] audit: type=1400 audit(2000001706.288:7923): avc: denied { ioctl } for pid=5265 comm="syz.1.10183" path="socket:[111914]" dev="sockfs" ino=111914 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1655.490874][ T28] audit: type=1400 audit(2000001706.288:7924): avc: denied { bind } for pid=5265 comm="syz.1.10183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1656.342032][ T5276] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1656.367761][ T5276] team0: No ports can be present during mode change [ 1656.885930][ T5282] syzkaller0: entered promiscuous mode [ 1656.892063][ T5282] syzkaller0: entered allmulticast mode [ 1656.911794][ T5283] syzkaller0: entered promiscuous mode [ 1656.917335][ T5283] syzkaller0: entered allmulticast mode [ 1656.995833][ T5283] tipc: Enabled bearer , priority 0 [ 1657.091010][ T5281] tipc: Resetting bearer [ 1657.099372][ T5281] tipc: Disabling bearer [ 1657.142263][ T5298] syzkaller0: entered promiscuous mode [ 1657.147935][ T5298] syzkaller0: entered allmulticast mode [ 1657.179726][ T5307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10198'. [ 1657.215224][ T5309] syzkaller0: entered promiscuous mode [ 1657.220734][ T5309] syzkaller0: entered allmulticast mode [ 1658.033324][ T5324] netlink: 'syz.1.10205': attribute type 1 has an invalid length. [ 1658.051498][ T5324] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1658.086409][ T5324] bond4: (slave veth0_to_bond): making interface the new active one [ 1658.097149][ T5324] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1658.150293][ T5329] bond4: entered promiscuous mode [ 1658.168716][ T5329] veth0_to_bond: entered promiscuous mode [ 1658.181189][ T5329] bond4: entered allmulticast mode [ 1658.186361][ T5329] veth0_to_bond: entered allmulticast mode [ 1658.215304][ T5324] macvlan4: entered promiscuous mode [ 1658.221187][ T5324] macvlan4: entered allmulticast mode [ 1658.229803][ T5324] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1658.242895][ T5324] bond4: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1658.412390][ T5348] syzkaller0: entered promiscuous mode [ 1658.417920][ T5348] syzkaller0: entered allmulticast mode [ 1658.549630][ T5358] bridge_slave_0: left allmulticast mode [ 1658.555736][ T5358] bridge_slave_0: left promiscuous mode [ 1658.561735][ T5358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.573155][ T5358] bridge_slave_1: left allmulticast mode [ 1658.595471][ T5358] bridge_slave_1: left promiscuous mode [ 1658.615070][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.626241][ T5358] bond0: (slave bond_slave_0): Releasing backup interface [ 1658.644694][ T5358] bond0: (slave bond_slave_1): Releasing backup interface [ 1658.654267][ T5366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5366 comm=syz.2.10219 [ 1658.670601][ T5358] team0: Failed to send options change via netlink (err -105) [ 1658.688470][ T5358] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1658.701107][ T5358] team0: Port device team_slave_0 removed [ 1658.721139][ T5358] team0: Failed to send options change via netlink (err -105) [ 1658.729617][ T5358] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1658.740237][ T5358] team0: Port device team_slave_1 removed [ 1658.748267][ T5358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1658.766607][ T5358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1658.784266][ T5358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1658.791860][ T5358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1658.803629][ T5358] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1658.834329][ T5361] team0: Failed to send options change via netlink (err -105) [ 1658.842072][ T5361] team0: Mode changed to "activebackup" [ 1658.866436][ T5364] syzkaller0: entered promiscuous mode [ 1658.871962][ T5364] syzkaller0: entered allmulticast mode [ 1658.912706][ T5373] syzkaller0: entered promiscuous mode [ 1658.931373][ T5375] loop3: detected capacity change from 0 to 128 [ 1658.945897][ T5373] syzkaller0: entered allmulticast mode [ 1658.954758][ T5375] loop3: detected capacity change from 0 to 128 [ 1658.984687][ T5380] netlink: 'syz.1.10221': attribute type 10 has an invalid length. [ 1658.999915][ T5375] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1659.018717][ T5380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10221'. [ 1659.027705][ T5375] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1659.073033][ T4222] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1659.158172][ T5385] loop3: detected capacity change from 0 to 512 [ 1659.176352][ T5385] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.10224: bg 0: block 127: padding at end of block bitmap is not set [ 1659.191782][ T5385] loop3: lost filesystem error report for type 5 error -117 [ 1659.192541][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1659.206417][ C0] EXT4-fs (loop3): initial error at time 2000001709: ext4_validate_block_bitmap:441 [ 1659.215877][ C0] EXT4-fs (loop3): last error at time 2000001709: ext4_validate_block_bitmap:441 [ 1659.219948][ T5385] EXT4-fs error (device loop3): ext4_free_inode:356: comm syz.3.10224: bit already cleared for inode 11 [ 1659.236158][ T5385] loop3: lost filesystem error report for type 5 error -117 [ 1659.286691][ T5385] EXT4-fs (loop3): 1 orphan inode deleted [ 1659.300358][ T5385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1659.331830][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10224'. [ 1659.458625][ T4222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1659.488263][ T5396] netlink: 'syz.0.10229': attribute type 1 has an invalid length. [ 1659.527154][ T5396] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1659.569688][ T5402] syzkaller0: entered promiscuous mode [ 1659.588360][ T5402] syzkaller0: entered allmulticast mode [ 1659.613970][ T5396] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1659.634757][ T5403] bond2: entered promiscuous mode [ 1659.640128][ T5403] bond2: entered allmulticast mode [ 1659.659795][ T5402] tipc: Started in network mode [ 1659.665318][ T5402] tipc: Node identity fe031b8eb946, cluster identity 4711 [ 1659.672777][ T5402] tipc: Enabled bearer , priority 0 [ 1659.770700][ T5401] tipc: Resetting bearer [ 1659.781722][ T5401] tipc: Disabling bearer [ 1659.793306][ T5396] macvlan2: entered promiscuous mode [ 1659.799082][ T5396] macvlan2: entered allmulticast mode [ 1659.805660][ T5396] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1660.023699][ T5409] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10233'. [ 1660.033525][ T5409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10233'. [ 1660.059129][ T5411] bond3: (slave syz_tun): Removing an active aggregator [ 1660.066457][ T5411] bond3: (slave syz_tun): Releasing backup interface [ 1660.086039][ T5411] bond2: (slave dummy0): Releasing active interface [ 1660.092692][ T5411] veth3: entered promiscuous mode [ 1660.118845][ T5411] bond4: (slave veth0_to_bond): Releasing active interface [ 1660.127102][ T5411] veth0_to_bond: left promiscuous mode [ 1660.143896][ T5411] veth0_to_bond: left allmulticast mode [ 1660.261931][ T5411] bond2: (slave veth3): Releasing active interface [ 1660.286976][ T5411] veth3: left promiscuous mode [ 1660.364874][ T5420] loop3: detected capacity change from 0 to 512 [ 1660.415804][ T5411] batman_adv: batadv0: Interface deactivated: gretap2 [ 1660.423062][ T5411] batman_adv: batadv0: Removing interface: gretap2 [ 1660.435625][ T5411] bond0: (slave geneve2): Releasing active interface [ 1660.442548][ T5411] geneve2: left allmulticast mode [ 1660.474440][ T5422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10236'. [ 1660.498377][ T5411] batman_adv: batadv0: Interface deactivated: macsec0 [ 1660.505791][ T5411] batman_adv: batadv0: Removing interface: macsec0 [ 1660.649123][ T5420] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.10235: corrupted inode contents [ 1660.662096][ T5420] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1660.664260][ T5420] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.10235: mark_inode_dirty error [ 1660.687649][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1660.687759][ C0] EXT4-fs (loop3): initial error at time 2000001711: ext4_do_update_inode:5742: inode 16 [ 1660.687920][ C0] EXT4-fs (loop3): last error at time 2000001711: ext4_do_update_inode:5742: inode 16 [ 1660.716515][ T5420] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1660.720760][ T5420] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.10235: corrupted inode contents [ 1660.745794][ T5420] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1660.752135][ T5420] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.10235: mark_inode_dirty error [ 1660.774185][ T5420] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1660.777281][ T5420] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.10235: corrupted inode contents [ 1660.800879][ T5420] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1660.803006][ T5420] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1660.822165][ T5420] loop3: lost filesystem error report for type 5 error -117 [ 1660.825464][ T5420] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.10235: corrupted inode contents [ 1660.847336][ T5420] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1660.849592][ T5420] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.10235: mark_inode_dirty error [ 1660.884112][ T5420] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1660.897875][ T5420] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1660.919655][ T5420] loop3: lost filesystem error report for type 5 error -117 [ 1660.926331][ T5420] EXT4-fs (loop3): 1 truncate cleaned up [ 1660.943734][ T5420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1660.956442][ T5420] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1661.048015][ T2756] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1661.158641][ T2756] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:23: Failed to release dquot type 1 [ 1661.246834][ T28] audit: type=1400 audit(2000001712.118:7925): avc: denied { write } for pid=5428 comm="syz.0.10238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1661.525110][ T5446] syzkaller0: entered promiscuous mode [ 1661.536753][ T5446] syzkaller0: entered allmulticast mode [ 1661.915275][ T5458] syzkaller0: entered promiscuous mode [ 1661.922761][ T5458] syzkaller0: entered allmulticast mode [ 1662.296613][ T5471] loop6: detected capacity change from 0 to 512 [ 1662.327425][ T5471] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1662.335370][ T5471] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 1662.343469][ T5471] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1662.350447][ T5471] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #13: comm syz.6.10251: iget: bad i_size value: 12154761577498 [ 1662.363657][ T5471] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1662.412200][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1662.427894][ C0] EXT4-fs (loop6): initial error at time 2000001713: ext4_orphan_get:1399: inode 13 [ 1662.437393][ C0] EXT4-fs (loop6): last error at time 2000001713: ext4_orphan_get:1399: inode 13 [ 1662.453586][ T5471] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.10251: couldn't read orphan inode 13 (err -117) [ 1662.467169][ T5471] loop6: lost filesystem error report for type 5 error -117 [ 1662.476291][ T5471] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1662.513364][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1662.542088][ T5478] lo speed is unknown, defaulting to 1000 [ 1662.566187][ T4222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.602457][T30494] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.651901][ T5488] netlink: 'syz.6.10257': attribute type 1 has an invalid length. [ 1662.660504][ T5481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10256'. [ 1662.714688][ T5491] netlink: 'syz.3.10258': attribute type 11 has an invalid length. [ 1662.752611][ T28] audit: type=1400 audit(2000001713.638:7926): avc: denied { bind } for pid=5480 comm="syz.0.10256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1662.788658][ T5488] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1662.824102][ T5492] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1662.841945][ T5488] macvlan2: entered promiscuous mode [ 1662.847465][ T5488] macvlan2: entered allmulticast mode [ 1662.853518][ T5488] bond2: entered promiscuous mode [ 1662.859017][ T5488] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1662.867709][ T5488] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1662.884180][ T5488] bond2: left promiscuous mode [ 1662.910350][ T5493] bond2: entered promiscuous mode [ 1662.920864][ T5493] bond2: entered allmulticast mode [ 1662.930950][ T5478] lo speed is unknown, defaulting to 1000 [ 1662.942095][ T5478] gre0 speed is unknown, defaulting to 1000 [ 1663.080016][ T28] audit: type=1400 audit(2000001713.979:7927): avc: denied { listen } for pid=5503 comm="syz.3.10261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1663.280435][ T28] audit: type=1400 audit(2000001714.179:7928): avc: denied { read append } for pid=5505 comm="syz.6.10262" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1663.305711][ T28] audit: type=1400 audit(2000001714.179:7929): avc: denied { open } for pid=5505 comm="syz.6.10262" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1663.329777][ T28] audit: type=1400 audit(2000001714.199:7930): avc: denied { append } for pid=5505 comm="syz.6.10262" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1663.581226][ T5525] loop2: detected capacity change from 0 to 512 [ 1663.810488][ T5525] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.10265: corrupted inode contents [ 1663.822497][ T5525] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1663.822928][ T5525] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.10265: mark_inode_dirty error [ 1663.843499][ T5525] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1663.843938][ T5525] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.10265: corrupted inode contents [ 1663.865420][ T5525] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.10265: mark_inode_dirty error [ 1663.876992][ T5525] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.10265: corrupted inode contents [ 1663.889580][ T5525] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1663.898216][ T5525] loop2: lost filesystem error report for type 5 error -117 [ 1663.898544][ T5525] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.10265: corrupted inode contents [ 1663.911689][ C1] EXT4-fs (loop2): error count since last fsck: 6 [ 1663.911710][ C1] EXT4-fs (loop2): initial error at time 2000001714: ext4_do_update_inode:5742: inode 16 [ 1663.911736][ C1] EXT4-fs (loop2): last error at time 2000001714: ext4_orphan_del:303 [ 1663.953678][ T5525] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.10265: mark_inode_dirty error [ 1663.965291][ T5525] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1663.974337][ T5525] loop2: lost filesystem error report for type 5 error -117 [ 1663.975358][ T5525] EXT4-fs (loop2): 1 truncate cleaned up [ 1663.996341][ T5525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1664.008998][ T5525] ext4 filesystem being mounted at /1342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1664.298755][ T28] audit: type=1400 audit(2000001715.179:7931): avc: denied { mount } for pid=5539 comm="syz.1.10273" name="/" dev="autofs" ino=111593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1664.465296][T18242] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1664.475162][T18242] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 1 [ 1665.190487][T19348] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1665.211877][ T5546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5546 comm=syz.1.10275 [ 1666.945487][ T5564] loop3: detected capacity change from 0 to 512 [ 1667.121115][ T5563] loop2: detected capacity change from 0 to 512 [ 1667.128856][ T5563] EXT4-fs: Ignoring removed orlov option [ 1667.313353][ T5563] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1667.331250][ T5567] syzkaller0: entered promiscuous mode [ 1667.593845][ T5567] syzkaller0: entered allmulticast mode [ 1668.432222][ T5563] EXT4-fs: error -4 creating inode table initialization thread [ 1668.440011][ T5563] EXT4-fs (loop2): mount failed [ 1668.550295][ T5564] EXT4-fs warning (device loop3): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop3. [ 1668.669201][ T5576] syzkaller0: entered promiscuous mode [ 1668.680813][ T5576] syzkaller0: entered allmulticast mode [ 1668.954698][ T5578] syzkaller0: entered promiscuous mode [ 1668.961971][ T5578] syzkaller0: entered allmulticast mode [ 1669.070436][ T5580] loop3: detected capacity change from 0 to 128 [ 1669.078660][ T5580] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1669.091711][ T5580] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1669.123039][ T28] audit: type=1400 audit(2000001719.989:7932): avc: denied { write } for pid=5579 comm="syz.3.10284" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1669.145076][ T28] audit: type=1400 audit(2000001719.989:7933): avc: denied { setattr } for pid=5579 comm="syz.3.10284" path="/72/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1669.261840][ T28] audit: type=1400 audit(2000001720.139:7934): avc: denied { connect } for pid=5586 comm="syz.6.10286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1669.417829][ T5589] syzkaller0: entered promiscuous mode [ 1669.423843][ T5589] syzkaller0: entered allmulticast mode [ 1669.533184][ T28] audit: type=1400 audit(2000001720.429:7935): avc: denied { ioctl } for pid=5579 comm="syz.3.10284" path="/72/file1/file1" dev="loop3" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1669.585909][ T4222] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1669.679159][ T5593] syzkaller0: entered promiscuous mode [ 1669.688804][ T5598] netlink: 'syz.3.10290': attribute type 3 has an invalid length. [ 1669.696653][ T5598] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10290'. [ 1669.706533][ T5593] syzkaller0: entered allmulticast mode [ 1669.748924][ T5600] syzkaller0: entered promiscuous mode [ 1669.754443][ T5600] syzkaller0: entered allmulticast mode [ 1669.877681][ T5605] loop2: detected capacity change from 0 to 256 [ 1669.904113][ T5605] netlink: 308 bytes leftover after parsing attributes in process `syz.2.10293'. [ 1670.165278][ T5608] syzkaller0: entered promiscuous mode [ 1670.180667][ T5608] syzkaller0: entered allmulticast mode [ 1670.245865][ T5613] loop2: detected capacity change from 0 to 512 [ 1670.261435][ T5617] loop3: detected capacity change from 0 to 1024 [ 1670.268721][ T5613] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.10296: bad orphan inode 13 [ 1670.278827][ T5613] loop2: lost filesystem error report for type 5 error -117 [ 1670.283568][ T5613] ext4_test_bit(bit=12, block=4) = 1 [ 1670.296182][ T5613] is_bad_inode(inode)=0 [ 1670.300353][ T5613] NEXT_ORPHAN(inode)=0 [ 1670.304436][ T5613] max_ino=32 [ 1670.307690][ T5613] i_nlink=1 [ 1670.311192][ T5613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1670.328626][ T5617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1670.381689][T19348] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1670.481530][ T28] audit: type=1400 audit(2000001721.339:7936): avc: denied { write } for pid=5615 comm="syz.3.10297" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1670.505656][ T4222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1670.536730][ T5624] loop2: detected capacity change from 0 to 1024 [ 1670.578530][ T5624] EXT4-fs: inline encryption not supported [ 1670.586001][ T5624] ext4: Unknown parameter 'fowner' [ 1670.610379][ T5630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10301'. [ 1670.686753][ T5632] loop3: detected capacity change from 0 to 512 [ 1670.707505][ T5632] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1670.717800][ T28] audit: type=1400 audit(2000001721.549:7937): avc: denied { bind } for pid=5631 comm="syz.3.10302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1670.741085][ T5632] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 1670.749288][ T5632] System zones: 1-12 [ 1670.754765][ T5632] EXT4-fs (loop3): 1 truncate cleaned up [ 1670.762466][ T5632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1670.795797][ T28] audit: type=1400 audit(2000001721.659:7938): avc: denied { listen } for pid=5631 comm="syz.3.10302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1670.836432][ T28] audit: type=1400 audit(2000001721.709:7939): avc: denied { connect } for pid=5631 comm="syz.3.10302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1670.856246][ T28] audit: type=1400 audit(2000001721.729:7940): avc: denied { setopt } for pid=5631 comm="syz.3.10302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1670.877420][ T4222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1670.904273][ T5638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10304'. [ 1671.185557][ T28] audit: type=1400 audit(2000001722.039:7941): avc: denied { setopt } for pid=5650 comm="syz.0.10309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1671.387260][ T5660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10313'. [ 1671.795589][ T5694] syzkaller0: entered promiscuous mode [ 1671.801081][ T5694] syzkaller0: entered allmulticast mode [ 1673.028935][ T5719] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 1674.299682][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 1674.299720][ T28] audit: type=1400 audit(2000001725.190:7953): avc: denied { create } for pid=5764 comm="syz.0.10343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1674.384883][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1674.394611][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1674.407152][ T28] audit: type=1400 audit(2000001725.240:7954): avc: denied { sys_admin } for pid=5764 comm="syz.0.10343" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1674.440139][ T28] audit: type=1400 audit(2000001725.300:7955): avc: denied { create } for pid=5772 comm="syz.1.10345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1674.473665][ T5779] netlink: 'syz.6.10346': attribute type 16 has an invalid length. [ 1674.512238][ T28] audit: type=1400 audit(2000001725.330:7956): avc: denied { unmount } for pid=5764 comm="syz.0.10343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1674.560320][ T5779] netlink: 'syz.6.10346': attribute type 17 has an invalid length. [ 1674.605197][ T28] audit: type=1400 audit(2000001725.490:7957): avc: denied { bind } for pid=5781 comm="syz.2.10349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1674.612018][ T5788] xt_hashlimit: size too large, truncated to 1048576 [ 1674.751223][ T28] audit: type=1400 audit(2000001725.490:7958): avc: denied { setopt } for pid=5781 comm="syz.2.10349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1674.824808][ T5795] loop3: detected capacity change from 0 to 256 [ 1674.831000][ T28] audit: type=1400 audit(2000001725.680:7959): avc: denied { write } for pid=5763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1674.831124][ T28] audit: type=1400 audit(2000001725.680:7960): avc: denied { setopt } for pid=5781 comm="syz.2.10349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1674.831154][ T28] audit: type=1400 audit(2000001725.680:7961): avc: denied { write } for pid=5781 comm="syz.2.10349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1674.882870][ T5797] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1674.988465][ T28] audit: type=1400 audit(2000001725.840:7962): avc: denied { write } for pid=5798 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1675.226355][ T5816] loop2: detected capacity change from 0 to 128 [ 1675.298620][ T5816] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1675.311301][ T5816] ext4 filesystem being mounted at /1360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1675.567638][T19348] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1676.253839][ T5844] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10360'. [ 1676.678900][ T5864] netlink: 'syz.0.10362': attribute type 1 has an invalid length. [ 1676.717154][ T5864] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1677.096055][ T5864] bond3: (slave geneve2): making interface the new active one [ 1677.124242][ T5864] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1677.137917][ T5868] netlink: 'syz.6.10363': attribute type 1 has an invalid length. [ 1677.193384][ T5868] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1677.209046][ T5871] loop3: detected capacity change from 0 to 512 [ 1677.216189][ T5871] EXT4-fs: Invalid want_extra_isize 2140 [ 1677.299911][ T5872] bond2: (slave veth0_to_bond): Releasing active interface [ 1677.382550][ T5872] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1677.420943][ T5872] macvlan2: entered promiscuous mode [ 1677.426461][ T5872] macvlan2: entered allmulticast mode [ 1677.432288][ T5872] bond3: entered promiscuous mode [ 1677.437574][ T5872] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1677.445414][ T5872] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1677.487593][ T5872] bond3: left promiscuous mode [ 1677.514836][ T5868] bond3: entered promiscuous mode [ 1677.564284][ T5868] bond3: entered allmulticast mode [ 1677.893086][ T5907] loop6: detected capacity change from 0 to 512 [ 1678.038072][ T5904] loop2: detected capacity change from 0 to 128 [ 1678.095568][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88810d368c00: rx timeout, send abort [ 1678.422583][ T5919] SELinux: Context system_u:object_r:depmod_exec_t:s0 is not valid (left unmapped). [ 1678.433776][ T5907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1678.446669][ T5907] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1678.484038][ T5904] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1678.558975][ T5904] ext4 filesystem being mounted at /1364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1678.625320][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88810d368c00: abort rx timeout. Force session deactivation [ 1678.715792][ T5938] syzkaller0: entered promiscuous mode [ 1678.748238][T30494] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1678.758602][ T5938] syzkaller0: entered allmulticast mode [ 1678.890633][ T5958] syzkaller0: entered promiscuous mode [ 1678.913985][ T5958] syzkaller0: entered allmulticast mode [ 1679.013239][ T5973] netlink: 'syz.0.10382': attribute type 1 has an invalid length. [ 1679.029421][T19348] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1679.088012][ T5973] macvtap1: entered allmulticast mode [ 1679.120651][ T5973] bond4: (slave bridge2): making interface the new active one [ 1679.133594][ T5973] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 1679.506349][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1679.506389][ T28] audit: type=1326 audit(2000001730.400:7980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.6.10385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff78fce59 code=0x7ffc0000 [ 1679.576447][ T28] audit: type=1326 audit(2000001730.400:7981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.6.10385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff78fce59 code=0x7ffc0000 [ 1679.677330][ T28] audit: type=1326 audit(2000001730.400:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.6.10385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff78fce59 code=0x7ffc0000 [ 1679.708806][ T5995] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10391'. [ 1679.801243][ T28] audit: type=1326 audit(2000001730.400:7983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.6.10385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff78fce59 code=0x7ffc0000 [ 1679.837223][ T28] audit: type=1326 audit(2000001730.400:7984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.6.10385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7feff78fce59 code=0x7ffc0000 [ 1679.862764][ T28] audit: type=1326 audit(2000001730.450:7985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.6.10385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feff78bd68e code=0x7ffc0000 [ 1679.888321][ T28] audit: type=1326 audit(2000001730.450:7986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.6.10385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feff78bd68e code=0x7ffc0000 [ 1679.913807][ T28] audit: type=1326 audit(2000001730.460:7987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.6.10385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feff78bd68e code=0x7ffc0000 [ 1679.976550][ T6000] netlink: 'syz.6.10393': attribute type 3 has an invalid length. [ 1679.984453][ T6000] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.10393'. [ 1680.010170][ T28] audit: type=1326 audit(2000001730.460:7988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.6.10385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feff78bd68e code=0x7ffc0000 [ 1680.196167][ T28] audit: type=1326 audit(2000001730.460:7989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.6.10385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feff78bd68e code=0x7ffc0000 [ 1680.370580][ T6013] loop6: detected capacity change from 0 to 128 [ 1680.493018][ T6013] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=8842c018, mo2=0002] [ 1680.501652][ T6013] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1680.522622][ T6013] ext4 filesystem being mounted at /461/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1680.710912][T30494] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1680.885012][ T6036] syzkaller0: entered promiscuous mode [ 1680.890539][ T6036] syzkaller0: entered allmulticast mode [ 1681.174317][ T6059] loop2: detected capacity change from 0 to 512 [ 1681.187889][ T6059] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1681.195831][ T6059] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1681.204097][ T6059] System zones: 0-1, 15-15, 18-18, 34-34 [ 1681.210298][ T6059] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1681.216762][ T6059] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1681.231417][ T6059] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1681.242980][ T6059] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.10415: bad orphan inode 16 [ 1681.255523][ T6059] loop2: lost filesystem error report for type 5 error -117 [ 1681.257924][ T6059] ext4_test_bit(bit=15, block=18) = 1 [ 1681.272870][ T6059] is_bad_inode(inode)=0 [ 1681.277492][ T6059] NEXT_ORPHAN(inode)=0 [ 1681.287377][ T6059] max_ino=32 [ 1681.291220][ T6059] i_nlink=2 [ 1681.294845][ T6059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1681.358190][T19348] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1681.982837][ T6085] loop6: detected capacity change from 0 to 512 [ 1681.998473][ T6085] ext4: Unknown parameter 'subj_user' [ 1682.547515][ T6089] xt_hashlimit: size too large, truncated to 1048576 [ 1682.598160][ T6093] @ÿ: renamed from bond_slave_0 [ 1683.083194][ T6103] netlink: 'syz.6.10428': attribute type 2 has an invalid length. [ 1683.097601][ T6103] 0: entered promiscuous mode [ 1683.225182][ T6106] loop6: detected capacity change from 0 to 512 [ 1683.234792][ T6102] loop2: detected capacity change from 0 to 512 [ 1683.348370][ T6106] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1683.381826][ T6106] EXT4-fs (loop6): 1 truncate cleaned up [ 1683.388085][ T6106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1683.428747][T30494] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1683.457321][ T6110] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10433'. [ 1683.468065][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10433'. [ 1683.497747][ T6102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1683.513690][ T6102] ext4 filesystem being mounted at /1378/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1683.735666][T19348] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1684.082929][ T6123] loop6: detected capacity change from 0 to 512 [ 1684.169652][ T6127] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10435'. [ 1684.241470][ T6123] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.10432: corrupted inode contents [ 1684.241501][ T6123] fserror_report: 5 callbacks suppressed [ 1684.241510][ T6123] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1684.241895][ T6123] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #16: comm syz.6.10432: mark_inode_dirty error [ 1684.241953][ T6123] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1684.242721][ T6123] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.10432: corrupted inode contents [ 1684.242864][ T6123] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1684.243271][ T6123] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.10432: mark_inode_dirty error [ 1684.243436][ T6123] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1684.244461][ T6123] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.10432: corrupted inode contents [ 1684.244486][ T6123] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1684.244779][ T6123] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1684.244897][ T6123] loop6: lost filesystem error report for type 5 error -117 [ 1684.245092][ T6123] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.10432: corrupted inode contents [ 1684.245293][ T6123] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1684.245656][ T6123] EXT4-fs error (device loop6): ext4_truncate:4691: inode #16: comm syz.6.10432: mark_inode_dirty error [ 1684.245783][ T6123] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1684.246065][ T6123] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1684.246120][ T6123] loop6: lost filesystem error report for type 5 error -117 [ 1684.247582][ T6123] EXT4-fs (loop6): 1 truncate cleaned up [ 1684.249512][ T6123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1684.249637][ T6123] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1684.340253][T12137] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:12: Failed to release dquot type 1 [ 1684.440293][ T6125] loop3: detected capacity change from 0 to 512 [ 1684.722078][ T6125] EXT4-fs (loop3): 1 orphan inode deleted [ 1684.722538][ T6125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1684.723756][ T6125] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1684.739116][ T68] __quota_error: 25 callbacks suppressed [ 1684.739135][ T68] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1684.739290][ T68] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 1 [ 1684.784483][ T28] audit: type=1400 audit(2000001735.671:8013): avc: denied { bind } for pid=6120 comm="syz.3.10436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1684.825688][ T6156] tap0: tun_chr_ioctl cmd 1074025675 [ 1684.825758][ T6156] tap0: persist enabled [ 1684.834326][ T6156] tap0: tun_chr_ioctl cmd 1074025675 [ 1684.834416][ T6156] tap0: persist disabled [ 1684.874606][ T28] audit: type=1400 audit(2000001735.741:8014): avc: denied { name_bind } for pid=6159 comm="syz.2.10445" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1685.278783][ T6168] loop2: detected capacity change from 0 to 512 [ 1685.291305][ T6168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1685.291364][ T6168] ext4 filesystem being mounted at /1383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1685.413399][ T4222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1686.103876][ T6187] netlink: 'syz.1.10455': attribute type 1 has an invalid length. [ 1686.141761][ T6187] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1686.168441][ T6187] bond5: (slave veth0_to_bond): making interface the new active one [ 1686.177743][ T6187] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1686.309904][T30494] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1686.319722][ T6187] bond5: entered promiscuous mode [ 1686.324788][ T6187] veth0_to_bond: entered promiscuous mode [ 1686.330649][ T6187] bond5: entered allmulticast mode [ 1686.335855][ T6187] veth0_to_bond: entered allmulticast mode [ 1686.390301][ T6190] macvlan0: entered promiscuous mode [ 1686.398582][ T6190] macvlan0: entered allmulticast mode [ 1686.411859][ T6190] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1686.453488][ T6190] bond5: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1686.467878][T19348] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1686.621267][ T6195] loop2: detected capacity change from 0 to 512 [ 1686.669019][ T6195] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1686.679939][ T6195] EXT4-fs (loop2): group descriptors corrupted! [ 1686.871543][ T6206] loop6: detected capacity change from 0 to 512 [ 1686.878293][ T6206] EXT4-fs: Ignoring removed orlov option [ 1686.948410][ T6206] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1688.541904][ T6206] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.10465: invalid indirect mapped block 32768 (level 2) [ 1688.555611][ T6206] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1688.556408][ T6206] EXT4-fs (loop6): 1 orphan inode deleted [ 1688.571426][ T6206] EXT4-fs (loop6): 1 truncate cleaned up [ 1688.578110][ T6206] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1688.666921][ T28] audit: type=1400 audit(2000001739.541:8015): avc: denied { accept } for pid=6194 comm="syz.2.10456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1688.690079][ T28] audit: type=1400 audit(2000001739.541:8016): avc: denied { getopt } for pid=6194 comm="syz.2.10456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1688.909475][ T28] audit: type=1400 audit(2000001739.751:8017): avc: denied { map } for pid=6214 comm="syz.0.10460" path="socket:[114620]" dev="sockfs" ino=114620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1689.243487][T30494] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1689.382542][ T6229] netlink: 'syz.1.10467': attribute type 7 has an invalid length. [ 1689.478983][ T6234] syzkaller0: entered promiscuous mode [ 1689.484584][ T6234] syzkaller0: entered allmulticast mode [ 1689.586541][ T6235] loop3: detected capacity change from 0 to 512 [ 1689.811174][ T6235] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.10466: corrupted inode contents [ 1689.823233][ T6235] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1689.827150][ T6235] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.10466: mark_inode_dirty error [ 1689.847700][ T6235] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1689.848540][ T6235] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.10466: corrupted inode contents [ 1689.863795][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 1689.863819][ C1] EXT4-fs (loop3): initial error at time 2000001740: ext4_do_update_inode:5742: inode 16 [ 1689.863858][ C1] EXT4-fs (loop3): last error at time 2000001740: ext4_dirty_inode:6639: inode 16 [ 1689.901444][ T6235] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1689.906828][ T6235] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.10466: mark_inode_dirty error [ 1689.927427][ T6235] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1689.929400][ T6235] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.10466: corrupted inode contents [ 1689.950475][ T6235] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1689.950827][ T6235] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1689.974786][ T6235] loop3: lost filesystem error report for type 5 error -117 [ 1689.988950][ T6235] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.10466: corrupted inode contents [ 1690.008339][ T6235] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1690.008811][ T6235] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.10466: mark_inode_dirty error [ 1690.029210][ T6235] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1690.044739][ T6235] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1690.062844][ T6235] loop3: lost filesystem error report for type 5 error -117 [ 1690.065030][ T6235] EXT4-fs (loop3): 1 truncate cleaned up [ 1690.085627][ T6235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1690.098539][ T6235] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1690.376387][T18233] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1690.386202][T18233] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 1690.897155][ T28] audit: type=1400 audit(2000001741.782:8018): avc: denied { execute } for pid=6253 comm="syz.1.10473" path="/2155/file1" dev="tmpfs" ino=11320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1691.304618][ T4222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1691.394154][ T6267] loop3: detected capacity change from 0 to 128 [ 1691.481510][ T6267] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1691.517877][ T6267] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1691.546373][ T28] audit: type=1400 audit(2000001742.412:8019): avc: denied { write } for pid=6266 comm="syz.3.10475" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1691.661736][ T6271] loop2: detected capacity change from 0 to 512 [ 1691.768029][ T6271] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1691.774855][ T6271] EXT4-fs (loop2): mount failed [ 1692.621472][ T4222] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1692.728285][ T6282] vlan0: entered promiscuous mode [ 1692.733511][ T6282] vlan0: entered allmulticast mode [ 1692.738651][ T6282] veth0_vlan: entered allmulticast mode [ 1693.641698][ T6294] lo speed is unknown, defaulting to 1000 [ 1694.401656][ T6314] loop3: detected capacity change from 0 to 512 [ 1694.417490][ T6314] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1694.635484][ T6324] loop3: detected capacity change from 0 to 512 [ 1694.709363][ T6324] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1694.761712][ T6294] lo speed is unknown, defaulting to 1000 [ 1694.810734][ T6324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1694.823367][ T6324] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1695.102577][ T6294] gre0 speed is unknown, defaulting to 1000 [ 1695.640823][ T6338] Invalid ELF header magic: != ELF [ 1695.686834][ T28] audit: type=1400 audit(2000001746.532:8020): avc: denied { module_load } for pid=6326 comm="syz.2.10492" path="/1393/bus" dev="tmpfs" ino=7202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1695.805887][ T28] audit: type=1400 audit(2000001746.662:8021): avc: denied { write } for pid=6335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1695.870313][ T28] audit: type=1400 audit(2000001746.722:8022): avc: denied { write } for pid=6353 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1695.936573][ T4222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1696.073195][ T6358] loop3: detected capacity change from 0 to 512 [ 1696.080023][ T6358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1696.101873][ T28] audit: type=1400 audit(2000001746.992:8023): avc: denied { read } for pid=6363 comm="syz.1.10495" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1696.155595][ T6358] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.10494: corrupted in-inode xattr: invalid ea_ino [ 1696.169037][ T6358] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1696.178353][ T6358] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.10494: couldn't read orphan inode 15 (err -117) [ 1696.199554][ T6358] loop3: lost filesystem error report for type 5 error -117 [ 1696.200195][ T6358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1696.236093][ T4222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1696.348444][ T28] audit: type=1400 audit(2000001747.212:8024): avc: denied { write } for pid=6367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1696.380703][ T6380] syzkaller0: entered promiscuous mode [ 1696.386232][ T6380] syzkaller0: entered allmulticast mode [ 1696.399490][ T6387] loop3: detected capacity change from 0 to 512 [ 1696.426007][ T6387] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1696.434052][ T6387] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1696.441631][ T28] audit: type=1400 audit(2000001747.282:8025): avc: denied { write } for pid=6390 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1696.463675][ T6387] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 1696.472803][ T6387] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 1696.489444][ T6387] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.10499: Failed to acquire dquot type 1 [ 1696.500838][ T6387] loop3: lost filesystem error report for type 5 error -5 [ 1696.594780][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1696.608385][ C1] EXT4-fs (loop3): initial error at time 2000001747: ext4_acquire_dquot:7041 [ 1696.617182][ C1] EXT4-fs (loop3): last error at time 2000001747: ext4_acquire_dquot:7041 [ 1696.627116][ T6387] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.10499: bg 0: block 40: padding at end of block bitmap is not set [ 1696.641401][ T6387] loop3: lost filesystem error report for type 5 error -117 [ 1696.642032][ T6387] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1696.658347][ T6387] loop3: lost filesystem error report for type 5 error -117 [ 1696.658827][ T6387] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.10499: data will be lost [ 1696.677329][ T6387] EXT4-fs (loop3): 1 truncate cleaned up [ 1696.705306][ T6387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1696.825562][ T4222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1698.186297][ T28] audit: type=1400 audit(2000001748.842:8026): avc: denied { ioctl } for pid=6412 comm="syz.1.10506" path="socket:[115834]" dev="sockfs" ino=115834 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1698.588203][ T6408] loop2: detected capacity change from 0 to 512 [ 1699.312447][ T28] audit: type=1400 audit(2000001750.202:8027): avc: denied { getopt } for pid=6412 comm="syz.1.10506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1699.938492][ T6418] loop6: detected capacity change from 0 to 512 [ 1699.945224][ T6418] EXT4-fs (loop6): unable to read superblock [ 1700.436174][ T6411] batadv0: entered promiscuous mode [ 1700.443843][ T6411] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1700.455559][ T6411] bridge0: port 1(macvlan2) entered blocking state [ 1700.462285][ T6411] bridge0: port 1(macvlan2) entered disabled state [ 1700.469728][ T6411] macvlan2: entered allmulticast mode [ 1700.475348][ T6411] batadv0: entered allmulticast mode [ 1700.483502][ T6411] macvlan2: entered promiscuous mode [ 1700.489975][ T6411] bridge0: port 1(macvlan2) entered blocking state [ 1700.496532][ T6411] bridge0: port 1(macvlan2) entered forwarding state [ 1700.997856][T16307] IPVS: starting estimator thread 0... [ 1701.298883][ T6408] EXT4-fs warning (device loop2): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop2. [ 1701.966111][ T6442] xt_hashlimit: size too large, truncated to 1048576 [ 1702.012700][ T6424] IPVS: using max 2304 ests per chain, 115200 per kthread [ 1702.270966][ T6456] syzkaller0: entered promiscuous mode [ 1702.276681][ T6456] syzkaller0: entered allmulticast mode [ 1702.285968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.294159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.459934][ T6474] loop2: detected capacity change from 0 to 512 [ 1703.568771][ T6474] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.10526: corrupted inode contents [ 1703.580885][ T6474] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1703.581653][ T6474] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.10526: mark_inode_dirty error [ 1703.602290][ T6474] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1703.603530][ T6474] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.10526: corrupted inode contents [ 1703.624729][ T6474] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1703.625232][ T6474] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.10526: mark_inode_dirty error [ 1703.645812][ T6474] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1703.646541][ T6474] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.10526: corrupted inode contents [ 1703.668948][ C0] EXT4-fs (loop2): error count since last fsck: 4 [ 1703.669151][ C0] EXT4-fs (loop2): initial error at time 2000001754: ext4_do_update_inode:5742: inode 16 [ 1703.669217][ C0] EXT4-fs (loop2): last error at time 2000001754: __ext4_ext_dirty:207: inode 16 [ 1703.699920][ T6474] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1703.704336][ T6474] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1703.722078][ T6474] loop2: lost filesystem error report for type 5 error -117 [ 1703.722695][ T6474] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.10526: corrupted inode contents [ 1703.741983][ T6474] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1703.742689][ T6474] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.10526: mark_inode_dirty error [ 1703.763139][ T6474] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1703.763805][ T6474] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1703.781951][ T6474] loop2: lost filesystem error report for type 5 error -117 [ 1703.782688][ T6474] EXT4-fs (loop2): 1 truncate cleaned up [ 1703.799766][ T6474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1703.812332][ T6474] ext4 filesystem being mounted at /1400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1703.974225][T18242] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1704.014946][ T6483] loop6: detected capacity change from 0 to 256 [ 1704.066981][ T6485] loop3: detected capacity change from 0 to 512 [ 1704.077096][T18242] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 1 [ 1704.238474][ T6483] FAT-fs (loop6): data area starts beyond volume (274 > 64) [ 1704.251346][ T6483] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1705.069859][ T6485] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.10528: invalid indirect mapped block 4294967295 (level 1) [ 1705.288212][ T6485] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1705.295939][ T6483] loop6: detected capacity change from 0 to 128 [ 1705.305781][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1705.305826][ C1] EXT4-fs (loop3): initial error at time 2000001756: ext4_free_branches:1023: inode 11 [ 1705.305868][ C1] EXT4-fs (loop3): last error at time 2000001756: ext4_free_branches:1023: inode 11 [ 1705.410554][ T6485] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.10528: invalid indirect mapped block 4294967295 (level 1) [ 1705.441325][ T6485] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1705.444633][ T6485] EXT4-fs (loop3): 2 truncates cleaned up [ 1705.479631][ T6485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1705.560644][ T6483] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1705.628780][T19348] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1705.649392][ T6498] loop2: detected capacity change from 0 to 128 [ 1705.657881][ T6498] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1705.675528][ T6498] ext4 filesystem being mounted at /1401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1705.691733][ T28] audit: type=1400 audit(2000001756.573:8028): avc: denied { write } for pid=6497 comm="syz.2.10531" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1705.723119][ T6483] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1705.733010][ T4222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1705.775815][T12137] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1705.786713][ T6483] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1705.798380][T19348] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1705.945637][ T28] audit: type=1400 audit(2000001756.803:8029): avc: denied { name_bind } for pid=6504 comm="syz.3.10533" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1706.009399][T19348] ================================================================== [ 1706.017528][T19348] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 1706.025105][T19348] [ 1706.027482][T19348] read-write to 0xffff888237c26528 of 1 bytes by task 6514 on cpu 0: [ 1706.035571][T19348] folio_add_lru+0xa4/0x250 [ 1706.040105][T19348] shmem_get_folio_gfp+0x7cc/0xd90 [ 1706.045253][T19348] shmem_fault+0xf6/0x250 [ 1706.049607][T19348] handle_mm_fault+0x167a/0x2da0 [ 1706.054592][T19348] __get_user_pages+0x129c/0x1f10 [ 1706.059667][T19348] __mm_populate+0x242/0x390 [ 1706.064304][T19348] vm_mmap_pgoff+0x23b/0x2d0 [ 1706.068956][T19348] ksys_mmap_pgoff+0xc1/0x310 [ 1706.073760][T19348] x64_sys_call+0x14df/0x3020 [ 1706.078475][T19348] do_syscall_64+0x136/0x3c0 [ 1706.083109][T19348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.089025][T19348] [ 1706.091407][T19348] read to 0xffff888237c26528 of 1 bytes by task 19348 on cpu 1: [ 1706.099061][T19348] __lru_add_drain_all+0x17e/0x450 [ 1706.104207][T19348] lru_add_drain_all+0x10/0x20 [ 1706.109093][T19348] invalidate_bdev+0x47/0x70 [ 1706.113705][T19348] ext4_put_super+0x614/0x7c0 [ 1706.118417][T19348] generic_shutdown_super+0xee/0x220 [ 1706.123732][T19348] kill_block_super+0x2a/0x70 [ 1706.128437][T19348] ext4_kill_sb+0x42/0x80 [ 1706.132806][T19348] deactivate_locked_super+0x75/0x1c0 [ 1706.138213][T19348] deactivate_super+0x97/0xa0 [ 1706.142936][T19348] cleanup_mnt+0x2c3/0x340 [ 1706.147404][T19348] __cleanup_mnt+0x19/0x20 [ 1706.151852][T19348] task_work_run+0x130/0x1a0 [ 1706.156472][T19348] exit_to_user_mode_loop+0x1e4/0x8c0 [ 1706.161911][T19348] do_syscall_64+0x23c/0x3c0 [ 1706.166543][T19348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.169855][ T6516] netlink: 'syz.0.10538': attribute type 6 has an invalid length. [ 1706.172473][T19348] [ 1706.172480][T19348] value changed: 0x09 -> 0x0a [ 1706.187299][T19348] [ 1706.189640][T19348] Reported by Kernel Concurrency Sanitizer on: [ 1706.195843][T19348] CPU: 1 UID: 0 PID: 19348 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1706.206992][T19348] Tainted: [W]=WARN [ 1706.210811][T19348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1706.220899][T19348] ================================================================== [ 1706.307937][ T28] audit: type=1400 audit(2000001757.143:8030): avc: denied { nlmsg_write } for pid=6517 comm="syz.2.10534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1707.485352][ T28] audit: type=1400 audit(2000001758.383:8031): avc: denied { write } for pid=6521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1707.530539][ T28] audit: type=1400 audit(2000001758.433:8032): avc: denied { write } for pid=6532 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1708.678981][ T28] audit: type=1400 audit(2000001759.583:8033): avc: denied { write } for pid=6535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1708.722873][ T28] audit: type=1400 audit(2000001759.623:8034): avc: denied { write } for pid=6546 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1