last executing test programs: 20m31.24961123s ago: executing program 1 (id=1645): r0 = open(&(0x7f0000000040)='./file1/file2\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r1 = openat(r0, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x80002, 0x40) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="11", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)=0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f0000000100)=ANY=[@ANYRES16=r7], 0x1, 0x9cf, &(0x7f0000000e00)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x15144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000e40)='./bus\x00', 0x19) bind$l2tp6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvfrom$l2tp6(r5, 0x0, 0x0, 0x140, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x20) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="04002bbd7000fcdbdf250900000005002a0001000000050029000000000008000b0000100000"], 0x2c}, 0x1, 0x0, 0x0, 0x809}, 0x48001) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, 0x0, 0x0) write$cgroup_devices(r1, 0x0, 0x9) 20m30.726949926s ago: executing program 1 (id=1646): perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x2a, 0x0, 0x4, 0xb, 0x0, 0xc, 0x0, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x5, 0x7}, 0x0, 0xa0, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, r3, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)={[{@utf8}, {@uid}, {@nojoliet}, {@nocompress}, {@showassoc}, {@map_acorn}, {@mode={'mode', 0x3d, 0x8}}, {@map_normal}, {@mode={'mode', 0x3d, 0x4}}, {@map_off}, {@dmode={'dmode', 0x3d, 0x9fbc}}, {@iocharset={'iocharset', 0x3d, 'default'}}], [{@euid_eq={'euid', 0x3d, r3}}]}, 0x2, 0xa45, &(0x7f00000007c0)="$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") munmap(&(0x7f000025f000/0x1000)=nil, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r5, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x1a}}}}}, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x2, 0x3, 0x106) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="92588ff86cfe9eeb92b3a7b4afc82a137de86db0ec00005b017636000000e200000000066c805298", 0x28}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 20m29.800132556s ago: executing program 1 (id=1649): shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)) 20m29.702557679s ago: executing program 1 (id=1650): syz_emit_ethernet(0x36, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x3, 0x7, 0x28, 0x67, 0x0, 0x2e, 0x11, 0x0, @empty, @empty, {[@cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}, {0x4e21, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0xff, 0x0, @void}}}}}}}, 0x0) 20m29.67011311s ago: executing program 1 (id=1651): socket(0x400000000010, 0x3, 0x0) r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @empty, 0x200000}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001e0000032a9d7000fedbdf24ac14140f000004d60a002b00ac1e000100000000000000000000f3e3af59"], 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x17e) lseek(r5, 0xfffffffffffffffe, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x2b9, &(0x7f0000000780)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x92) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x9}}, 0x42d9) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000680)=""/232) close(0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, 0x0, 0x24004094) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a09040000000000000000020000040900010073797a30000000000900801c0001800b00010065787468647200000c0002800800064000000001140000001100010000000000000000000a00000a"], 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r10 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r10, 0x2) open(0x0, 0x100000, 0x2) 20m28.241589196s ago: executing program 1 (id=1657): socket$kcm(0x21, 0x2, 0x2) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0x1ff, 0x3, 0x42, 0x1, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mkdirat(0xffffffffffffff9c, 0x0, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, 0x0, 0x0, 0x200080, &(0x7f0000000a00)=ANY=[@ANYRES64=r6, @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c0014b6465185d4278eddd5411721c2"]) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000940)={'nat\x00', 0x0, 0x4, 0xb5, [0x7, 0x2, 0x81, 0x2, 0x4a1, 0x2], 0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], &(0x7f0000000880)=""/181}, &(0x7f00000009c0)=0x78) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x125) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x10, 0x2000000000000216, &(0x7f0000000840)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) unshare(0x8000000) r9 = semget(0x1, 0x4, 0x3c4) semtimedop(r9, &(0x7f0000000000)=[{0x3, 0xd, 0x1000}, {0x3, 0x2}, {0x2, 0x25b0, 0x800}], 0x3, 0x0) unshare(0x48020400) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e000000200f00000f000000ff010000000002004b99749372e59bb68c1bd18713eae6e648bf2a9406e6bc4cf2ba02449d6d7975eb338f2741a8a12ad8ab6b9666b98977a1570e262e37813831fc2aac8944f5836883f6498fb80deed87f9a502de5e48c75456bbcb6f21a4a90", @ANYRES32, @ANYBLOB="1a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000040000000300"/28], 0x50) 20m12.822467189s ago: executing program 32 (id=1657): socket$kcm(0x21, 0x2, 0x2) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0x1ff, 0x3, 0x42, 0x1, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mkdirat(0xffffffffffffff9c, 0x0, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, 0x0, 0x0, 0x200080, &(0x7f0000000a00)=ANY=[@ANYRES64=r6, @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c0014b6465185d4278eddd5411721c2"]) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000940)={'nat\x00', 0x0, 0x4, 0xb5, [0x7, 0x2, 0x81, 0x2, 0x4a1, 0x2], 0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], &(0x7f0000000880)=""/181}, &(0x7f00000009c0)=0x78) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x125) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x10, 0x2000000000000216, &(0x7f0000000840)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) unshare(0x8000000) r9 = semget(0x1, 0x4, 0x3c4) semtimedop(r9, &(0x7f0000000000)=[{0x3, 0xd, 0x1000}, {0x3, 0x2}, {0x2, 0x25b0, 0x800}], 0x3, 0x0) unshare(0x48020400) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e000000200f00000f000000ff010000000002004b99749372e59bb68c1bd18713eae6e648bf2a9406e6bc4cf2ba02449d6d7975eb338f2741a8a12ad8ab6b9666b98977a1570e262e37813831fc2aac8944f5836883f6498fb80deed87f9a502de5e48c75456bbcb6f21a4a90", @ANYRES32, @ANYBLOB="1a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000040000000300"/28], 0x50) 10m36.24936432s ago: executing program 5 (id=3740): mknod(0x0, 0x604e55e962254ecf, 0x10001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m35.441146046s ago: executing program 5 (id=3742): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmmsg$inet(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x100004) socket$packet(0x11, 0x3, 0x300) r3 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write(r4, &(0x7f0000000240)="6d527dd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff14727f6273ef2aacc367c13b8e834788d7da2d60077abc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e163e457770de3093738f8f8ab9bbff2008add2eccf6e907c64f69bf5", 0x84) msync(&(0x7f000012d000/0x3000)=nil, 0x3000, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000b40)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000400), 0x12) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_UNLOCK(r3, 0xc) 10m34.152762197s ago: executing program 5 (id=3745): socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x1000}, 0x0, &(0x7f0000000480), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5779, &(0x7f0000000200)={0x0, 0x2000, 0x0, 0x0, 0x357}, 0x0, &(0x7f0000000300), &(0x7f0000000340)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x5c}}, 0x10) sendto(r5, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) 10m29.724024599s ago: executing program 5 (id=3749): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmmsg$inet(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x100004) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write(r4, &(0x7f0000000240)="6d527dd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff14727f6273ef2aacc367c13b8e834788d7da2d60077abc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e163e457770de3093738f8f8ab9bbff2008add2eccf6e907c64f69bf5", 0x84) msync(&(0x7f000012d000/0x3000)=nil, 0x3000, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) shmctl$SHM_LOCK(r3, 0xb) 10m23.793953869s ago: executing program 5 (id=3758): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x42, 0x1ff) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x1c2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 10m22.81123691s ago: executing program 5 (id=3761): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="19000000040000000400000004"], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x9}, 0x4800, 0x0, 0xfffffffc, 0x4, 0xe, 0x5, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x28bd39e3) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x62) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x2e, 0x0, 0x1, 0x1ffffe}, 0x28) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 10m22.703622884s ago: executing program 33 (id=3761): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="19000000040000000400000004"], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x9}, 0x4800, 0x0, 0xfffffffc, 0x4, 0xe, 0x5, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x28bd39e3) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x62) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x2e, 0x0, 0x1, 0x1ffffe}, 0x28) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 8m41.917646929s ago: executing program 4 (id=4015): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={[0xff]}, 0xfffffffffffffefd) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pipe2(&(0x7f0000000040), 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x480, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) io_destroy(0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0) 8m41.620103429s ago: executing program 4 (id=4016): socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x16, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x14}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x84000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000480)=""/76, 0x4c}], 0x1, &(0x7f0000002f40)=[{&(0x7f0000000540)=""/187, 0xbb}], 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x44) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "06361b97940eed4e", "5ed741452f6eedbe58f74bc7aad60238", "c06fe424", "6c575e52cc416f7d"}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x572, &(0x7f0000000d00)="$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") unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000140)={r3, r0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) 8m41.343356417s ago: executing program 4 (id=4018): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmmsg$inet(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x100004) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, 0x0) r3 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write(r4, &(0x7f0000000240)="6d527dd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff14727f6273ef2aacc367c13b8e834788d7da2d60077abc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e163e457770de3093738f8f8ab9bbff2008add2eccf6e907c64f69bf5", 0x84) msync(&(0x7f000012d000/0x3000)=nil, 0x3000, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) shmctl$SHM_LOCK(r3, 0xb) 8m40.211478934s ago: executing program 4 (id=4025): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmmsg$inet(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x100004) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write(r4, &(0x7f0000000240)="6d527dd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff14727f6273ef2aacc367c13b8e834788d7da2d60077abc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e163e457770de3093738f8f8ab9bbff2008add2eccf6e907c64f69bf5", 0x84) msync(&(0x7f000012d000/0x3000)=nil, 0x3000, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000400), 0x12) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_UNLOCK(r3, 0xc) 8m38.087114711s ago: executing program 4 (id=4031): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmmsg$inet(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x100004) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write(r4, &(0x7f0000000240)="6d527dd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff14727f6273ef2aacc367c13b8e834788d7da2d60077abc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e163e457770de3093738f8f8ab9bbff2008add2eccf6e907c64f69bf5", 0x84) msync(&(0x7f000012d000/0x3000)=nil, 0x3000, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000400), 0x12) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_UNLOCK(r3, 0xc) 8m36.89845901s ago: executing program 4 (id=4037): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) mkdir(0x0, 0x64) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={[0xff]}, 0xfffffffffffffefd) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pipe2(&(0x7f0000000040), 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x480, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) io_destroy(0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0) 8m36.89823808s ago: executing program 34 (id=4037): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) mkdir(0x0, 0x64) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={[0xff]}, 0xfffffffffffffefd) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pipe2(&(0x7f0000000040), 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x480, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) io_destroy(0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0) 8m32.463826792s ago: executing program 3 (id=4045): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmmsg$inet(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x100004) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write(r4, &(0x7f0000000240)="6d527dd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff14727f6273ef2aacc367c13b8e834788d7da2d60077abc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e163e457770de3093738f8f8ab9bbff2008add2eccf6e907c64f69bf5", 0x84) msync(&(0x7f000012d000/0x3000)=nil, 0x3000, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000b40)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000400), 0x12) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_UNLOCK(r3, 0xc) 8m31.26243847s ago: executing program 3 (id=4048): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = io_uring_setup(0x6b1, &(0x7f0000009c40)={0x0, 0x1748, 0x10, 0x2, 0x109}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000001c0)={0x6, 'pim6reg\x00', {0xc}, 0xff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @empty, 0xffffffff}, {0xa, 0x4e20, 0x101, @remote, 0x7}, 0xffffffffffffffff, 0x6}}, 0x48) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xa) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000080)={0x100000, 0x0, 0xdffffffd, 0x40, 0xff, "bb4000000000000200"}) close_range(r2, 0xffffffffffffffff, 0x0) 8m30.32495661s ago: executing program 3 (id=4051): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmmsg$inet(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x100004) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, 0x0) r3 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write(r4, &(0x7f0000000240)="6d527dd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff14727f6273ef2aacc367c13b8e834788d7da2d60077abc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e163e457770de3093738f8f8ab9bbff2008add2eccf6e907c64f69b", 0x83) msync(&(0x7f000012d000/0x3000)=nil, 0x3000, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) shmctl$SHM_LOCK(r3, 0xb) 8m27.871911009s ago: executing program 3 (id=4057): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = io_uring_setup(0x6b1, &(0x7f0000009c40)={0x0, 0x1748, 0x10, 0x2, 0x109}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000001c0)={0x6, 'pim6reg\x00', {0xc}, 0xff}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @empty, 0xffffffff}, {0xa, 0x4e20, 0x101, @remote, 0x7}, r4, 0x6}}, 0x48) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xa) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000080)={0x100000, 0x0, 0xdffffffd, 0x40, 0xff, "bb4000000000000200"}) close_range(r2, 0xffffffffffffffff, 0x0) 8m24.555981324s ago: executing program 3 (id=4068): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a310000000014000000"], 0x54}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={[0xff]}, 0xfffffffffffffefd) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pipe2(&(0x7f0000000040), 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x480, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) io_destroy(0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0) 8m17.735529483s ago: executing program 3 (id=4084): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a3000000000"], 0x54}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={[0xff]}, 0xfffffffffffffefd) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pipe2(&(0x7f0000000040), 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x480, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) io_destroy(0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0) 8m17.661973256s ago: executing program 35 (id=4084): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a3000000000"], 0x54}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={[0xff]}, 0xfffffffffffffefd) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pipe2(&(0x7f0000000040), 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x480, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) io_destroy(0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0) 6.311131901s ago: executing program 7 (id=6988): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x89, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) timer_settime(r3, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x8804) r5 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x894, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}], [@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x3, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0xe000000, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x5, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0xb891, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x4e, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0xffffffff, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x3, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe62f, 0xffffffffffffffff, 0xf, 0x3, 0x7, {0x3, 0x0, 0x8, 0x9, 0x6, 0x6}, {0x8, 0x0, 0x9, 0x9, 0x6, 0x9}, 0x5, 0xa4de, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x4e23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) timer_gettime(r3, &(0x7f0000000000)) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.852059735s ago: executing program 6 (id=6993): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x80000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) getuid() socket(0x8, 0x4, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(0x0) socket$kcm(0xa, 0x1, 0x106) socket$inet6(0x10, 0x2, 0x4) pipe2$watch_queue(&(0x7f0000000000), 0x80) 4.905729294s ago: executing program 6 (id=7000): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xa00, 0x10000, 0xfffffffa, 0x0, 0x0, 0x1804000}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c0, 0x8) r3 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) prctl$PR_SET_SECUREBITS(0x1c, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) faccessat(0xffffffffffffff9c, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) 4.877734846s ago: executing program 7 (id=7001): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x1d, 0x2, 0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r4, 0xfffffff9, 0x8001, 0x6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x40060) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r6, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 4.644204873s ago: executing program 7 (id=7007): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x4580, 0x0, 0x9, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x80000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = getuid() quotactl_fd$Q_SETINFO(r3, 0xffffffff80000602, r6, &(0x7f00000000c0)={0x200000000007e, 0xdf, 0x0, 0x6}) socket(0x8, 0x4, 0x1) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) 3.825291759s ago: executing program 6 (id=7014): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xa00, 0x10000, 0xfffffffa, 0x0, 0x0, 0x1804000}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x4, 0x4}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c0, 0x8) r2 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) prctl$PR_SET_SECUREBITS(0x1c, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) faccessat(0xffffffffffffff9c, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) 3.548109238s ago: executing program 2 (id=7017): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x4580, 0x0, 0x9, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x80000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = getuid() quotactl_fd$Q_SETINFO(r1, 0xffffffff80000602, r4, &(0x7f00000000c0)={0x200000000007e, 0xdf, 0x0, 0x6}) socket(0x8, 0x4, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(0x0) socket$kcm(0xa, 0x1, 0x106) pipe2$watch_queue(&(0x7f0000000000), 0x80) 3.336142204s ago: executing program 0 (id=7018): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x1d, 0x2, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r5, 0xfffffff9, 0x8001, 0x6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x40060) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r7, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 3.303290376s ago: executing program 8 (id=7019): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000140)={@remote, @private0={0xfc, 0x0, '\x00', 0x7}, @private0, 0x9, 0x40, 0x80, 0x100, 0x5de0d1e1, 0xb90230, r4}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES16=r2, @ANYRES64=r2, @ANYRESHEX=r1], 0x48}, 0x1, 0x0, 0x0, 0x40450c4}, 0x1080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) 3.229211518s ago: executing program 0 (id=7020): socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x1000}, 0x0, &(0x7f0000000480), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5779, &(0x7f0000000200)={0x0, 0x2000, 0x0, 0x0, 0x357}, 0x0, &(0x7f0000000300), &(0x7f0000000340)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x5c}}, 0x10) sendto(r5, 0x0, 0x0, 0x40008c1, 0x0, 0x0) 3.061038933s ago: executing program 8 (id=7021): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x89, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) timer_settime(r3, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x8804) r5 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x4e23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) timer_gettime(r3, &(0x7f0000000000)) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.593889158s ago: executing program 7 (id=7022): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xa00, 0x10000, 0xfffffffa, 0x0, 0x0, 0x1804000}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x4, 0x4}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40001) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c0, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) r4 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) prctl$PR_SET_SECUREBITS(0x1c, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x48522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1220, 0x0, 0x5, 0x8, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) getitimer(0x1, &(0x7f0000001980)) faccessat(0xffffffffffffff9c, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(0x0, &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) 2.52831475s ago: executing program 2 (id=7023): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x80000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) getuid() socket(0x8, 0x4, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(0x0) socket$kcm(0xa, 0x1, 0x106) socket$inet6(0x10, 0x2, 0x4) pipe2$watch_queue(&(0x7f0000000000), 0x80) 2.333779886s ago: executing program 0 (id=7024): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x1d, 0x2, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r5, 0xfffffff9, 0x8001, 0x6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x40060) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r7, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}}, 0x20}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 2.313372196s ago: executing program 6 (id=7025): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xa00, 0x10000, 0xfffffffa, 0x0, 0x0, 0x1804000}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x4, 0x4}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x40001) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$eJzs3M1vFOUfAPDvTLctLz9+rYgvIEgVjcSXlpYXOXjRaMJBExM9YDzVtpDKQg2tiRCi1QMeDYl3439hPOnFqBdNvOrdkBDDBdTLmtmZKUvZLVu67QL7+STTPs/M0z7Pd2ae2Wfm2d0AetZI9iOJ+F9E/B4RQ3n25gIj+a/rVy9M/X31wlQStdpbfyX1cteuXpgqi5Z/tzXP1GpFfrBJvRffjZisVmfOFvmxhdMfjM2fO//C7OnJkzMnZ85MHD166OCegSMThzsSZxbXtV0fz+3eeeydS29MHb/03k9JJfK4Y1kcnTKS792mnu50ZV22rSFd37FL9v5yI93sTKCb+iIiO1z99f4/FH2xeWnbULz2WVcbB6yrWq1WW+GqvFgD7mNJdLsFQHcUtwD1+99y2cDhR9ddeTm/Acrivl4s+ZZKpHlib/+y+9tOGomI44v/fJUtsU7PIQAAGn2XjX+ebzb+S+PhPDGQ/fh/MYcyHBEPRMT2iHgwInZExEMR9bKPRMSjq6x/+QzJreOf9PIdB9eGbPz3UjG3dfP4Ly2LDPcVuW31+PuTE7PVmQPFPtkf/YMnZpOZ8RXq+P7V375ota1x/JctWf3lWLBox+XK4Kab/mZ6cmFyTUE3uPJpxK5Ks/iTKKdxkojYGRG77rCO2WcrLbfdPv4VtP63bat9HfFMfvwXY1n8paTl/OT4i0cmDo9tiurMgbHyrLjVz79efLNV/WuKvwOy47+l6fm/FP9wsili/tz5U/X52vnV13Hxj89b3tO0d/4vZY5tK87/geTt+oqBYsNHkwsLZ8cjBpLXb10/ceO/lfmyfBb//n3N+//2uLEnHouI3RGxJyIez24Ki7Y/ERFPRsS+FeL/8ZWn3l99/BszV5rFP3274x+Nx3/1ib5TP3x7+/iza1yr43+ontpfrGnn+tduA9ey7wAAAOBekdbfA5+ko0mlSKfp6Gj+Hv4dsSWtzs0vPHdi7sMz0/l75YejPy2fdA01PA8dL54Nl/mJZfmDxXPjL/s21/OjU3PV6W4HDz1ua9n/l64Fef/P/NnX7dYB664D82jAPUr/h96l/0NvSvR/6Gn6P/SuZv3/k5alR79Z18YAG8rrP/SuNvr/Yv6r9agAuDd5/Yfepf9DT2r52fh0TR/53/DEv8X3Gd4t7bn/E5HeFc24/xOVtr/MYhWJ2lDe/7M1g03LdPvKBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA///T8uXN") openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c0, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) r4 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) getitimer(0x1, &(0x7f0000001980)) faccessat(0xffffffffffffff9c, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) 2.178132041s ago: executing program 2 (id=7026): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000a00)=ANY=[@ANYBLOB="ffffffff00000000baeb1a61c08a7422427c305c5ae182c3584122c7089c5abe20ef057ccf767301f6ff8b7ad84c67a30eda60d3a8bc8eb6b5cc420917d49a91b02e44fb33dc95865de9139c9e5d9dd5d4ea843c295337602293325c8b97562060e58df8b85ac8d36856439ad6ddc9ac4986fbf19b0d0bee2b4ac2e1f7b38d2f3a61035c1e9e41da4fd13de61faa36f1ccb6b0b4e3a91d11e2cd8cd2aa6d"]) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @mcast1, 0x401}, 0x1c) fcntl$dupfd(r0, 0x0, r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000b80)={[{@dax_inode}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x800004}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}], [{@smackfsfloor={'smackfsfloor', 0x3d, '(:%)*&\x00'}}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'barrier'}}, {@euid_eq={'euid', 0x3d, r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nolazytime'}}, {@uid_eq={'uid', 0x3d, r3}}, {@audit}, {@euid_eq={'euid', 0x3d, r3}}]}, 0xfc, 0x58a, &(0x7f0000000440)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+6rE2atkuXbPl84G7n5N7bc76993t6bm7CDWBgnUj/yUW8GhHfJhFHmtYNR7byxNp2q49uTqdLErXaZ38lkWSvNbZPsv8PZZVXIuK3ryNO5za3W1laniuUSsWFrD5enb82XllaPnNlvjBbnC1enZyaOvf21OR7777TtVjfuPjPD5/e++jcNydXv//lwdE7SZyPw9m65jiewq3myonCf1lpJM5v2HCiC431k6TXHWBXhrI8H4l0DDgSQ1nWAy++ryKiBgyoRP7DgGrMAxrX9l26Dn5uPPxw7QKoHvtoc/zDa++NxP76tdHB1eSJK6P0enesC+2nbfz659076RJbvw9xoEMdYEdurUTE2eHhzeN/ko1/u3e2/ubx1ja2MWh/f6CX7qXznzdbzf9y6/OfaDH/OdQid3ejc/7nHnShmbbS+d/7Lee/60PX2FBWe6k+5xtJLl8pFc9GxMsRcSpqHW99nFu9X2u3rnn+ly5p+425YNaPB8P7ntxnplAtRMToLkN+wsOV+vQ21Wb831+f6248/unv4+I22zhevPtau3Wd499btZ8jXm95/B8f1mTr+5Pj9fNhvHFWbPb37eO/t2u/1/E/XIk4uHX8Y0nz/drKztv4af+/xXbrdnv+jyaf18uNJLhRqFYXJiJGk082vz75eN9GvbF9Gv+pk1uPf63O//Ti64ttxn/72O22m/bD8Z/Z0fHfeeH+x1/+2K797R3/t+qlU9kr2fjXWnaubLeDT/v7AwAAAAAAgH6Si4jDkeTy6+VcLp9f+3zHsTiYK5Ur1dOXy4tXZ6L+XdmxGMk17nQfafo8xET2edhGfXJDfSoijkbEd0MH6vX8dLk00+vgAQAAAAAAAAAAAAAAAAAAoE8cWv/+/9rjpBrf/0/9MdTbvgHPQP3BBvt63QugFzo+8r8bT3oC+lLH/AdeWPIfBpf8h8El/2FwyX8YXPIfBpf8h8G10/wf3aN+AAAAAAAAAAAAAAAAAAAAAAAAAAAAwAvi4oUL6VJbfXRzOq3PXF9anCtfPzNTrMzl5xen89PlhWv52XJ5tlTMT5fnO/28Url8bWIyFm+MV4uV6nhlafnSfHnxavXSlfnCbPFSceSZRAUAAAAAAAAAAAAAAAAAAADPl8rS8lyhVCoudKGQREQ3fk6/FT6IvujGXga4Zle7D/dLFHtdGNmDlHkmhZWs4zvbq0cDEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC08H8AAAD//wxGKig=") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000007140)={'veth0\x00', &(0x7f0000007040)=@ethtool_eeprom={0x43, 0x400, 0x8}}) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @short}, 0x14) bind$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)=0x1, 0x4) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2.159566181s ago: executing program 0 (id=7027): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x7, 0x5, 0x0, 0xf, 0x10, 0x4a, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 2.076070884s ago: executing program 8 (id=7028): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x89, 0x2, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000001001c00128009000100766c616e000000000c00028006000100020000", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f800800014000000f7508000140fffffffd08000340000009c708000340000000810800024000"], 0x168}}, 0x0) socket(0x40000000015, 0x5, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB="000600000000000419502e718a8e468aa027fd4d337ccbd1eec26de74c8e41454c399cc28ae39e6645153a747ba88705ca318fee7396fa8f053f25cf3ffb241eccc8718efd720a626ff6261c5c86cd742381ec19ba2f5aa6a6e3211931cb39fc37033209e31688667c7d", @ANYRESHEX=r4, @ANYBLOB=',version=9p2000,\x00']) 1.997812726s ago: executing program 7 (id=7029): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000a00)=ANY=[@ANYBLOB="ffffffff00000000baeb1a61c08a7422427c305c5ae182c3584122c7089c5abe20ef057ccf767301f6ff8b7ad84c67a30eda60d3a8bc8eb6b5cc420917d49a91b02e44fb33dc95865de9139c9e5d9dd5d4ea843c295337602293325c8b97562060e58df8b85ac8d36856439ad6ddc9ac4986fbf19b0d0bee2b4ac2e1f7b38d2f3a61035c1e9e41da4fd13de61faa36f1ccb6b0b4e3a91d11e2cd8cd2aa6d"]) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @mcast1, 0x401}, 0x1c) fcntl$dupfd(r0, 0x0, r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000b80)={[{@dax_inode}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x800004}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}], [{@smackfsfloor={'smackfsfloor', 0x3d, '(:%)*&\x00'}}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'barrier'}}, {@euid_eq={'euid', 0x3d, r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nolazytime'}}, {@uid_eq={'uid', 0x3d, r3}}, {@audit}, {@euid_eq={'euid', 0x3d, r3}}]}, 0xfc, 0x58a, &(0x7f0000000440)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) r5 = dup(r4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000007140)={'veth0\x00', &(0x7f0000007040)=@ethtool_eeprom={0x43, 0x400, 0x8}}) bind$802154_dgram(r5, &(0x7f0000000180)={0x24, @short}, 0x14) bind$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) get_mempolicy(&(0x7f0000000100), &(0x7f00000001c0), 0xffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x6) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000300)=0x1, 0x4) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 1.976218027s ago: executing program 2 (id=7030): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x89, 0x2, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000001001c00128009000100766c616e000000000c00028006000100020000", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f800800014000000f7508000140fffffffd08000340000009c708000340000000810800024000"], 0x168}}, 0x0) socket(0x40000000015, 0x5, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB="000600000000000419502e718a8e468aa027fd4d337ccbd1eec26de74c8e41454c399cc28ae39e6645153a747ba88705ca318fee7396fa8f053f25cf3ffb241eccc8718efd720a626ff6261c5c86cd742381ec19ba2f5aa6a6e3211931cb39fc37033209e31688667c7d", @ANYRESHEX=r4, @ANYBLOB=',version=9p2000,\x00']) 1.937843348s ago: executing program 0 (id=7031): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@remote, @private0={0xfc, 0x0, '\x00', 0x7}, @private0, 0x9, 0x40, 0x80, 0x100, 0x5de0d1e1, 0xb90230, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) 1.826568712s ago: executing program 0 (id=7032): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x4580, 0x0, 0x9, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x80000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = getuid() quotactl_fd$Q_SETINFO(r3, 0xffffffff80000602, r6, &(0x7f00000000c0)={0x200000000007e, 0xdf, 0x0, 0x6}) socket(0x8, 0x4, 0x1) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) 562.808522ms ago: executing program 7 (id=7033): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x4580, 0x0, 0x9, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x80000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = getuid() quotactl_fd$Q_SETINFO(r1, 0xffffffff80000602, r4, &(0x7f00000000c0)={0x200000000007e, 0xdf, 0x0, 0x6}) socket(0x8, 0x4, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(0x0) socket$kcm(0xa, 0x1, 0x106) pipe2$watch_queue(&(0x7f0000000000), 0x80) 393.729077ms ago: executing program 2 (id=7034): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x1d, 0x2, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r5, 0xfffffff9, 0x8001, 0x6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x40060) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r7, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}}, 0x20}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 373.372908ms ago: executing program 8 (id=7035): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000a00)=ANY=[@ANYBLOB="ffffffff00000000baeb1a61c08a7422427c305c5ae182c3584122c7089c5abe20ef057ccf767301f6ff8b7ad84c67a30eda60d3a8bc8eb6b5cc420917d49a91b02e44fb33dc95865de9139c9e5d9dd5d4ea843c295337602293325c8b97562060e58df8b85ac8d36856439ad6ddc9ac4986fbf19b0d0bee2b4ac2e1f7b38d2f3a61035c1e9e41da4fd13de61faa36f1ccb6b0b4e3a91d11e2cd8cd2aa6d"]) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @mcast1, 0x401}, 0x1c) fcntl$dupfd(r0, 0x0, r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000b80)={[{@dax_inode}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x800004}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}], [{@smackfsfloor={'smackfsfloor', 0x3d, '(:%)*&\x00'}}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'barrier'}}, {@euid_eq={'euid', 0x3d, r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nolazytime'}}, {@uid_eq={'uid', 0x3d, r3}}, {@audit}, {@euid_eq={'euid', 0x3d, r3}}]}, 0xfc, 0x58a, &(0x7f0000000440)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) r5 = dup(r4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000007140)={'veth0\x00', &(0x7f0000007040)=@ethtool_eeprom={0x43, 0x400, 0x8}}) bind$802154_dgram(r5, &(0x7f0000000180)={0x24, @short}, 0x14) bind$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) get_mempolicy(&(0x7f0000000100), &(0x7f00000001c0), 0xffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x6) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000300)=0x1, 0x4) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 288.42662ms ago: executing program 6 (id=7036): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x80000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) getuid() socket(0x8, 0x4, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(0x0) socket$kcm(0xa, 0x1, 0x106) socket$inet6(0x10, 0x2, 0x4) pipe2$watch_queue(&(0x7f0000000000), 0x80) 122.629405ms ago: executing program 2 (id=7037): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000a00)=ANY=[@ANYBLOB="ffffffff00000000baeb1a61c08a7422427c305c5ae182c3584122c7089c5abe20ef057ccf767301f6ff8b7ad84c67a30eda60d3a8bc8eb6b5cc420917d49a91b02e44fb33dc95865de9139c9e5d9dd5d4ea843c295337602293325c8b97562060e58df8b85ac8d36856439ad6ddc9ac4986fbf19b0d0bee2b4ac2e1f7b38d2f3a61035c1e9e41da4fd13de61faa36f1ccb6b0b4e3a91d11e2cd8cd2aa6d"]) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @mcast1, 0x401}, 0x1c) fcntl$dupfd(r0, 0x0, r0) 118.680896ms ago: executing program 8 (id=7038): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000a00)=ANY=[@ANYBLOB="ffffffff00000000baeb1a61c08a7422427c305c5ae182c3584122c7089c5abe20ef057ccf767301f6ff8b7ad84c67a30eda60d3a8bc8eb6b5cc420917d49a91b02e44fb33dc95865de9139c9e5d9dd5d4ea843c295337602293325c8b97562060e58df8b85ac8d36856439ad6ddc9ac4986fbf19b0d0bee2b4ac2e1f7b38d2f3a61035c1e9e41da4fd13de61faa36f1ccb6b0b4e3a91d11e2cd8cd2aa6d"]) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @mcast1, 0x401}, 0x1c) fcntl$dupfd(r0, 0x0, r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000b80)={[{@dax_inode}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x800004}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}], [{@smackfsfloor={'smackfsfloor', 0x3d, '(:%)*&\x00'}}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'barrier'}}, {@euid_eq={'euid', 0x3d, r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nolazytime'}}, {@uid_eq={'uid', 0x3d, r3}}, {@audit}, {@euid_eq={'euid', 0x3d, r3}}]}, 0xfc, 0x58a, &(0x7f0000000440)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r5 = dup(r4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000007140)={'veth0\x00', &(0x7f0000007040)=@ethtool_eeprom={0x43, 0x400, 0x8}}) bind$802154_dgram(r5, &(0x7f0000000180)={0x24, @short}, 0x14) bind$unix(0xffffffffffffffff, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 12.050419ms ago: executing program 8 (id=7039): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xa00, 0x10000, 0xfffffffa, 0x0, 0x0, 0x1804000}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x4, 0x4}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c0, 0x8) r3 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) prctl$PR_SET_SECUREBITS(0x1c, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) faccessat(0xffffffffffffff9c, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) 0s ago: executing program 6 (id=7040): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xa00, 0x10000, 0xfffffffa, 0x0, 0x0, 0x1804000}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x4, 0x4}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c0, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) r3 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) prctl$PR_SET_SECUREBITS(0x1c, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x48522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1220, 0x0, 0x5, 0x8, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) getitimer(0x1, &(0x7f0000001980)) faccessat(0xffffffffffffff9c, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) kernel console output (not intermixed with test programs): .254805][T26928] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6662: Corrupt directory, running e2fsck is recommended [ 1606.397901][T26946] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6662: Unrecognised inode hash code 4 [ 1606.421652][T26946] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6662: Corrupt directory, running e2fsck is recommended [ 1606.925929][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1606.967290][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 1606.967317][ T28] audit: type=1400 audit(2000002216.962:3156): avc: denied { write } for pid=26927 comm="syz.8.6662" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1606.997289][T26946] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6662: Unrecognised inode hash code 4 [ 1607.188404][T26946] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6662: Corrupt directory, running e2fsck is recommended [ 1607.965897][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1608.076891][T26965] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6672'. [ 1608.105388][T26960] loop7: detected capacity change from 0 to 512 [ 1609.005904][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1609.075425][T26960] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1609.090363][T26960] System zones: 1-12 [ 1609.683844][T26976] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6674'. [ 1609.701124][T26975] loop8: detected capacity change from 0 to 512 [ 1609.847910][T26960] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6671: corrupted in-inode xattr: e_value size too large [ 1609.869830][T26975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1609.887410][T26960] fserror_report: 1 callbacks suppressed [ 1609.887453][T26960] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1609.893471][T26975] System zones: [ 1609.908132][T26960] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6671: couldn't read orphan inode 15 (err -117) [ 1609.923923][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1609.923956][ C0] EXT4-fs (loop7): initial error at time 2000002219: ext4_iget_extra_inode:5128: inode 15 [ 1609.924070][ C0] EXT4-fs (loop7): last error at time 2000002219: ext4_iget_extra_inode:5128: inode 15 [ 1609.954906][T26975] 1-12 [ 1609.966667][T26975] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.6675: corrupted in-inode xattr: e_value size too large [ 1609.988154][T26978] openvswitch: netlink: Missing key (keys=400040, expected=10000000) [ 1610.009297][T26975] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1610.012775][T26975] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.6675: couldn't read orphan inode 15 (err -117) [ 1610.022214][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1610.022265][ C0] EXT4-fs (loop8): initial error at time 2000002220: ext4_iget_extra_inode:5128: inode 15 [ 1610.022329][ C0] EXT4-fs (loop8): last error at time 2000002220: ext4_iget_extra_inode:5128: inode 15 [ 1610.051369][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1610.064659][T26960] fserror_report: 1 callbacks suppressed [ 1610.064686][T26960] loop7: lost filesystem error report for type 5 error -117 [ 1610.074706][T26975] loop8: lost filesystem error report for type 5 error -117 [ 1610.104029][ T28] audit: type=1400 audit(2000002220.092:3157): avc: denied { write } for pid=26958 comm="syz.7.6671" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1610.193804][ T28] audit: type=1400 audit(2000002220.152:3158): avc: denied { write } for pid=26958 comm="syz.7.6671" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1610.216089][ T28] audit: type=1400 audit(2000002220.162:3159): avc: denied { write } for pid=26958 comm="syz.7.6671" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1610.234722][T26975] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6675: Unrecognised inode hash code 4 [ 1610.239330][ T28] audit: type=1400 audit(2000002220.162:3160): avc: denied { write } for pid=26958 comm="syz.7.6671" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1610.272605][T26975] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6675: Corrupt directory, running e2fsck is recommended [ 1610.294321][ T28] audit: type=1400 audit(2000002220.182:3161): avc: denied { write } for pid=26958 comm="syz.7.6671" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1610.320803][ T28] audit: type=1400 audit(2000002220.182:3162): avc: denied { write } for pid=26974 comm="syz.8.6675" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1610.458665][ T28] audit: type=1400 audit(2000002220.222:3163): avc: denied { write } for pid=26974 comm="syz.8.6675" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1610.482852][ T28] audit: type=1400 audit(2000002220.222:3164): avc: denied { write } for pid=26974 comm="syz.8.6675" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1610.505045][ T28] audit: type=1400 audit(2000002220.222:3165): avc: denied { write } for pid=26974 comm="syz.8.6675" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1610.612522][T26987] openvswitch: netlink: Missing key (keys=400040, expected=10000000) [ 1610.625295][T26994] syzkaller0: entered promiscuous mode [ 1610.641675][T26994] syzkaller0: entered allmulticast mode [ 1610.673457][T26991] loop6: detected capacity change from 0 to 512 [ 1610.703056][T26991] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1610.713580][T26991] System zones: 1-12 [ 1610.719023][T26991] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6679: corrupted in-inode xattr: e_value size too large [ 1610.733522][T26991] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1610.733894][T26991] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6679: couldn't read orphan inode 15 (err -117) [ 1610.745849][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1610.755921][T26991] loop6: lost filesystem error report for type 5 error -117 [ 1610.762069][ C1] EXT4-fs (loop6): initial error at time 2000002220: ext4_iget_extra_inode:5128: inode 15 [ 1610.779336][ C1] EXT4-fs (loop6): last error at time 2000002220: ext4_orphan_get:1402 [ 1611.085914][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1611.548951][T27016] loop7: detected capacity change from 0 to 512 [ 1611.571530][T27016] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1611.596616][T27016] System zones: 1-12 [ 1611.602242][T27016] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6687: corrupted in-inode xattr: e_value size too large [ 1611.621575][T27016] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1611.625443][T27016] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6687: couldn't read orphan inode 15 (err -117) [ 1611.634751][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1611.634799][ C0] EXT4-fs (loop7): initial error at time 2000002221: ext4_iget_extra_inode:5128: inode 15 [ 1611.634945][ C0] EXT4-fs (loop7): last error at time 2000002221: ext4_iget_extra_inode:5128: inode 15 [ 1611.774889][T27016] loop7: lost filesystem error report for type 5 error -117 [ 1611.780773][T27016] EXT4-fs mount: 47 callbacks suppressed [ 1611.780855][T27016] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1611.883543][T27018] openvswitch: netlink: Missing key (keys=400040, expected=10000000) [ 1611.949654][T17632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1612.125896][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1612.243767][T27024] loop8: detected capacity change from 0 to 512 [ 1612.444375][T27024] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1612.487737][T27024] System zones: 1-12 [ 1612.747298][T27024] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.6689: corrupted in-inode xattr: e_value size too large [ 1612.802860][T27024] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1612.806899][T27024] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.6689: couldn't read orphan inode 15 (err -117) [ 1612.816496][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1612.816580][ C1] EXT4-fs (loop8): initial error at time 2000002222: ext4_iget_extra_inode:5128: inode 15 [ 1612.816677][ C1] EXT4-fs (loop8): last error at time 2000002222: ext4_iget_extra_inode:5128: inode 15 [ 1612.888656][T27033] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6692'. [ 1613.066413][T27024] loop8: lost filesystem error report for type 5 error -117 [ 1613.069015][T27024] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1613.165897][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1613.750817][T27042] syzkaller0: entered promiscuous mode [ 1613.782367][T27038] loop7: detected capacity change from 0 to 512 [ 1613.801821][T27042] syzkaller0: entered allmulticast mode [ 1613.825223][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1613.825253][ T28] audit: type=1400 audit(2000002223.812:3176): avc: denied { write } for pid=27023 comm="syz.8.6689" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1613.930703][T27038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1613.952095][T27024] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6689: Unrecognised inode hash code 4 [ 1613.972087][T27038] System zones: 1-12 [ 1613.986570][ T28] audit: type=1400 audit(2000002223.862:3177): avc: denied { write } for pid=27023 comm="syz.8.6689" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1614.015982][T27038] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6690: corrupted in-inode xattr: e_value size too large [ 1614.052496][T27024] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6689: Corrupt directory, running e2fsck is recommended [ 1614.087668][T27038] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1614.092413][T27038] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6690: couldn't read orphan inode 15 (err -117) [ 1614.101704][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1614.101787][ C1] EXT4-fs (loop7): initial error at time 2000002224: ext4_iget_extra_inode:5128: inode 15 [ 1614.101868][ C1] EXT4-fs (loop7): last error at time 2000002224: ext4_iget_extra_inode:5128: inode 15 [ 1614.141870][T27045] loop6: detected capacity change from 0 to 512 [ 1614.152803][ T28] audit: type=1400 audit(2000002223.902:3178): avc: denied { write } for pid=27023 comm="syz.8.6689" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1614.186258][T27024] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6689: Unrecognised inode hash code 4 [ 1614.202361][T27038] loop7: lost filesystem error report for type 5 error -117 [ 1614.202885][T27024] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6689: Corrupt directory, running e2fsck is recommended [ 1614.210947][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1614.230585][ T28] audit: type=1400 audit(2000002223.912:3179): avc: denied { write } for pid=27023 comm="syz.8.6689" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1614.235892][T27038] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1614.259911][ T28] audit: type=1400 audit(2000002223.912:3180): avc: denied { write } for pid=27023 comm="syz.8.6689" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1614.290190][ T28] audit: type=1400 audit(2000002224.282:3181): avc: denied { write } for pid=27023 comm="syz.8.6689" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1614.291177][T27045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1614.312401][T27024] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6689: Unrecognised inode hash code 4 [ 1614.341810][T27045] System zones: 1-12 [ 1614.358236][T27024] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6689: Corrupt directory, running e2fsck is recommended [ 1614.372690][T27045] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6695: corrupted in-inode xattr: e_value size too large [ 1614.422592][ T28] audit: type=1400 audit(2000002224.412:3182): avc: denied { write } for pid=27035 comm="syz.7.6690" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1614.446473][T27045] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1614.447112][T27045] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6695: couldn't read orphan inode 15 (err -117) [ 1614.456487][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1614.456521][ C1] EXT4-fs (loop6): initial error at time 2000002224: ext4_iget_extra_inode:5128: inode 15 [ 1614.456617][ C1] EXT4-fs (loop6): last error at time 2000002224: ext4_iget_extra_inode:5128: inode 15 [ 1614.514437][ T28] audit: type=1400 audit(2000002224.502:3183): avc: denied { write } for pid=27035 comm="syz.7.6690" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1614.528721][T27038] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6690: Unrecognised inode hash code 4 [ 1614.543252][T27045] loop6: lost filesystem error report for type 5 error -117 [ 1614.548148][T27038] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6690: Corrupt directory, running e2fsck is recommended [ 1614.552260][T17952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1614.569556][T27038] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6690: Unrecognised inode hash code 4 [ 1614.583581][T27045] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1614.589477][T27038] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6690: Corrupt directory, running e2fsck is recommended [ 1614.606940][ T28] audit: type=1400 audit(2000002224.502:3184): avc: denied { write } for pid=27035 comm="syz.7.6690" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1614.617060][T27038] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6690: Unrecognised inode hash code 4 [ 1614.649728][T27038] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6690: Corrupt directory, running e2fsck is recommended [ 1614.664722][ T28] audit: type=1400 audit(2000002224.502:3185): avc: denied { write } for pid=27035 comm="syz.7.6690" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1614.749940][T17632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1614.872356][T27063] loop8: detected capacity change from 0 to 512 [ 1614.922173][T27063] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1614.935794][T27063] System zones: 1-12 [ 1614.951987][T27063] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.6699: corrupted in-inode xattr: e_value size too large [ 1615.031760][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1615.112603][T27069] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6701'. [ 1615.245897][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1615.919907][T27063] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1615.922055][T27063] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.6699: couldn't read orphan inode 15 (err -117) [ 1615.931559][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1615.931638][ C1] EXT4-fs (loop8): initial error at time 2000002225: ext4_iget_extra_inode:5128: inode 15 [ 1615.931799][ C1] EXT4-fs (loop8): last error at time 2000002225: ext4_iget_extra_inode:5128: inode 15 [ 1616.076103][T27063] loop8: lost filesystem error report for type 5 error -117 [ 1616.103623][T27063] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1616.186408][T27080] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6706'. [ 1616.285905][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1616.354209][T27063] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6699: Unrecognised inode hash code 4 [ 1616.883359][T27063] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6699: Corrupt directory, running e2fsck is recommended [ 1616.957526][T27063] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6699: Unrecognised inode hash code 4 [ 1616.978056][T27088] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.6703'. [ 1617.010470][T27063] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6699: Corrupt directory, running e2fsck is recommended [ 1617.118974][T27090] syzkaller0: entered promiscuous mode [ 1617.138279][T27063] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6699: Unrecognised inode hash code 4 [ 1617.157048][T27090] syzkaller0: entered allmulticast mode [ 1617.196311][T27063] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6699: Corrupt directory, running e2fsck is recommended [ 1617.223965][T27083] loop6: detected capacity change from 0 to 512 [ 1617.279368][T27083] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1617.319305][T17952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1617.328441][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1617.335604][T27083] System zones: 1-12 [ 1617.358331][T27083] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6705: corrupted in-inode xattr: e_value size too large [ 1617.380312][T27083] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1617.381304][T27083] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6705: couldn't read orphan inode 15 (err -117) [ 1617.390727][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1617.390774][ C1] EXT4-fs (loop6): initial error at time 2000002227: ext4_iget_extra_inode:5128: inode 15 [ 1617.390921][ C1] EXT4-fs (loop6): last error at time 2000002227: ext4_iget_extra_inode:5128: inode 15 [ 1617.432273][T27083] loop6: lost filesystem error report for type 5 error -117 [ 1617.434852][T27083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1617.595549][T27083] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6705: Unrecognised inode hash code 4 [ 1617.636042][T27083] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6705: Corrupt directory, running e2fsck is recommended [ 1617.685594][T27109] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6705: Unrecognised inode hash code 4 [ 1617.723120][T27103] loop7: detected capacity change from 0 to 512 [ 1617.733959][T27109] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6705: Corrupt directory, running e2fsck is recommended [ 1617.754310][T27103] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1617.774625][T27103] System zones: 1-12 [ 1617.779129][T27109] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6705: Unrecognised inode hash code 4 [ 1617.791940][T27114] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6713'. [ 1617.837693][T27109] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6705: Corrupt directory, running e2fsck is recommended [ 1617.856140][T27108] openvswitch: netlink: Missing key (keys=400040, expected=10000000) [ 1617.927459][T27103] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6711: corrupted in-inode xattr: e_value size too large [ 1617.944451][T27103] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1617.946842][T27103] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6711: couldn't read orphan inode 15 (err -117) [ 1617.956197][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1617.956246][ C1] EXT4-fs (loop7): initial error at time 2000002227: ext4_iget_extra_inode:5128: inode 15 [ 1617.956328][ C1] EXT4-fs (loop7): last error at time 2000002227: ext4_iget_extra_inode:5128: inode 15 [ 1618.365910][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1618.530233][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1618.541543][T27103] loop7: lost filesystem error report for type 5 error -117 [ 1618.547111][T27103] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1618.742299][T27103] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6711: Unrecognised inode hash code 4 [ 1618.795146][T27103] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6711: Corrupt directory, running e2fsck is recommended [ 1618.964802][T27103] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6711: Unrecognised inode hash code 4 [ 1618.988349][T27103] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6711: Corrupt directory, running e2fsck is recommended [ 1619.405888][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1619.468050][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 1619.468070][ T28] audit: type=1400 audit(2000002229.462:3207): avc: denied { write } for pid=27102 comm="syz.7.6711" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1619.498498][T27103] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6711: Unrecognised inode hash code 4 [ 1619.511708][T27103] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6711: Corrupt directory, running e2fsck is recommended [ 1619.599070][T17632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1619.760385][T27137] syzkaller0: entered promiscuous mode [ 1619.789377][T27137] syzkaller0: entered allmulticast mode [ 1619.934832][T27142] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6721'. [ 1620.445885][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1620.643076][T27149] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6723'. [ 1621.485945][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1621.633638][T27158] loop7: detected capacity change from 0 to 512 [ 1621.676304][T27158] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1621.720590][T27162] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.6726'. [ 1621.735005][T27158] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 1621.772020][T27158] EXT4-fs (loop7): 1 truncate cleaned up [ 1621.794076][T27158] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1621.838716][T27139] openvswitch: netlink: Missing key (keys=400040, expected=10000000) [ 1622.115607][T27178] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6731'. [ 1622.525883][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1623.000239][T27185] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1623.036581][ T28] audit: type=1400 audit(2000002232.992:3208): avc: denied { write } for pid=27157 comm="syz.7.6725" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1623.077792][T27187] syzkaller0: entered promiscuous mode [ 1623.083335][T27187] syzkaller0: entered allmulticast mode [ 1623.262974][T27188] openvswitch: netlink: Missing key (keys=400040, expected=10000000) [ 1623.325018][T17632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1623.359488][T27194] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6734'. [ 1623.566173][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1624.606121][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1624.686045][T27208] loop8: detected capacity change from 0 to 512 [ 1624.738690][T27208] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1624.766756][T27208] System zones: 1-12 [ 1624.783309][T27208] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.6738: corrupted in-inode xattr: e_value size too large [ 1624.857555][T27208] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1624.858500][T27208] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.6738: couldn't read orphan inode 15 (err -117) [ 1624.868004][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1624.868049][ C0] EXT4-fs (loop8): initial error at time 2000002234: ext4_iget_extra_inode:5128: inode 15 [ 1624.868168][ C0] EXT4-fs (loop8): last error at time 2000002234: ext4_iget_extra_inode:5128: inode 15 [ 1624.928254][T27208] loop8: lost filesystem error report for type 5 error -117 [ 1624.935491][T27208] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1625.009102][T27217] loop6: detected capacity change from 0 to 512 [ 1625.017857][ T28] audit: type=1400 audit(2000002235.012:3209): avc: denied { write } for pid=27207 comm="syz.8.6738" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1625.068028][T27217] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1625.076301][T27217] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 1625.085991][ T28] audit: type=1400 audit(2000002235.052:3210): avc: denied { write } for pid=27207 comm="syz.8.6738" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1625.122731][T27217] EXT4-fs (loop6): 1 truncate cleaned up [ 1625.133449][T27217] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1625.140791][T27208] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6738: Unrecognised inode hash code 4 [ 1625.164032][ T28] audit: type=1400 audit(2000002235.102:3211): avc: denied { write } for pid=27207 comm="syz.8.6738" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1625.265502][T27208] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6738: Corrupt directory, running e2fsck is recommended [ 1625.285598][ T28] audit: type=1400 audit(2000002235.112:3212): avc: denied { write } for pid=27207 comm="syz.8.6738" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1625.332351][T27222] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6738: Unrecognised inode hash code 4 [ 1625.347199][T27226] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6741'. [ 1625.367579][ T28] audit: type=1400 audit(2000002235.112:3213): avc: denied { write } for pid=27207 comm="syz.8.6738" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1625.391452][T27222] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6738: Corrupt directory, running e2fsck is recommended [ 1625.428817][T27222] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6738: Unrecognised inode hash code 4 [ 1625.440521][ T28] audit: type=1400 audit(2000002235.422:3214): avc: denied { write } for pid=27207 comm="syz.8.6738" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1625.448723][T27222] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6738: Corrupt directory, running e2fsck is recommended [ 1625.552683][T27229] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1625.567460][ T28] audit: type=1400 audit(2000002235.542:3215): avc: denied { write } for pid=27216 comm="syz.6.6740" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1625.591454][T17952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1625.645883][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1626.383123][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1626.685889][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1627.725918][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1628.765901][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1628.898545][T27252] loop6: detected capacity change from 0 to 512 [ 1628.983058][T27252] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1629.045025][T27252] System zones: 1-12 [ 1629.050214][T27252] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6747: corrupted in-inode xattr: e_value size too large [ 1629.064446][T27252] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1629.065840][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1629.081510][ C1] EXT4-fs (loop6): initial error at time 2000002239: ext4_iget_extra_inode:5128: inode 15 [ 1629.091485][ C1] EXT4-fs (loop6): last error at time 2000002239: ext4_iget_extra_inode:5128: inode 15 [ 1629.103489][T27252] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6747: couldn't read orphan inode 15 (err -117) [ 1629.142118][T27252] loop6: lost filesystem error report for type 5 error -117 [ 1629.151533][T27252] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1629.158534][T27278] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6754'. [ 1629.210564][ T28] audit: type=1400 audit(2000002239.192:3216): avc: denied { write } for pid=27251 comm="syz.6.6747" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1629.253847][ T28] audit: type=1400 audit(2000002239.242:3217): avc: denied { write } for pid=27251 comm="syz.6.6747" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1629.322162][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1629.578872][T27283] loop6: detected capacity change from 0 to 512 [ 1629.619515][T27283] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1629.659111][T27283] System zones: 1-12 [ 1629.757232][T27283] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6758: corrupted in-inode xattr: e_value size too large [ 1629.805891][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1629.837441][T27283] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1629.838354][T27283] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6758: couldn't read orphan inode 15 (err -117) [ 1629.855835][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1629.866116][ C1] EXT4-fs (loop6): initial error at time 2000002239: ext4_iget_extra_inode:5128: inode 15 [ 1629.866278][T27283] loop6: lost filesystem error report for type 5 error -117 [ 1629.876095][ C1] EXT4-fs (loop6): last error at time 2000002239: ext4_iget_extra_inode:5128: inode 15 [ 1629.906981][T27283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1630.782018][ T28] audit: type=1400 audit(2000002240.772:3218): avc: denied { write } for pid=27282 comm="syz.6.6758" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1630.845887][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1630.990131][ T28] audit: type=1400 audit(2000002240.982:3219): avc: denied { write } for pid=27282 comm="syz.6.6758" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1631.191803][ T28] audit: type=1400 audit(2000002241.032:3220): avc: denied { write } for pid=27282 comm="syz.6.6758" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1631.316810][ T28] audit: type=1400 audit(2000002241.042:3221): avc: denied { write } for pid=27282 comm="syz.6.6758" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1631.338812][ T28] audit: type=1400 audit(2000002241.112:3222): avc: denied { write } for pid=27282 comm="syz.6.6758" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1631.365061][T27307] loop8: detected capacity change from 0 to 512 [ 1631.372720][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1631.387839][T27307] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1631.416091][T27307] System zones: 1-12 [ 1631.422291][T27307] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.6764: corrupted in-inode xattr: e_value size too large [ 1631.458615][T27307] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1631.458866][T27307] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.6764: couldn't read orphan inode 15 (err -117) [ 1631.468180][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1631.468218][ C0] EXT4-fs (loop8): initial error at time 2000002241: ext4_iget_extra_inode:5128: inode 15 [ 1631.468273][ C0] EXT4-fs (loop8): last error at time 2000002241: ext4_iget_extra_inode:5128: inode 15 [ 1631.572180][T27312] loop6: detected capacity change from 0 to 512 [ 1631.615246][T27312] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1631.623770][T27312] System zones: 1-12 [ 1631.630007][T27307] loop8: lost filesystem error report for type 5 error -117 [ 1631.630847][T27307] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1631.658451][T27312] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6766: corrupted in-inode xattr: e_value size too large [ 1631.706671][T27312] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1631.707227][T27312] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6766: couldn't read orphan inode 15 (err -117) [ 1631.716585][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1631.716618][ C0] EXT4-fs (loop6): initial error at time 2000002241: ext4_iget_extra_inode:5128: inode 15 [ 1631.716764][ C0] EXT4-fs (loop6): last error at time 2000002241: ext4_iget_extra_inode:5128: inode 15 [ 1631.757676][T27306] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6764: Unrecognised inode hash code 4 [ 1631.781795][ T28] audit: type=1400 audit(2000002241.712:3223): avc: denied { write } for pid=27305 comm="syz.8.6764" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1631.817470][T27306] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6764: Corrupt directory, running e2fsck is recommended [ 1631.830642][ T28] audit: type=1400 audit(2000002241.732:3224): avc: denied { write } for pid=27305 comm="syz.8.6764" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1631.831144][T27312] loop6: lost filesystem error report for type 5 error -117 [ 1631.862652][ T28] audit: type=1400 audit(2000002241.732:3225): avc: denied { write } for pid=27305 comm="syz.8.6764" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1631.891888][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1631.898903][ T28] audit: type=1400 audit(2000002241.732:3226): avc: denied { write } for pid=27305 comm="syz.8.6764" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1631.925032][T27312] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1631.937628][ T28] audit: type=1400 audit(2000002241.732:3227): avc: denied { write } for pid=27305 comm="syz.8.6764" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1632.002734][T27312] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6766: Unrecognised inode hash code 4 [ 1632.014868][T27312] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6766: Corrupt directory, running e2fsck is recommended [ 1632.033627][T17952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1632.037510][T27312] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6766: Unrecognised inode hash code 4 [ 1632.054631][T27312] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6766: Corrupt directory, running e2fsck is recommended [ 1632.100256][T27312] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6766: Unrecognised inode hash code 4 [ 1632.128178][T27312] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6766: Corrupt directory, running e2fsck is recommended [ 1632.191200][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1632.447538][T27325] loop6: detected capacity change from 0 to 512 [ 1632.481496][T27330] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.6770'. [ 1632.491982][T27325] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1632.541808][T27325] System zones: 1-12 [ 1632.547096][T27325] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6771: corrupted in-inode xattr: e_value size too large [ 1632.581533][T27336] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6774'. [ 1632.670674][T27325] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1632.675063][T27325] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6771: couldn't read orphan inode 15 (err -117) [ 1632.684487][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1632.684519][ C0] EXT4-fs (loop6): initial error at time 2000002242: ext4_iget_extra_inode:5128: inode 15 [ 1632.684636][ C0] EXT4-fs (loop6): last error at time 2000002242: ext4_iget_extra_inode:5128: inode 15 [ 1632.800639][T27325] loop6: lost filesystem error report for type 5 error -117 [ 1632.803961][T27325] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1632.927318][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1633.952288][T27354] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.6775'. [ 1633.965883][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1634.770733][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1635.005901][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1635.036507][T27365] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6782'. [ 1636.045924][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1636.514149][T27375] loop6: detected capacity change from 0 to 512 [ 1636.589982][T27381] netlink: 'syz.0.6786': attribute type 13 has an invalid length. [ 1636.609092][T27375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1636.631579][T27378] loop7: detected capacity change from 0 to 512 [ 1636.647250][T27381] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1636.657439][T27375] System zones: 1-12 [ 1636.678944][T27381] syzkaller0: entered promiscuous mode [ 1636.684508][T27381] syzkaller0: entered allmulticast mode [ 1636.696310][T27375] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6779: corrupted in-inode xattr: e_value size too large [ 1636.715706][T27384] blktrace: Concurrent blktraces are not allowed on loop4 [ 1636.717613][T27378] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1636.737990][T27375] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1636.738623][T27378] System zones: [ 1636.748109][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1636.748143][ C1] EXT4-fs (loop6): initial error at time 2000002246: ext4_iget_extra_inode:5128: inode 15 [ 1636.748307][ C1] EXT4-fs (loop6): last error at time 2000002246: ext4_iget_extra_inode:5128: inode 15 [ 1636.773495][T27375] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6779: couldn't read orphan inode 15 (err -117) [ 1636.779131][T27378] 1-12 [ 1636.779821][T27378] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6785: corrupted in-inode xattr: e_value size too large [ 1636.815971][T27378] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1636.819096][T27378] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6785: couldn't read orphan inode 15 (err -117) [ 1636.828469][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1636.828520][ C0] EXT4-fs (loop7): initial error at time 2000002246: ext4_iget_extra_inode:5128: inode 15 [ 1636.828666][ C0] EXT4-fs (loop7): last error at time 2000002246: ext4_iget_extra_inode:5128: inode 15 [ 1636.868914][T27375] loop6: lost filesystem error report for type 5 error -117 [ 1636.872454][T27375] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1636.929810][T27378] loop7: lost filesystem error report for type 5 error -117 [ 1636.938386][T27378] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1636.988715][T27388] loop8: detected capacity change from 0 to 512 [ 1637.029969][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 1637.029989][ T28] audit: type=1400 audit(2000002247.022:3239): avc: denied { write } for pid=27372 comm="syz.6.6779" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1637.085914][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1637.089729][T27378] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6785: Unrecognised inode hash code 4 [ 1637.104795][T27378] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6785: Corrupt directory, running e2fsck is recommended [ 1637.108004][T27375] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6779: Unrecognised inode hash code 4 [ 1637.130102][T27388] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1637.137447][T27375] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6779: Corrupt directory, running e2fsck is recommended [ 1637.138366][T27388] System zones: [ 1637.151260][ T28] audit: type=1400 audit(2000002247.062:3240): avc: denied { write } for pid=27377 comm="syz.7.6785" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1637.183807][T27388] 1-12 [ 1637.188074][T27388] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.6787: corrupted in-inode xattr: e_value size too large [ 1637.202598][ T28] audit: type=1400 audit(2000002247.072:3241): avc: denied { write } for pid=27377 comm="syz.7.6785" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1637.224783][T27388] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1637.225194][ T28] audit: type=1400 audit(2000002247.072:3242): avc: denied { write } for pid=27372 comm="syz.6.6779" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1637.234536][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1637.234558][ C0] EXT4-fs (loop8): initial error at time 2000002247: ext4_iget_extra_inode:5128: inode 15 [ 1637.234592][ C0] EXT4-fs (loop8): last error at time 2000002247: ext4_iget_extra_inode:5128: inode 15 [ 1637.237434][T27375] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6779: Unrecognised inode hash code 4 [ 1637.257735][T27388] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.6787: couldn't read orphan inode 15 (err -117) [ 1637.299127][T27375] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6779: Corrupt directory, running e2fsck is recommended [ 1637.307218][ T28] audit: type=1400 audit(2000002247.072:3243): avc: denied { write } for pid=27377 comm="syz.7.6785" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1637.307277][ T28] audit: type=1400 audit(2000002247.082:3244): avc: denied { write } for pid=27377 comm="syz.7.6785" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1637.321059][T27388] loop8: lost filesystem error report for type 5 error -117 [ 1637.357685][ T28] audit: type=1400 audit(2000002247.082:3245): avc: denied { write } for pid=27377 comm="syz.7.6785" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1637.366995][T17632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1637.380211][ T28] audit: type=1400 audit(2000002247.092:3246): avc: denied { write } for pid=27372 comm="syz.6.6779" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1637.459916][T27375] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6779: Unrecognised inode hash code 4 [ 1637.474254][T27388] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1637.483375][ T28] audit: type=1400 audit(2000002247.092:3247): avc: denied { write } for pid=27372 comm="syz.6.6779" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1637.508485][T27375] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6779: Corrupt directory, running e2fsck is recommended [ 1637.557485][T27397] loop7: detected capacity change from 0 to 512 [ 1637.564515][T27388] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6787: Unrecognised inode hash code 4 [ 1637.576722][ T28] audit: type=1400 audit(2000002247.092:3248): avc: denied { write } for pid=27372 comm="syz.6.6779" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1637.601473][T27388] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6787: Corrupt directory, running e2fsck is recommended [ 1637.617064][T27397] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1637.625528][T27397] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 1637.634372][T27399] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6787: Unrecognised inode hash code 4 [ 1637.647270][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1637.657606][T27397] EXT4-fs (loop7): 1 truncate cleaned up [ 1637.682133][T27397] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1637.797108][T27399] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6787: Corrupt directory, running e2fsck is recommended [ 1637.820566][T27399] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6787: Unrecognised inode hash code 4 [ 1637.832339][T27399] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6787: Corrupt directory, running e2fsck is recommended [ 1637.900890][T27403] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1637.920140][T17952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1638.039877][T27409] loop8: detected capacity change from 0 to 512 [ 1638.055918][T27409] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 1638.073184][T27409] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 1638.116458][T27409] EXT4-fs (loop8): 1 truncate cleaned up [ 1638.127514][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1638.128869][T27409] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1638.219935][T17632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1638.317357][T27414] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1638.439472][T27418] syzkaller0: entered promiscuous mode [ 1638.445078][T27418] syzkaller0: entered allmulticast mode [ 1638.499885][T17952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1638.601043][T27424] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1638.613887][T27422] netlink: 'syz.7.6798': attribute type 13 has an invalid length. [ 1638.636712][T27422] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1638.661279][T27422] syzkaller0: entered promiscuous mode [ 1638.667052][T27422] syzkaller0: entered allmulticast mode [ 1638.806670][T27428] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6800'. [ 1638.829659][T27426] loop6: detected capacity change from 0 to 512 [ 1638.906745][T27426] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1638.917274][T27426] System zones: 1-12 [ 1638.924359][T27426] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6799: corrupted in-inode xattr: e_value size too large [ 1638.967924][T27426] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1638.968552][T27426] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6799: couldn't read orphan inode 15 (err -117) [ 1638.978055][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1638.978089][ C1] EXT4-fs (loop6): initial error at time 2000002248: ext4_iget_extra_inode:5128: inode 15 [ 1638.978202][ C1] EXT4-fs (loop6): last error at time 2000002248: ext4_iget_extra_inode:5128: inode 15 [ 1639.165898][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1639.526935][T27426] loop6: lost filesystem error report for type 5 error -117 [ 1639.530161][T27426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1639.900264][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1639.912111][T27442] blktrace: Concurrent blktraces are not allowed on loop4 [ 1639.979576][T27435] blktrace: Concurrent blktraces are not allowed on loop4 [ 1640.205911][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1640.227010][T27449] loop8: detected capacity change from 0 to 512 [ 1640.259922][T27449] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1640.275744][T27449] System zones: 1-12 [ 1640.296143][T27449] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.6806: corrupted in-inode xattr: e_value size too large [ 1640.310702][T27449] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1640.311470][T27449] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.6806: couldn't read orphan inode 15 (err -117) [ 1640.320797][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1640.320846][ C1] EXT4-fs (loop8): initial error at time 2000002250: ext4_iget_extra_inode:5128: inode 15 [ 1640.320946][ C1] EXT4-fs (loop8): last error at time 2000002250: ext4_iget_extra_inode:5128: inode 15 [ 1640.360964][T27449] loop8: lost filesystem error report for type 5 error -117 [ 1640.364152][T27449] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1640.413698][T27449] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6806: Unrecognised inode hash code 4 [ 1640.426891][T27449] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6806: Corrupt directory, running e2fsck is recommended [ 1640.455791][T17952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1640.490936][T27459] syzkaller0: entered promiscuous mode [ 1640.496907][T27459] syzkaller0: entered allmulticast mode [ 1640.655590][T27468] netlink: 'syz.8.6811': attribute type 13 has an invalid length. [ 1640.665043][T27468] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1640.676544][T27468] syzkaller0: entered promiscuous mode [ 1640.682210][T27468] syzkaller0: entered allmulticast mode [ 1640.788485][T27473] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6814'. [ 1640.846525][T27475] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6815'. [ 1641.245895][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1642.091102][T27493] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6820'. [ 1642.285876][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1642.785768][T27501] syzkaller0: entered promiscuous mode [ 1642.797383][T27501] syzkaller0: entered allmulticast mode [ 1642.868343][T27491] loop6: detected capacity change from 0 to 512 [ 1642.910009][T27491] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1643.009352][T27491] System zones: 1-12 [ 1643.026572][T27491] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6818: corrupted in-inode xattr: e_value size too large [ 1643.101849][T27491] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1643.103006][T27491] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6818: couldn't read orphan inode 15 (err -117) [ 1643.112508][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1643.112539][ C1] EXT4-fs (loop6): initial error at time 2000002253: ext4_iget_extra_inode:5128: inode 15 [ 1643.112657][ C1] EXT4-fs (loop6): last error at time 2000002253: ext4_iget_extra_inode:5128: inode 15 [ 1643.311537][T27491] loop6: lost filesystem error report for type 5 error -117 [ 1643.325901][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1643.348292][T27491] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1643.410794][T27512] netlink: 'syz.8.6825': attribute type 13 has an invalid length. [ 1643.445560][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 1643.445576][ T28] audit: type=1400 audit(2000002253.432:3265): avc: denied { write } for pid=27487 comm="syz.6.6818" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1643.446720][T27512] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1643.457882][ T28] audit: type=1400 audit(2000002253.452:3266): avc: denied { write } for pid=27487 comm="syz.6.6818" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1643.494737][T27507] loop7: detected capacity change from 0 to 512 [ 1643.505214][ T28] audit: type=1400 audit(2000002253.482:3267): avc: denied { write } for pid=27487 comm="syz.6.6818" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1643.533922][ T28] audit: type=1400 audit(2000002253.482:3268): avc: denied { write } for pid=27487 comm="syz.6.6818" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1643.560705][T27512] syzkaller0: entered promiscuous mode [ 1643.566286][T27512] syzkaller0: entered allmulticast mode [ 1643.572324][ T28] audit: type=1400 audit(2000002253.512:3269): avc: denied { write } for pid=27487 comm="syz.6.6818" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1643.628038][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1643.651752][T27507] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1643.673230][T27507] System zones: 1-12 [ 1643.688022][T27507] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6824: corrupted in-inode xattr: e_value size too large [ 1643.706583][T27507] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1643.707229][T27507] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6824: couldn't read orphan inode 15 (err -117) [ 1643.716654][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1643.716753][ C0] EXT4-fs (loop7): initial error at time 2000002253: ext4_iget_extra_inode:5128: inode 15 [ 1643.716866][ C0] EXT4-fs (loop7): last error at time 2000002253: ext4_iget_extra_inode:5128: inode 15 [ 1643.781348][T27507] loop7: lost filesystem error report for type 5 error -117 [ 1643.801169][T27507] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1643.842488][T27528] loop8: detected capacity change from 0 to 512 [ 1643.863959][T27528] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 1643.891066][ T28] audit: type=1400 audit(2000002253.882:3270): avc: denied { write } for pid=27506 comm="syz.7.6824" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1643.915947][T27528] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 1643.918086][T27525] loop6: detected capacity change from 0 to 512 [ 1643.935150][T27528] EXT4-fs (loop8): 1 truncate cleaned up [ 1643.946679][T27528] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1643.965393][ T28] audit: type=1400 audit(2000002253.932:3271): avc: denied { write } for pid=27506 comm="syz.7.6824" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1643.988797][ T28] audit: type=1400 audit(2000002253.962:3272): avc: denied { write } for pid=27506 comm="syz.7.6824" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1643.994671][T27507] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6824: Unrecognised inode hash code 4 [ 1644.027692][T27507] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6824: Corrupt directory, running e2fsck is recommended [ 1644.030487][ T28] audit: type=1400 audit(2000002253.962:3273): avc: denied { write } for pid=27506 comm="syz.7.6824" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1644.076943][T27525] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1644.089923][T27525] System zones: 1-12 [ 1644.095914][ T28] audit: type=1400 audit(2000002253.962:3274): avc: denied { write } for pid=27506 comm="syz.7.6824" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1644.096661][T27525] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6828: corrupted in-inode xattr: e_value size too large [ 1644.144101][T27525] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1644.144958][T27525] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6828: couldn't read orphan inode 15 (err -117) [ 1644.154511][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1644.154559][ C1] EXT4-fs (loop6): initial error at time 2000002254: ext4_iget_extra_inode:5128: inode 15 [ 1644.154787][ C1] EXT4-fs (loop6): last error at time 2000002254: ext4_iget_extra_inode:5128: inode 15 [ 1644.196234][T27525] loop6: lost filesystem error report for type 5 error -117 [ 1644.199388][T27507] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6824: Unrecognised inode hash code 4 [ 1644.219640][T27507] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6824: Corrupt directory, running e2fsck is recommended [ 1644.233461][T27525] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1644.249163][T27507] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6824: Unrecognised inode hash code 4 [ 1644.263149][T27507] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6824: Corrupt directory, running e2fsck is recommended [ 1644.303410][T17632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1644.342065][T27525] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6828: Unrecognised inode hash code 4 [ 1644.354081][T27525] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6828: Corrupt directory, running e2fsck is recommended [ 1644.365916][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1644.378087][T27535] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1644.432185][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1644.541013][T27534] loop7: detected capacity change from 0 to 512 [ 1644.571031][T27534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1644.579636][T27534] System zones: 1-12 [ 1644.586178][T27534] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6830: corrupted in-inode xattr: e_value size too large [ 1644.607390][T27534] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1644.607928][T27534] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6830: couldn't read orphan inode 15 (err -117) [ 1644.617269][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1644.617317][ C0] EXT4-fs (loop7): initial error at time 2000002254: ext4_iget_extra_inode:5128: inode 15 [ 1644.617433][ C0] EXT4-fs (loop7): last error at time 2000002254: ext4_iget_extra_inode:5128: inode 15 [ 1644.679249][T27545] syzkaller0: entered promiscuous mode [ 1644.689974][T27545] syzkaller0: entered allmulticast mode [ 1644.725700][T17952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1644.757696][T27534] loop7: lost filesystem error report for type 5 error -117 [ 1644.760100][T27534] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1644.953568][T27534] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6830: Unrecognised inode hash code 4 [ 1644.970088][T27534] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6830: Corrupt directory, running e2fsck is recommended [ 1644.988344][T27534] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6830: Unrecognised inode hash code 4 [ 1645.000560][T27534] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6830: Corrupt directory, running e2fsck is recommended [ 1645.017646][T27553] blktrace: Concurrent blktraces are not allowed on loop4 [ 1645.033471][T27534] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6830: Unrecognised inode hash code 4 [ 1645.045540][T27534] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6830: Corrupt directory, running e2fsck is recommended [ 1645.075736][T17632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1645.101750][T27558] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6838'. [ 1645.186965][T27556] loop8: detected capacity change from 0 to 512 [ 1645.274491][T27556] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1645.283367][T27556] System zones: 1-12 [ 1645.289986][T27556] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.6837: corrupted in-inode xattr: e_value size too large [ 1645.306406][T27556] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1645.308463][T27556] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.6837: couldn't read orphan inode 15 (err -117) [ 1645.318570][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1645.318636][ C0] EXT4-fs (loop8): initial error at time 2000002255: ext4_iget_extra_inode:5128: inode 15 [ 1645.318736][ C0] EXT4-fs (loop8): last error at time 2000002255: ext4_iget_extra_inode:5128: inode 15 [ 1645.405878][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1645.867205][T27556] loop8: lost filesystem error report for type 5 error -117 [ 1645.930620][T27556] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1646.009080][T27564] netlink: 'syz.0.6839': attribute type 13 has an invalid length. [ 1646.048594][T27564] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1646.082106][T27564] syzkaller0: entered promiscuous mode [ 1646.100638][T27564] syzkaller0: entered allmulticast mode [ 1646.172010][T27556] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6837: Unrecognised inode hash code 4 [ 1646.188548][T27568] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.6840'. [ 1646.206796][T27556] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6837: Corrupt directory, running e2fsck is recommended [ 1646.249562][T27556] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6837: Unrecognised inode hash code 4 [ 1646.276052][T27556] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6837: Corrupt directory, running e2fsck is recommended [ 1646.317455][T27556] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6837: Unrecognised inode hash code 4 [ 1646.340394][T27556] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6837: Corrupt directory, running e2fsck is recommended [ 1646.420605][T27575] netlink: 'syz.0.6852': attribute type 13 has an invalid length. [ 1646.445884][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1646.487077][T17952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1646.526636][T27574] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1646.527532][T27572] loop6: detected capacity change from 0 to 512 [ 1646.550402][T27574] syzkaller0: entered promiscuous mode [ 1646.561304][T27574] syzkaller0: entered allmulticast mode [ 1646.578597][T27572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1646.602455][T27572] System zones: 1-12 [ 1646.612907][T27572] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6842: corrupted in-inode xattr: e_value size too large [ 1646.628063][T27572] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1646.630729][T27572] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6842: couldn't read orphan inode 15 (err -117) [ 1646.640101][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1646.640184][ C0] EXT4-fs (loop6): initial error at time 2000002256: ext4_iget_extra_inode:5128: inode 15 [ 1646.640397][ C0] EXT4-fs (loop6): last error at time 2000002256: ext4_iget_extra_inode:5128: inode 15 [ 1646.679853][T27572] loop6: lost filesystem error report for type 5 error -117 [ 1646.685417][T27572] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1646.723298][T27581] loop8: detected capacity change from 0 to 512 [ 1646.748254][T27581] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1646.774058][T27581] System zones: 1-12 [ 1646.780605][T27581] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.6843: corrupted in-inode xattr: e_value size too large [ 1646.798370][T27581] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1646.799859][T27581] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.6843: couldn't read orphan inode 15 (err -117) [ 1646.809362][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1646.809394][ C1] EXT4-fs (loop8): initial error at time 2000002256: ext4_iget_extra_inode:5128: inode 15 [ 1646.809512][ C1] EXT4-fs (loop8): last error at time 2000002256: ext4_iget_extra_inode:5128: inode 15 [ 1646.827124][T27572] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6842: Unrecognised inode hash code 4 [ 1646.829288][T27581] loop8: lost filesystem error report for type 5 error -117 [ 1646.859047][T27572] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6842: Corrupt directory, running e2fsck is recommended [ 1646.885014][T27581] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1646.886066][T27590] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6845'. [ 1647.068193][T27591] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6842: Unrecognised inode hash code 4 [ 1647.079784][T27591] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6842: Corrupt directory, running e2fsck is recommended [ 1647.093668][T27591] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6842: Unrecognised inode hash code 4 [ 1647.105355][T27591] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6842: Corrupt directory, running e2fsck is recommended [ 1647.485893][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1647.555007][T17952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1647.582657][T27599] syzkaller0: entered promiscuous mode [ 1647.597823][T27599] syzkaller0: entered allmulticast mode [ 1647.621325][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1647.665544][T27598] loop7: detected capacity change from 0 to 512 [ 1647.702838][T27598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1647.711678][T27598] System zones: 1-12 [ 1647.716893][T27598] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6847: corrupted in-inode xattr: e_value size too large [ 1647.738186][T27598] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1647.744263][T27598] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6847: couldn't read orphan inode 15 (err -117) [ 1647.753700][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1647.753749][ C1] EXT4-fs (loop7): initial error at time 2000002257: ext4_iget_extra_inode:5128: inode 15 [ 1647.753848][ C1] EXT4-fs (loop7): last error at time 2000002257: ext4_iget_extra_inode:5128: inode 15 [ 1647.799985][T27598] loop7: lost filesystem error report for type 5 error -117 [ 1647.809107][T27598] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1647.998959][T27607] blktrace: Concurrent blktraces are not allowed on loop4 [ 1648.045788][T27602] loop8: detected capacity change from 0 to 512 [ 1648.060829][T17632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1648.186998][T27609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=389 sclass=netlink_route_socket pid=27609 comm=syz.2.6851 [ 1648.215499][T27609] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6851'. [ 1648.228581][T27609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6851'. [ 1648.251826][T27609] 9p: Bad value for 'rfdno' [ 1648.269138][T27602] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1648.293819][T27602] System zones: 1-12 [ 1648.320833][T27602] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.6848: corrupted in-inode xattr: e_value size too large [ 1648.370027][T27602] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1648.373921][T27602] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.6848: couldn't read orphan inode 15 (err -117) [ 1648.383661][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1648.383708][ C1] EXT4-fs (loop8): initial error at time 2000002258: ext4_iget_extra_inode:5128: inode 15 [ 1648.383828][ C1] EXT4-fs (loop8): last error at time 2000002258: ext4_iget_extra_inode:5128: inode 15 [ 1648.503418][T27602] loop8: lost filesystem error report for type 5 error -117 [ 1648.505969][T27602] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1648.526177][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1648.571970][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 1648.571987][ T28] audit: type=1400 audit(2000002258.562:3304): avc: denied { write } for pid=27601 comm="syz.8.6848" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1648.608517][ T28] audit: type=1400 audit(2000002258.592:3305): avc: denied { write } for pid=27601 comm="syz.8.6848" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1648.633418][T27613] loop7: detected capacity change from 0 to 512 [ 1648.660786][T27602] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6848: Unrecognised inode hash code 4 [ 1648.674412][ T28] audit: type=1400 audit(2000002258.642:3306): avc: denied { write } for pid=27601 comm="syz.8.6848" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1648.676177][T27602] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6848: Corrupt directory, running e2fsck is recommended [ 1648.766068][ T28] audit: type=1400 audit(2000002258.642:3307): avc: denied { write } for pid=27601 comm="syz.8.6848" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1648.804244][ T28] audit: type=1400 audit(2000002258.642:3308): avc: denied { write } for pid=27601 comm="syz.8.6848" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1648.842371][T27621] loop6: detected capacity change from 0 to 1024 [ 1648.842742][T27618] netlink: 'syz.2.6855': attribute type 13 has an invalid length. [ 1648.850618][T27621] EXT4-fs: dax option not supported [ 1648.868509][T27613] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1648.877335][T27613] System zones: 1-12 [ 1648.881007][T27618] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1648.892337][T27613] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6853: corrupted in-inode xattr: e_value size too large [ 1648.898387][T27618] syzkaller0: entered promiscuous mode [ 1648.907821][T27602] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6848: Unrecognised inode hash code 4 [ 1648.912255][T27618] syzkaller0: entered allmulticast mode [ 1648.936585][T27613] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1648.937275][T27602] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6848: Corrupt directory, running e2fsck is recommended [ 1648.946744][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1648.946797][ C0] EXT4-fs (loop7): initial error at time 2000002258: ext4_iget_extra_inode:5128: inode 15 [ 1648.946911][ C0] EXT4-fs (loop7): last error at time 2000002258: ext4_iget_extra_inode:5128: inode 15 [ 1648.987606][T27602] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6848: Unrecognised inode hash code 4 [ 1648.988240][T27613] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6853: couldn't read orphan inode 15 (err -117) [ 1648.999086][ T28] audit: type=1400 audit(2000002258.982:3309): avc: denied { write } for pid=27601 comm="syz.8.6848" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1648.999180][T27602] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6848: Corrupt directory, running e2fsck is recommended [ 1649.050918][T27613] loop7: lost filesystem error report for type 5 error -117 [ 1649.055502][T27613] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1649.088415][T17952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.121287][ T28] audit: type=1400 audit(2000002259.112:3310): avc: denied { write } for pid=27612 comm="syz.7.6853" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1649.164087][ T28] audit: type=1400 audit(2000002259.152:3311): avc: denied { write } for pid=27612 comm="syz.7.6853" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1649.199437][ T28] audit: type=1400 audit(2000002259.182:3312): avc: denied { write } for pid=27612 comm="syz.7.6853" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1649.222992][ T28] audit: type=1400 audit(2000002259.182:3313): avc: denied { write } for pid=27612 comm="syz.7.6853" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1649.393178][T17632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.412523][T27633] blktrace: Concurrent blktraces are not allowed on loop4 [ 1649.441036][T27637] loop6: detected capacity change from 0 to 1024 [ 1649.447971][T27637] EXT4-fs: dax option not supported [ 1649.565880][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1649.654547][T27641] loop6: detected capacity change from 0 to 512 [ 1649.692864][T27641] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1649.821706][T27641] System zones: 1-12 [ 1649.833746][T27641] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6862: corrupted in-inode xattr: e_value size too large [ 1649.937678][T27641] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1649.942500][T27641] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6862: couldn't read orphan inode 15 (err -117) [ 1649.952160][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1649.952192][ C1] EXT4-fs (loop6): initial error at time 2000002259: ext4_iget_extra_inode:5128: inode 15 [ 1649.952310][ C1] EXT4-fs (loop6): last error at time 2000002259: ext4_iget_extra_inode:5128: inode 15 [ 1650.249330][T27641] loop6: lost filesystem error report for type 5 error -117 [ 1650.605896][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1650.668162][T27649] syzkaller0: entered promiscuous mode [ 1650.676078][T27641] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1650.689232][T27649] syzkaller0: entered allmulticast mode [ 1651.245494][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1651.632066][T27665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=389 sclass=netlink_route_socket pid=27665 comm=syz.8.6866 [ 1651.645886][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1651.663082][T27665] netlink: 180 bytes leftover after parsing attributes in process `syz.8.6866'. [ 1651.674763][T27665] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6866'. [ 1651.695306][T27665] 9pnet_fd: Insufficient options for proto=fd [ 1652.060332][T27663] loop7: detected capacity change from 0 to 512 [ 1652.066595][T27672] netlink: 'syz.6.6869': attribute type 13 has an invalid length. [ 1652.083175][T27672] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1652.097621][T27663] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1652.107857][T27672] syzkaller0: entered promiscuous mode [ 1652.112583][T27663] System zones: [ 1652.113589][T27672] syzkaller0: entered allmulticast mode [ 1652.114991][T27663] 1-12 [ 1652.141443][T27663] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6867: corrupted in-inode xattr: e_value size too large [ 1652.217813][T27663] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1652.218584][T27663] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6867: couldn't read orphan inode 15 (err -117) [ 1652.228320][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1652.228383][ C0] EXT4-fs (loop7): initial error at time 2000002262: ext4_iget_extra_inode:5128: inode 15 [ 1652.228499][ C0] EXT4-fs (loop7): last error at time 2000002262: ext4_iget_extra_inode:5128: inode 15 [ 1652.309215][T27663] loop7: lost filesystem error report for type 5 error -117 [ 1652.335239][T27663] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1652.361347][T27682] loop6: detected capacity change from 0 to 512 [ 1652.502731][T27663] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6867: Unrecognised inode hash code 4 [ 1652.523107][T27663] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6867: Corrupt directory, running e2fsck is recommended [ 1652.531513][T27682] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1652.545902][T27682] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 1652.560411][T27663] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6867: Unrecognised inode hash code 4 [ 1652.575892][T27682] EXT4-fs (loop6): 1 truncate cleaned up [ 1652.576234][T27663] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6867: Corrupt directory, running e2fsck is recommended [ 1652.595472][T27682] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1652.598586][T27663] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6867: Unrecognised inode hash code 4 [ 1652.620284][T27663] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6867: Corrupt directory, running e2fsck is recommended [ 1652.685878][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1652.736108][T17632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1652.927575][T27694] blktrace: Concurrent blktraces are not allowed on loop4 [ 1653.010094][T27695] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1653.234678][T27699] syzkaller0: entered promiscuous mode [ 1653.241088][T27699] syzkaller0: entered allmulticast mode [ 1653.241449][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1653.348917][T27703] loop6: detected capacity change from 0 to 1024 [ 1653.364652][T27703] EXT4-fs: dax option not supported [ 1653.365901][T27707] netlink: 'syz.2.6882': attribute type 13 has an invalid length. [ 1653.392111][T27707] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1653.412427][T27707] syzkaller0: entered promiscuous mode [ 1653.423456][T27707] syzkaller0: entered allmulticast mode [ 1653.723438][T27717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=389 sclass=netlink_route_socket pid=27717 comm=syz.8.6883 [ 1653.725887][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1653.758908][T27717] 9pnet_fd: Insufficient options for proto=fd [ 1654.016177][T27724] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6888'. [ 1654.757752][T27736] loop8: detected capacity change from 0 to 1024 [ 1654.765870][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1654.772988][T27736] EXT4-fs: dax option not supported [ 1654.977953][T27743] syzkaller0: entered promiscuous mode [ 1655.002419][T27743] syzkaller0: entered allmulticast mode [ 1655.307904][T27748] loop8: detected capacity change from 0 to 512 [ 1655.383964][T27748] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1655.398044][T27748] System zones: 1-12 [ 1655.402946][T27748] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.6895: corrupted in-inode xattr: e_value size too large [ 1655.417782][T27748] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1655.418229][T27748] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.6895: couldn't read orphan inode 15 (err -117) [ 1655.427865][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1655.427896][ C1] EXT4-fs (loop8): initial error at time 2000002265: ext4_iget_extra_inode:5128: inode 15 [ 1655.427981][ C1] EXT4-fs (loop8): last error at time 2000002265: ext4_iget_extra_inode:5128: inode 15 [ 1655.532891][T27753] blktrace: Concurrent blktraces are not allowed on loop4 [ 1655.534762][T27748] loop8: lost filesystem error report for type 5 error -117 [ 1655.579250][T27748] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1655.700794][T27759] loop7: detected capacity change from 0 to 1024 [ 1655.716200][T27759] EXT4-fs: dax option not supported [ 1655.728342][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1655.728359][ T28] audit: type=1400 audit(2000002265.722:3326): avc: denied { write } for pid=27747 comm="syz.8.6895" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1655.800277][ T28] audit: type=1400 audit(2000002265.762:3327): avc: denied { write } for pid=27747 comm="syz.8.6895" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1655.805907][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1655.833946][T27748] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6895: Unrecognised inode hash code 4 [ 1655.852966][ T28] audit: type=1400 audit(2000002265.792:3328): avc: denied { write } for pid=27747 comm="syz.8.6895" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1655.868302][T27748] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6895: Corrupt directory, running e2fsck is recommended [ 1655.923633][T27761] loop7: detected capacity change from 0 to 1024 [ 1655.930452][T27761] EXT4-fs: dax option not supported [ 1655.946555][ T28] audit: type=1400 audit(2000002265.832:3329): avc: denied { write } for pid=27747 comm="syz.8.6895" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1655.978361][T27763] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6895: Unrecognised inode hash code 4 [ 1656.007635][ T28] audit: type=1400 audit(2000002265.832:3330): avc: denied { write } for pid=27747 comm="syz.8.6895" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1656.037534][T27763] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6895: Corrupt directory, running e2fsck is recommended [ 1656.089857][T27763] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6895: Unrecognised inode hash code 4 [ 1656.101256][ T28] audit: type=1400 audit(2000002266.082:3331): avc: denied { write } for pid=27747 comm="syz.8.6895" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1656.126239][T27763] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6895: Corrupt directory, running e2fsck is recommended [ 1656.155623][T27771] loop7: detected capacity change from 0 to 1024 [ 1656.166170][T27771] EXT4-fs: dax option not supported [ 1656.233428][T17952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1656.272807][T27773] loop7: detected capacity change from 0 to 1024 [ 1656.318514][T27773] EXT4-fs: dax option not supported [ 1656.572251][T27782] blktrace: Concurrent blktraces are not allowed on loop4 [ 1656.708470][T27781] syzkaller0: entered promiscuous mode [ 1656.716026][T27781] syzkaller0: entered allmulticast mode [ 1656.845892][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1657.885927][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1658.545406][T27800] loop8: detected capacity change from 0 to 512 [ 1658.631755][T27800] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1658.641866][T27800] System zones: 1-12 [ 1658.658898][T27800] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.6911: corrupted in-inode xattr: e_value size too large [ 1658.925913][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1658.941505][T27814] loop7: detected capacity change from 0 to 1024 [ 1658.969683][T27800] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1658.971265][T27800] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.6911: couldn't read orphan inode 15 (err -117) [ 1658.980707][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1658.980738][ C0] EXT4-fs (loop8): initial error at time 2000002268: ext4_iget_extra_inode:5128: inode 15 [ 1658.980841][ C0] EXT4-fs (loop8): last error at time 2000002268: ext4_iget_extra_inode:5128: inode 15 [ 1659.036358][T27814] EXT4-fs: dax option not supported [ 1659.690963][T27800] loop8: lost filesystem error report for type 5 error -117 [ 1659.694883][T27800] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1659.965872][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1660.626218][ T28] audit: type=1400 audit(2000002270.612:3332): avc: denied { write } for pid=27799 comm="syz.8.6911" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1660.820447][T27800] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6911: Unrecognised inode hash code 4 [ 1660.833166][T27800] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6911: Corrupt directory, running e2fsck is recommended [ 1660.837750][ T28] audit: type=1400 audit(2000002270.802:3333): avc: denied { write } for pid=27799 comm="syz.8.6911" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1660.853689][T27800] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6911: Unrecognised inode hash code 4 [ 1660.988440][T27800] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6911: Corrupt directory, running e2fsck is recommended [ 1661.002806][T27800] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6911: Unrecognised inode hash code 4 [ 1661.015163][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1661.022644][T27800] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6911: Corrupt directory, running e2fsck is recommended [ 1661.217227][T17952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1661.564378][T27835] syzkaller0: entered promiscuous mode [ 1661.578377][T27835] syzkaller0: entered allmulticast mode [ 1661.818414][ T28] audit: type=1400 audit(2000002270.802:3334): avc: denied { write } for pid=27799 comm="syz.8.6911" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1661.840482][ T28] audit: type=1400 audit(2000002270.812:3335): avc: denied { write } for pid=27799 comm="syz.8.6911" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1661.862324][ T28] audit: type=1400 audit(2000002270.812:3336): avc: denied { write } for pid=27799 comm="syz.8.6911" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1662.045887][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1662.058445][ T28] audit: type=1400 audit(2000002271.002:3337): avc: denied { write } for pid=27799 comm="syz.8.6911" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1662.190462][T27846] loop7: detected capacity change from 0 to 1024 [ 1662.199232][T27846] EXT4-fs: dax option not supported [ 1662.260721][T27842] loop8: detected capacity change from 0 to 512 [ 1662.302028][T27850] loop6: detected capacity change from 0 to 512 [ 1662.325116][T27850] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1662.334948][T27850] System zones: 1-12 [ 1662.342049][T27850] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6929: corrupted in-inode xattr: e_value size too large [ 1662.356775][T27850] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1662.357464][T27850] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6929: couldn't read orphan inode 15 (err -117) [ 1662.366919][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1662.366965][ C0] EXT4-fs (loop6): initial error at time 2000002272: ext4_iget_extra_inode:5128: inode 15 [ 1662.367080][ C0] EXT4-fs (loop6): last error at time 2000002272: ext4_iget_extra_inode:5128: inode 15 [ 1662.409399][T27850] loop6: lost filesystem error report for type 5 error -117 [ 1662.411933][T27850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1662.448811][ T28] audit: type=1400 audit(2000002272.432:3338): avc: denied { write } for pid=27849 comm="syz.6.6929" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1662.453746][T27850] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6929: Unrecognised inode hash code 4 [ 1662.487882][T27850] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6929: Corrupt directory, running e2fsck is recommended [ 1662.669816][T27856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=389 sclass=netlink_route_socket pid=27856 comm=syz.7.6930 [ 1662.704260][T27856] netlink: 180 bytes leftover after parsing attributes in process `syz.7.6930'. [ 1662.714642][T27856] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6930'. [ 1662.734505][T27856] 9p: Bad value for 'rfdno' [ 1662.772822][T27842] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1662.790930][ T28] audit: type=1400 audit(2000002272.432:3339): avc: denied { write } for pid=27849 comm="syz.6.6929" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1662.861110][T27842] System zones: 1-12 [ 1662.955106][T27850] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6929: Unrecognised inode hash code 4 [ 1663.085875][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1663.100284][ T28] audit: type=1400 audit(2000002272.442:3340): avc: denied { write } for pid=27849 comm="syz.6.6929" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1663.127952][T27850] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6929: Corrupt directory, running e2fsck is recommended [ 1663.134386][ T28] audit: type=1400 audit(2000002272.442:3341): avc: denied { write } for pid=27849 comm="syz.6.6929" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1663.144641][T27842] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.6921: corrupted in-inode xattr: e_value size too large [ 1663.191651][T27850] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6929: Unrecognised inode hash code 4 [ 1663.197466][ T28] audit: type=1400 audit(2000002272.442:3342): avc: denied { write } for pid=27849 comm="syz.6.6929" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1663.225316][T27842] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1663.225854][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1663.241645][ C0] EXT4-fs (loop8): initial error at time 2000002273: ext4_iget_extra_inode:5128: inode 15 [ 1663.252084][ C0] EXT4-fs (loop8): last error at time 2000002273: ext4_iget_extra_inode:5128: inode 15 [ 1663.308249][T27850] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6929: Corrupt directory, running e2fsck is recommended [ 1663.508827][T27864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=389 sclass=netlink_route_socket pid=27864 comm=syz.2.6931 [ 1663.537646][T27864] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6931'. [ 1663.549327][T27864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6931'. [ 1663.589803][T27864] 9pnet_fd: Insufficient options for proto=fd [ 1663.884025][T27842] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.6921: couldn't read orphan inode 15 (err -117) [ 1663.904441][T27842] loop8: lost filesystem error report for type 5 error -117 [ 1663.908001][T27842] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1663.953789][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1664.035103][T27872] syzkaller0: entered promiscuous mode [ 1664.048956][T27872] syzkaller0: entered allmulticast mode [ 1664.104666][T17952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1664.125889][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1664.185305][T27881] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6938'. [ 1664.417966][T27884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=389 sclass=netlink_route_socket pid=27884 comm=syz.6.6934 [ 1664.447716][T27884] netlink: 180 bytes leftover after parsing attributes in process `syz.6.6934'. [ 1664.457705][T27884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6934'. [ 1664.472020][T27884] 9pnet_fd: Insufficient options for proto=fd [ 1665.165877][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1665.458854][T27893] loop6: detected capacity change from 0 to 1024 [ 1665.558097][T27893] EXT4-fs: dax option not supported [ 1665.656550][T27889] loop7: detected capacity change from 0 to 512 [ 1665.756486][T27904] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6947'. [ 1665.765660][T27904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6947'. [ 1665.793959][T27889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1665.834303][T27889] System zones: 1-12 [ 1665.854219][T27889] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6940: corrupted in-inode xattr: e_value size too large [ 1665.889133][T27889] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1665.891213][T27889] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6940: couldn't read orphan inode 15 (err -117) [ 1665.900516][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1665.900569][ C0] EXT4-fs (loop7): initial error at time 2000002275: ext4_iget_extra_inode:5128: inode 15 [ 1665.900714][ C0] EXT4-fs (loop7): last error at time 2000002275: ext4_iget_extra_inode:5128: inode 15 [ 1665.934523][T27908] loop6: detected capacity change from 0 to 512 [ 1665.960589][T27889] loop7: lost filesystem error report for type 5 error -117 [ 1665.972771][T27889] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1665.984885][T27908] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1666.035144][T27908] System zones: 1-12 [ 1666.052494][T27908] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6946: corrupted in-inode xattr: e_value size too large [ 1666.085946][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1666.085965][ T28] audit: type=1400 audit(2000002276.072:3346): avc: denied { write } for pid=27888 comm="syz.7.6940" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1666.086350][T27908] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1666.111332][ T28] audit: type=1400 audit(2000002276.082:3347): avc: denied { write } for pid=27888 comm="syz.7.6940" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1666.115838][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1666.140755][T27889] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6940: Unrecognised inode hash code 4 [ 1666.145027][ C0] EXT4-fs (loop6): initial error at time 2000002276: ext4_iget_extra_inode:5128: inode 15 [ 1666.157412][ T28] audit: type=1400 audit(2000002276.112:3348): avc: denied { write } for pid=27888 comm="syz.7.6940" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1666.162844][ C0] [ 1666.162852][ C0] EXT4-fs (loop6): last error at time 2000002276: ext4_iget_extra_inode:5128: inode 15 [ 1666.163404][T27908] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6946: couldn't read orphan inode 15 (err -117) [ 1666.186678][T27889] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6940: Corrupt directory, running e2fsck is recommended [ 1666.205867][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1666.209961][ T28] audit: type=1400 audit(2000002276.112:3349): avc: denied { write } for pid=27888 comm="syz.7.6940" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1666.234002][T27908] loop6: lost filesystem error report for type 5 error -117 [ 1666.279015][ T28] audit: type=1400 audit(2000002276.112:3350): avc: denied { write } for pid=27888 comm="syz.7.6940" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1666.309592][T27889] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6940: Unrecognised inode hash code 4 [ 1666.321563][T27889] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6940: Corrupt directory, running e2fsck is recommended [ 1666.336978][T27889] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6940: Unrecognised inode hash code 4 [ 1666.339816][T27908] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1666.349524][ T28] audit: type=1400 audit(2000002276.322:3351): avc: denied { write } for pid=27888 comm="syz.7.6940" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1666.382770][T27889] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6940: Corrupt directory, running e2fsck is recommended [ 1666.422742][T17632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1666.478965][T27923] syzkaller0: entered promiscuous mode [ 1666.484104][ T28] audit: type=1400 audit(2000002276.472:3352): avc: denied { write } for pid=27906 comm="syz.6.6946" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1666.500950][T27923] syzkaller0: entered allmulticast mode [ 1666.537893][T27908] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6946: Unrecognised inode hash code 4 [ 1666.549786][ T28] audit: type=1400 audit(2000002276.502:3353): avc: denied { write } for pid=27906 comm="syz.6.6946" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1666.572007][T27908] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6946: Corrupt directory, running e2fsck is recommended [ 1666.585279][ T28] audit: type=1400 audit(2000002276.512:3354): avc: denied { write } for pid=27906 comm="syz.6.6946" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1666.608897][ T28] audit: type=1400 audit(2000002276.522:3355): avc: denied { write } for pid=27906 comm="syz.6.6946" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1666.633499][T27908] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6946: Unrecognised inode hash code 4 [ 1666.657495][T27908] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6946: Corrupt directory, running e2fsck is recommended [ 1666.688612][T27908] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6946: Unrecognised inode hash code 4 [ 1666.727620][T27908] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6946: Corrupt directory, running e2fsck is recommended [ 1666.774969][T27929] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6955'. [ 1666.799186][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1667.055264][T27935] loop6: detected capacity change from 0 to 512 [ 1667.062689][T27931] loop7: detected capacity change from 0 to 512 [ 1667.229178][T27931] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1667.238735][T27935] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1667.245900][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1667.251887][T27935] System zones: 1-12 [ 1667.259245][T27935] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6957: corrupted in-inode xattr: e_value size too large [ 1667.271575][T27931] System zones: [ 1667.274061][T27935] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1667.278540][T27931] 1-12 [ 1667.294126][T27935] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6957: couldn't read orphan inode 15 (err -117) [ 1667.297201][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1667.297253][ C0] EXT4-fs (loop6): initial error at time 2000002277: ext4_iget_extra_inode:5128: inode 15 [ 1667.297317][ C0] EXT4-fs (loop6): last error at time 2000002277: ext4_iget_extra_inode:5128: inode 15 [ 1667.375868][T27931] [ 1667.413880][T27947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=389 sclass=netlink_route_socket pid=27947 comm=syz.0.6962 [ 1667.454965][T27947] 9p: Bad value for 'rfdno' [ 1667.469465][T27931] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6956: corrupted in-inode xattr: e_value size too large [ 1667.523102][T27931] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1667.525819][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1667.541431][ C0] EXT4-fs (loop7): initial error at time 2000002277: ext4_iget_extra_inode:5128: inode 15 [ 1667.551734][ C0] EXT4-fs (loop7): last error at time 2000002277: ext4_iget_extra_inode:5128: inode 15 [ 1667.569604][T27931] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6956: couldn't read orphan inode 15 (err -117) [ 1667.617062][T27931] loop7: lost filesystem error report for type 5 error -117 [ 1667.632492][T27931] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1667.659937][T27935] loop6: lost filesystem error report for type 5 error -117 [ 1667.677067][T27935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1667.737444][T27931] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6956: Unrecognised inode hash code 4 [ 1667.749402][T27931] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6956: Corrupt directory, running e2fsck is recommended [ 1667.776340][T17632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1667.836896][T27952] loop7: detected capacity change from 0 to 1024 [ 1667.856205][T27952] EXT4-fs: dax option not supported [ 1667.997940][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1668.015418][T27958] syzkaller0: entered promiscuous mode [ 1668.036907][T27958] syzkaller0: entered allmulticast mode [ 1668.196743][T27964] loop7: detected capacity change from 0 to 1024 [ 1668.215172][T27964] EXT4-fs: dax option not supported [ 1668.226982][T27969] __nla_validate_parse: 2 callbacks suppressed [ 1668.227065][T27969] netlink: 180 bytes leftover after parsing attributes in process `syz.6.6972'. [ 1668.244941][T27969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6972'. [ 1668.285881][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1668.676625][T27986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=389 sclass=netlink_route_socket pid=27986 comm=syz.7.6973 [ 1668.704167][T27986] netlink: 180 bytes leftover after parsing attributes in process `syz.7.6973'. [ 1668.716328][T27986] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6973'. [ 1668.739677][T27986] 9pnet_fd: Insufficient options for proto=fd [ 1669.063438][T27976] loop6: detected capacity change from 0 to 512 [ 1669.112011][T27976] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1669.133790][T27976] System zones: 1-12 [ 1669.140598][T27976] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6975: corrupted in-inode xattr: e_value size too large [ 1669.155141][T27976] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1669.156301][T27976] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6975: couldn't read orphan inode 15 (err -117) [ 1669.177624][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1669.177689][ C1] EXT4-fs (loop6): initial error at time 2000002279: ext4_iget_extra_inode:5128: inode 15 [ 1669.177822][ C1] EXT4-fs (loop6): last error at time 2000002279: ext4_iget_extra_inode:5128: inode 15 [ 1669.206439][T27976] loop6: lost filesystem error report for type 5 error -117 [ 1669.210537][T27976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1669.325876][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1669.343461][T27994] syzkaller0: entered promiscuous mode [ 1669.359790][T27994] syzkaller0: entered allmulticast mode [ 1669.366001][T27976] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6975: Unrecognised inode hash code 4 [ 1669.391396][T27976] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6975: Corrupt directory, running e2fsck is recommended [ 1669.476324][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1669.493930][T28001] loop7: detected capacity change from 0 to 512 [ 1669.780997][T28016] loop6: detected capacity change from 0 to 1024 [ 1669.802487][T28016] EXT4-fs: dax option not supported [ 1669.900321][T28001] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1669.933707][T28001] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 1669.968978][T28001] EXT4-fs (loop7): 1 truncate cleaned up [ 1669.982678][T28001] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1670.365863][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1670.385620][T28033] netlink: 180 bytes leftover after parsing attributes in process `syz.8.6997'. [ 1670.395741][T28033] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6997'. [ 1670.523531][T28034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=389 sclass=netlink_route_socket pid=28034 comm=syz.0.6995 [ 1670.549228][T28034] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6995'. [ 1670.559910][T28034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6995'. [ 1670.577158][T28034] 9pnet_fd: Insufficient options for proto=fd [ 1670.647484][T28039] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1670.675625][T28040] syzkaller0: entered promiscuous mode [ 1670.697972][T28040] syzkaller0: entered allmulticast mode [ 1670.904837][T17632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1671.001039][T28048] loop8: detected capacity change from 0 to 1024 [ 1671.015645][T28048] EXT4-fs: dax option not supported [ 1671.086156][T28042] loop6: detected capacity change from 0 to 512 [ 1671.114616][T28042] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1671.128935][T28042] System zones: 1-12 [ 1671.138443][T28042] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.7000: corrupted in-inode xattr: e_value size too large [ 1671.156019][T28042] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1671.159309][T28042] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.7000: couldn't read orphan inode 15 (err -117) [ 1671.168734][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1671.168796][ C1] EXT4-fs (loop6): initial error at time 2000002281: ext4_iget_extra_inode:5128 [ 1671.168865][T28056] loop8: detected capacity change from 0 to 1024 [ 1671.168881][ C1] : inode 15 [ 1671.168963][ C1] EXT4-fs (loop6): last error at time 2000002281: ext4_iget_extra_inode:5128: inode 15 [ 1671.169421][T28056] EXT4-fs: dax option not supported [ 1671.257839][T28042] loop6: lost filesystem error report for type 5 error -117 [ 1671.260799][T28042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1671.295399][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1671.295416][ T28] audit: type=1400 audit(2000002281.282:3373): avc: denied { write } for pid=28041 comm="syz.6.7000" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1671.379596][ T28] audit: type=1400 audit(2000002281.322:3374): avc: denied { write } for pid=28041 comm="syz.6.7000" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1671.405871][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1671.406032][T28064] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.7000: Unrecognised inode hash code 4 [ 1671.440301][ T28] audit: type=1400 audit(2000002281.342:3375): avc: denied { write } for pid=28041 comm="syz.6.7000" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1671.462189][ T28] audit: type=1400 audit(2000002281.392:3376): avc: denied { write } for pid=28041 comm="syz.6.7000" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1671.486577][T28064] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7000: Corrupt directory, running e2fsck is recommended [ 1671.509537][ T28] audit: type=1400 audit(2000002281.392:3377): avc: denied { write } for pid=28041 comm="syz.6.7000" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1671.579068][T28066] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.7000: Unrecognised inode hash code 4 [ 1671.591405][T28066] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7000: Corrupt directory, running e2fsck is recommended [ 1671.605358][T28066] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.7000: Unrecognised inode hash code 4 [ 1671.606117][ T28] audit: type=1400 audit(2000002281.592:3378): avc: denied { write } for pid=28041 comm="syz.6.7000" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1671.617325][T28066] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7000: Corrupt directory, running e2fsck is recommended [ 1671.783225][T28074] blktrace: Concurrent blktraces are not allowed on loop4 [ 1671.848580][T28075] blktrace: Concurrent blktraces are not allowed on loop4 [ 1671.958913][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1672.445928][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1672.817883][T28101] loop8: detected capacity change from 0 to 512 [ 1672.854221][T28101] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 1672.865925][T28101] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 1672.883660][T28101] EXT4-fs (loop8): 1 truncate cleaned up [ 1672.894431][T28101] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1672.921545][T28097] loop6: detected capacity change from 0 to 512 [ 1673.013439][T28097] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1673.023715][T28097] System zones: 1-12 [ 1673.030900][T28097] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.7014: corrupted in-inode xattr: e_value size too large [ 1673.045446][T28097] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1673.045824][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1673.061575][ C0] EXT4-fs (loop6): initial error at time 2000002283: ext4_iget_extra_inode:5128: inode 15 [ 1673.071542][ C0] EXT4-fs (loop6): last error at time 2000002283: ext4_iget_extra_inode:5128: inode 15 [ 1673.082377][T28097] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.7014: couldn't read orphan inode 15 (err -117) [ 1673.095276][T28097] loop6: lost filesystem error report for type 5 error -117 [ 1673.097904][T28097] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1673.167728][ T28] audit: type=1400 audit(2000002283.162:3379): avc: denied { write } for pid=28096 comm="syz.6.7014" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1673.190461][T28107] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1673.196889][T28097] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.7014: Unrecognised inode hash code 4 [ 1673.205444][ T28] audit: type=1400 audit(2000002283.162:3380): avc: denied { write } for pid=28096 comm="syz.6.7014" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1673.238747][ T28] audit: type=1400 audit(2000002283.162:3381): avc: denied { write } for pid=28096 comm="syz.6.7014" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1673.256407][T28097] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7014: Corrupt directory, running e2fsck is recommended [ 1673.263553][ T28] audit: type=1400 audit(2000002283.162:3382): avc: denied { write } for pid=28096 comm="syz.6.7014" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1673.313738][T28097] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.7014: Unrecognised inode hash code 4 [ 1673.326046][T28097] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7014: Corrupt directory, running e2fsck is recommended [ 1673.341451][T28097] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.7014: Unrecognised inode hash code 4 [ 1673.353243][T28097] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7014: Corrupt directory, running e2fsck is recommended [ 1673.377832][T28109] loop7: detected capacity change from 0 to 512 [ 1673.487973][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1673.496925][T28109] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1673.529714][T28109] System zones: 1-12 [ 1673.534945][T28109] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.7022: corrupted in-inode xattr: e_value size too large [ 1673.550005][T28109] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1673.556875][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1673.566084][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1673.566105][ C1] EXT4-fs (loop7): initial error at time 2000002283: ext4_iget_extra_inode:5128: inode 15 [ 1673.566138][ C1] EXT4-fs (loop7): last error at time 2000002283: ext4_iget_extra_inode:5128: inode 15 [ 1673.607336][T28109] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.7022: couldn't read orphan inode 15 (err -117) [ 1673.620353][T28109] loop7: lost filesystem error report for type 5 error -117 [ 1673.624143][T28109] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1673.666355][T28121] syzkaller0: entered promiscuous mode [ 1673.693343][T28121] syzkaller0: entered allmulticast mode [ 1673.704645][T17952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1673.742698][T28123] loop6: detected capacity change from 0 to 512 [ 1673.783122][T17632] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1673.794189][T28123] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1673.804170][T28123] System zones: 1-12 [ 1673.814463][T28123] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.7025: corrupted in-inode xattr: e_value size too large [ 1673.849111][T28123] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1673.849773][T28123] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.7025: couldn't read orphan inode 15 (err -117) [ 1673.859227][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1673.859294][ C0] EXT4-fs (loop6): initial error at time 2000002283: ext4_iget_extra_inode:5128: inode 15 [ 1673.859376][ C0] EXT4-fs (loop6): last error at time 2000002283: ext4_iget_extra_inode:5128: inode 15 [ 1673.961108][T28123] loop6: lost filesystem error report for type 5 error -117 [ 1674.525869][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1674.905811][T28134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=389 sclass=netlink_route_socket pid=28134 comm=syz.8.7028 [ 1675.015695][T28137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=389 sclass=netlink_route_socket pid=28137 comm=syz.2.7030 [ 1675.026235][T28131] netlink: 180 bytes leftover after parsing attributes in process `syz.8.7028'. [ 1675.040489][T28131] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7028'. [ 1675.059025][T28131] 9pnet_fd: Insufficient options for proto=fd [ 1675.076579][T28123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1675.082926][T28141] loop7: detected capacity change from 0 to 1024 [ 1675.106551][T28141] EXT4-fs: dax option not supported [ 1675.117168][T28135] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7030'. [ 1675.130074][T28135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7030'. [ 1675.144227][T28135] 9pnet_fd: Insufficient options for proto=fd [ 1675.157054][T28123] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.7025: Unrecognised inode hash code 4 [ 1675.176040][T28123] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7025: Corrupt directory, running e2fsck is recommended [ 1675.228446][T28143] blktrace: Concurrent blktraces are not allowed on loop4 [ 1675.347443][T28123] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.7025: Unrecognised inode hash code 4 [ 1675.368389][T28123] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7025: Corrupt directory, running e2fsck is recommended [ 1675.409775][T28123] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.7025: Unrecognised inode hash code 4 [ 1675.421675][T28123] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7025: Corrupt directory, running e2fsck is recommended [ 1675.458548][T28150] loop8: detected capacity change from 0 to 1024 [ 1675.480366][T28150] EXT4-fs: dax option not supported [ 1675.496904][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1675.565870][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1675.702971][T28154] blktrace: Concurrent blktraces are not allowed on loop4 [ 1675.713392][T28159] loop8: detected capacity change from 0 to 1024 [ 1675.714734][T28159] EXT4-fs: dax option not supported [ 1675.787847][ T2981] ================================================================== [ 1675.795984][ T2981] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 1675.804001][ T2981] [ 1675.806342][ T2981] write to 0xffff88811b6c3c30 of 8 bytes by task 25814 on cpu 0: [ 1675.814078][ T2981] dentry_unlink_inode+0x6a/0x290 [ 1675.819143][ T2981] d_delete+0xc8/0xe0 [ 1675.823157][ T2981] d_delete_notify+0x32/0x100 [ 1675.827865][ T2981] vfs_unlink+0x289/0x490 [ 1675.832233][ T2981] filename_unlinkat+0x1e2/0x410 [ 1675.837201][ T2981] __se_sys_unlink+0x2b/0xe0 [ 1675.841822][ T2981] __x64_sys_unlink+0x1f/0x30 [ 1675.846527][ T2981] x64_sys_call+0x2eb6/0x3020 [ 1675.847389][T28167] syzkaller0: entered promiscuous mode [ 1675.851234][ T2981] do_syscall_64+0x12c/0x3b0 [ 1675.861304][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.867243][ T2981] [ 1675.869580][ T2981] read to 0xffff88811b6c3c30 of 8 bytes by task 2981 on cpu 1: [ 1675.877166][ T2981] step_into_slowpath+0x12c/0x4c0 [ 1675.877341][T28167] syzkaller0: entered allmulticast mode [ 1675.882226][ T2981] path_lookupat+0x330/0x500 [ 1675.882256][ T2981] filename_lookup+0x190/0x390 [ 1675.897159][ T2981] do_readlinkat+0x74/0x2f0 [ 1675.897356][T28163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1675.901685][ T2981] __x64_sys_readlink+0x47/0x60 [ 1675.901714][ T2981] x64_sys_call+0x2b51/0x3020 [ 1675.915927][T28163] System zones: [ 1675.919143][ T2981] do_syscall_64+0x12c/0x3b0 [ 1675.926822][T28163] 1-12 [ 1675.927297][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.927313][T28163] [ 1675.927329][ T2981] [ 1675.938291][T28163] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.7039: corrupted in-inode xattr: e_value size too large [ 1675.940618][ T2981] value changed: 0xffff8881080e5098 -> 0x0000000000000000 [ 1675.940637][ T2981] [ 1675.940642][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 1675.940656][ T2981] CPU: 1 UID: 0 PID: 2981 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 1675.979039][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1675.989112][ T2981] ================================================================== [ 1675.993094][T28163] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1676.002052][T28163] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.7039: couldn't read orphan inode 15 (err -117) [ 1676.011335][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1676.011361][ C1] EXT4-fs (loop8): initial error at time 2000002285: ext4_iget_extra_inode:5128: inode 15 [ 1676.011411][ C1] EXT4-fs (loop8): last error at time 2000002285: ext4_iget_extra_inode:5128: inode 15 [ 1676.044525][T28165] set_capacity_and_notify: 1 callbacks suppressed [ 1676.044638][T28165] loop6: detected capacity change from 0 to 512 [ 1676.049700][T28163] loop8: lost filesystem error report for type 5 error -117 [ 1676.066336][T28163] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1676.093529][T28165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1676.103664][T28165] System zones: 1-12 [ 1676.131226][T28165] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.7040: corrupted in-inode xattr: e_value size too large [ 1676.171352][T28163] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.7039: Unrecognised inode hash code 4 [ 1676.172296][T28165] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1676.184579][T28165] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.7040: couldn't read orphan inode 15 (err -117) [ 1676.193996][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1676.194032][ C0] EXT4-fs (loop6): initial error at time 2000002286: ext4_iget_extra_inode:5128: inode 15 [ 1676.194113][ C0] EXT4-fs (loop6): last error at time 2000002286: ext4_iget_extra_inode:5128: inode 15 [ 1676.194633][T28163] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.7039: Corrupt directory, running e2fsck is recommended [ 1676.207435][T28165] loop6: lost filesystem error report for type 5 error -117 [ 1676.231015][T28171] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.7039: Unrecognised inode hash code 4 [ 1676.235169][T28165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1676.260796][T28171] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.7039: Corrupt directory, running e2fsck is recommended [ 1676.297532][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1676.297552][ T28] audit: type=1400 audit(2000002286.292:3401): avc: denied { write } for pid=28164 comm="syz.6.7040" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1676.306097][T28165] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.7040: Unrecognised inode hash code 4 [ 1676.347917][ T28] audit: type=1400 audit(2000002286.292:3402): avc: denied { write } for pid=28164 comm="syz.6.7040" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1676.351132][T28171] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.7039: Unrecognised inode hash code 4 [ 1676.381872][T28165] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7040: Corrupt directory, running e2fsck is recommended [ 1676.392724][ T28] audit: type=1400 audit(2000002286.292:3403): avc: denied { write } for pid=28164 comm="syz.6.7040" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1676.398109][T28171] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.7039: Corrupt directory, running e2fsck is recommended [ 1676.442528][ T28] audit: type=1400 audit(2000002286.292:3404): avc: denied { write } for pid=28164 comm="syz.6.7040" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1676.471187][T28165] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.7040: Unrecognised inode hash code 4 [ 1676.486633][ T28] audit: type=1400 audit(2000002286.342:3405): avc: denied { write } for pid=28162 comm="syz.8.7039" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1676.487551][T28165] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7040: Corrupt directory, running e2fsck is recommended [ 1676.524157][T28165] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.7040: Unrecognised inode hash code 4 [ 1676.536418][T28165] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7040: Corrupt directory, running e2fsck is recommended [ 1676.546491][ T28] audit: type=1400 audit(2000002286.522:3406): avc: denied { write } for pid=28164 comm="syz.6.7040" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1676.587785][T17952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1676.605862][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1676.642209][T25811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1677.645920][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1678.695906][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1679.725897][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1680.765878][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1681.815867][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1682.855902][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1683.885939][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1684.925904][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available