last executing test programs: 15m39.28895729s ago: executing program 2 (id=115): r0 = socket(0x848000000015, 0x805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4040000) io_uring_setup(0x1c79, 0x0) io_uring_enter(0xffffffffffffffff, 0x6b7c, 0x9d7e, 0x8, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000480)='pids.events\x00', 0x275a, 0x0) read$rfkill(r2, &(0x7f0000000080), 0x58) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000280)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_setup(0x363a, &(0x7f0000000000)={0x0, 0x91a2, 0x40, 0x1, 0x2ea}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x4c032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) accept(r0, &(0x7f00000001c0)=@caif=@dgm, &(0x7f0000000240)=0x80) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000c40)="ea", 0x1}, {&(0x7f00000005c0)="026ba12b62291de7793ef42f8b9665cd7fa9fd9b8d7461a9c67c06f3f52a60c4b29b5f60473efece7de1210b36d3e63ea3755635ba726d0a50687d0d57852809d42e32c6cc6538bbe16fd0148995051d83c1edeca0dbc1af4690c73f088bd3bfe6b315dfa20b9b08e467765034e802130723e8d3d69348b49131c45628ca5dd178073d11ae2e99a9d6e190c2c1dc625336af156c79d38455def12e8aecb61e534587396db4e776a9aff4c62e2ddec6e4c365d75b4f4f04430e30368ec101d63af666e7a5b948ad270d3aa8b547cfbdddf462301625c83d303bcc250bf7db213c868f01fba4cc9249438480ab251d44d0d7f24b45a721f567db", 0xf9}], 0x2}}, {{&(0x7f0000000180)={0xa, 0x4e1e, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x400}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000580)="7c16ae", 0x3}], 0x1}}], 0x2, 0x40) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty, 0x4}}, 0x8, 0x1, 0xfffffe01, 0x40000000, 0xb3550aa4ba878386, 0x2, 0x2}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000c40)=ANY=[@ANYBLOB="6d61703d6f66662c696f636861727365743d69736f383835392d312c73657373696f6e3d3078303030303030303030303030303032332c6f76657272696465726f636b7065726d2c6d61703d6e6f726d616c2c6f76657272696465726f636b7065726d2c636865636b3d72656c617865642c6d6f64653d3078303030303030303030303030303438362c6d61703d6e6f726d616c2c646d6f64653d3078303030303030303030303030313037622c004084b12bbdd87170d32dbbaea90a54f1866d95d2df19fbe6e41c1fc6d40d7a58e5331bbcb0e1d19e59ef1cc4248dff03d1b66f5de28e3320bff40b61bee39bd8"], 0x0, 0x567, &(0x7f00000003c0)="$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") r4 = fsopen(&(0x7f0000000280)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) 15m37.823931384s ago: executing program 2 (id=117): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendfile(r0, r0, 0x0, 0x3) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) getsockname(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000300)={0x12, 0x1, &(0x7f0000000200)="95"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 15m36.760599117s ago: executing program 2 (id=122): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x41, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) readahead(r0, 0x4, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000401f000000180001801400020073797a5f74756e"], 0x2c}}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x111081, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0}) r5 = epoll_create1(0x80000) r6 = eventfd2(0x1004, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000b80)) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id, &(0x7f0000000480)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r7, 0xffffffffffffffff, 0x13, 0x0, @void}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0x71, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r3, &(0x7f0000000180)={0x80000017}) getrlimit(0x6, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c"], 0x28}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r4], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 15m35.876260735s ago: executing program 2 (id=128): r0 = socket(0x848000000015, 0x805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4040000) io_uring_setup(0x1c79, 0x0) io_uring_enter(0xffffffffffffffff, 0x6b7c, 0x9d7e, 0x8, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000480)='pids.events\x00', 0x275a, 0x0) read$rfkill(r2, &(0x7f0000000080), 0x58) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000280)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_setup(0x363a, &(0x7f0000000000)={0x0, 0x91a2, 0x40, 0x1, 0x2ea}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x4c032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) accept(r0, &(0x7f00000001c0)=@caif=@dgm, &(0x7f0000000240)=0x80) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000c40)="ea", 0x1}, {&(0x7f00000005c0)="026ba12b62291de7793ef42f8b9665cd7fa9fd9b8d7461a9c67c06f3f52a60c4b29b5f60473efece7de1210b36d3e63ea3755635ba726d0a50687d0d57852809d42e32c6cc6538bbe16fd0148995051d83c1edeca0dbc1af4690c73f088bd3bfe6b315dfa20b9b08e467765034e802130723e8d3d69348b49131c45628ca5dd178073d11ae2e99a9d6e190c2c1dc625336af156c79d38455def12e8aecb61e534587396db4e776a9aff4c62e2ddec6e4c365d75b4f4f04430e30368ec101d63af666e7a5b948ad270d3aa8b547cfbdddf462301625c83d303bcc250bf7db213c868f01fba4cc9249438480ab251d44d0d7f24b45a721f567db", 0xf9}], 0x2}}, {{&(0x7f0000000180)={0xa, 0x4e1e, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x400}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000580)="7c16ae", 0x3}], 0x1}}], 0x2, 0x40) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty, 0x4}}, 0x8, 0x1, 0xfffffe01, 0x40000000, 0xb3550aa4ba878386, 0x2, 0x2}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000c40)=ANY=[@ANYBLOB="6d61703d6f66662c696f636861727365743d69736f383835392d312c73657373696f6e3d3078303030303030303030303030303032332c6f76657272696465726f636b7065726d2c6d61703d6e6f726d616c2c6f76657272696465726f636b7065726d2c636865636b3d72656c617865642c6d6f64653d3078303030303030303030303030303438362c6d61703d6e6f726d616c2c646d6f64653d3078303030303030303030303030313037622c004084b12bbdd87170d32dbbaea90a54f1866d95d2df19fbe6e41c1fc6d40d7a58e5331bbcb0e1d19e59ef1cc4248dff03d1b66f5de28e3320bff40b61bee39bd8"], 0x0, 0x567, &(0x7f00000003c0)="$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") r4 = fsopen(&(0x7f0000000280)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) 15m35.144654377s ago: executing program 2 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x7, 0x7}, &(0x7f00000002c0)) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x3fffffff9}, 0x2c10, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_disconnect(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0x5326, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xa, 0x6}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x1, 0x6, 0x8, 0x0, 0x1, 0x0, 0x200b}, 0x0, 0x24000000000, r3, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x8, 0x5, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$rds(0x15, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x1, 0x1, {0xa, 0x4e22, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x48) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f", 0xd}], 0x2}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="ce010c4252000000050659891a7e77f05b0a7bc6f67a010000004a21", 0x1c}, {&(0x7f0000000240)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1}}], 0x4, 0x4040084) setsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000300)=0x7fffffff, 0x4) 15m32.895066916s ago: executing program 2 (id=148): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) unshare(0x6a040000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000200)="151b00ba8d13cdea2aac8a25ec05", 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x5423, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x2, 0x1}, 0x50) r5 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) timer_delete(r6) 15m17.641589907s ago: executing program 32 (id=148): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) unshare(0x6a040000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000200)="151b00ba8d13cdea2aac8a25ec05", 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x5423, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x2, 0x1}, 0x50) r5 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) timer_delete(r6) 3m14.855144616s ago: executing program 4 (id=4537): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xfffffffe, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000004e00)=ANY=[], 0x2300}], 0x2}, 0x200408d0) 3m14.778985468s ago: executing program 4 (id=4538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000002c0)={@val={0xa, 0x8808}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x0, 0x2c, 0xff, @remote, @mcast2}}}}}, 0x3a) 3m14.568719165s ago: executing program 4 (id=4545): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 3m14.485955547s ago: executing program 4 (id=4550): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@nolazytime}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000000)=0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m14.306834313s ago: executing program 4 (id=4553): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0x4, 0x6, 0x4, 0x0, 0xdffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m14.0789925s ago: executing program 4 (id=4556): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x40, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xaf, 0xe754}]}}}}}}}, 0x0) 3m14.043291501s ago: executing program 33 (id=4556): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x40, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xaf, 0xe754}]}}}}}}}, 0x0) 1m38.072659503s ago: executing program 3 (id=6192): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6e0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, 0x0}, 0xff00) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, 0x0, 0x0, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$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") 1m37.573535108s ago: executing program 3 (id=6197): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x454, &(0x7f0000000740)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m37.133694352s ago: executing program 3 (id=6201): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r5, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) syz_emit_ethernet(0xffe, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x6, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) 1m36.933318458s ago: executing program 3 (id=6203): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b2, &(0x7f0000000540)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x56) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204]}) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) 1m36.019106787s ago: executing program 3 (id=6219): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="757466383d302c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c757466383d312c73686f72746e616d653d77696e39352c726f6469722c6e66733d6e6f7374616c655f726f2c726f6469722c757466383d312c73686f72746e616d653d77696e6e742c636865636b3d72656c617865642c00c63b831754d4eeec4cf38c28cf1e3409b9950bbab09abe8d407d1c7c935e034461a37ac3113829124efad15a202673b20ad011cb0f0cedb0cef9f6ec5e2634db26ef8581fd506844d0133ac021c0172b4b36a109949512e8dc6a8c7d603e3ef3cd57451eaee1b0e4804b9ea88fcad7afb59594dcfeaf8d34935fa0e54a36c57d964429e7ec869287810e5d97759017ace0c3f5"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x6, @perf_config_ext={0x4, 0x1003}, 0x2000, 0x1, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x3ae1, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x33) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x1238c2) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1m34.924291711s ago: executing program 3 (id=6225): io_uring_setup(0x749, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2c080}, 0x4000) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x7, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x80) 1m34.828358094s ago: executing program 34 (id=6225): io_uring_setup(0x749, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2c080}, 0x4000) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x7, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x80) 6.563664506s ago: executing program 6 (id=7096): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) getuid() r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f00000015c0)={0xf, {"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", 0x1000}}, 0x1006) 5.610852156s ago: executing program 6 (id=7105): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) inotify_init() timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) 5.382884343s ago: executing program 1 (id=7106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000200001000000000000000000"], 0x5c}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004780), 0x80, 0x0) ioctl$TIOCGRS485(r4, 0x5453, 0x0) 5.111151461s ago: executing program 0 (id=7110): r0 = socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="c5"], 0x10) r2 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4100, 0x1004}], 0x1, 0x145, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020643a00000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b7030000010000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x3, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4044050}, 0x404c0d0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b40)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001d80)=@newtaction={0x288, 0x30, 0x1, 0x7, 0x0, {}, [{0x274, 0x1, [@m_skbmod={0x144, 0x1d, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xc, 0xf8b, 0x7, 0x10000, 0x6}, 0xd}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0xfff, 0x0, 0x4, 0x6}, 0x10}}]}, {0xcd, 0x6, "27373f7c35a6170b85133d5670a2b33da4a20e208ae269cc40bdcba156b8555d8d9bad59bc313b00ce342e69fd76405ba828e33a186650e68d3a40e91da1e30924408dd8b0ff73ff65b207d3266571970457e98ff401aef47265347a3b8734ffe3100ee4ee7d42097f9660cc88ee79a472b64109668b661ca172e361d0aaf679600fe6b222fa1c2a3262ee6c5ff8ff891c9a36a04d8a62f34aa0e1cfed3bb466b1f2760e375d85747d9baabfc73306eee00e9818343410fdde7b91e1b3747b9e1c82cd0ddd22498040"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0xa0, 0xa, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xc}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xed3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xa}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xffe0}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x10000, 0x3c, 0x9, 0xffff, 0x3}}]}, {0x33, 0x6, "e23d10f14d4f4411d600cbd297c162f411b6d4274ad592eac719d39b61d61d037609393fd255d12ef24bcab2f398ce"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x8c, 0x8, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xbbb}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x46, 0x6, "8306f2e2c31aae92296bc3e4e4c5ebbc41ac987580dccab0c918b09754cdb87170a1b732cef32cb523507074effead2839853fa622cd5b3f724e5ba09f756d0c2eee"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x1}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x4) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000110001080000", @ANYBLOB="000000000000000004002b"], 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002100)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0xd, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000) socket$netlink(0x10, 0x3, 0x0) 4.866198339s ago: executing program 0 (id=7111): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x2003, 0xffffffffffffffff, 0xa) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) getpid() open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00000001002000ff03"], 0x40080) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x0, 0x6}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)='k', 0x1, 0xc0400c0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000001e00)="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", 0x349, 0x2000c010, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 4.671890695s ago: executing program 6 (id=7114): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000007c0), 0xfe, 0x526, &(0x7f0000001100)="$eJzs3U9vG2kZAPBnJnY2abPrLHBYVmJ3xS5KIqjTbOhuhNACEoLTSoVyDyFxoyhOXMVO20QVpOIDICEESFzgxAWJD4CE+hEQUiW4I0CgClo4cCgMsj1OQ2qnierYJfn9pDfzzj8/z2tnxvPOjDwBnFtvRcR0RGRZls1ERCmfnuYl9tqludyjh3eWmyWJLLv2tySSfFrntV7Khxfz1cYi4utfjfhW8nTc+s7u+lK1WtnKx2cbG8njLNu9tLaxtFpZrWzOvxLvLby/cGXhcl/aORkRH3z5zz/83s+/8sGvP3PrD4t/nf52u4FtB9vRT+2mF1vvRUchIrZOI9iQFFotbLsy5FwAADha83j/IxHxyYiYiVKMtI7mWmaGmxkAAADQL9kXJuJx0r7+BwAAAJxNaURMxNXRcn6/70Skabncvof3Y3EhrdbqjU9npf3zBZNRTK+vVSuX83sHJqOYNMfn8ntsO+PvHhqfj4hXI+IHpfHWeHm5Vl0Z6pkPAAAAOD8utvr8Sdrp//+z1O7/AwAAAGfM5LATAAAAAE6d/j8AAACcffr/AAAAcKZd/fDDZsk6z79eubmzvV67eWmlUl8vb2wvl5drWzfKq7Xa6oNCRG3jWa9XrdVufDY2t2/PNir1xmx9Z3dxo7a92Vhc+59HYAMAAAAD9Oqb936fRMTe58bTiMiSA/OKEdnIwYULg88POD3pSRb+0+nlAQzeyLATAIbGIT2cX8VhJwAM3bP2Az1v3vlN/3MBAABOx9TH96//t0rTaD4v6b7K3uCyA05Tfv0/6bGtA2eY6/9wfnXO+7sPAM6f4lFHADoFcOalx9jUn//6f5adKCkAAKDvJlolSct5P2Ai0rRcjni59ViAJ2cFX4mI35WKL11fq1bmWlMSpwcAAAAAAAAAAAAAAAAAAAAAAAAA4JiyLImsh/bTAGO013wAAADg/0NE+pckf/7XVOmdicPnB0aTf5Vaw4i49ZNrP7q91GhszTWn/31/euPH+fR3B376AgAAAOii00/v9OMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJ8ePbyz3CmDjPvgSxEx2S1+IcZaw7EoRsSFfyRROLBeEhEjfYi/dzciXusWP2mmFZN5FofjpxExPuT4F/sQH86ze839zxe7bX9pvNUadt/+Cnl5Xu3930jX+J3930iP/d/L3V4wfXrS6/d/Odsz/t2I1wvd9z+d+En+JhQOxG6Wt4/Zxm9+Y3e317zsZxFTXb9/kv1lmrXZpHBjtr6ze2ltY2m1slrZnJ+fe2/h/YUrC5dnr69VK/nfrjG+/4lf/eeo9l/oEX/ySfu7vv/vHLP9/75/++FH29XioVnF+GmWTb/d/f/vtXb8zy8eit/57vtU/nE3x6c69b12/aA3fvHbN948ov0rPdo/9oz2Tx+z/TNf++4fj7koADAA9Z3d9aVqtbJ1skoSsfccq6v0qozHC5FGnyvjMcCgS3HUMp2D2AHk85081AvxEZy4Mrx9EgAAcDqS/YP+YWcCAAAAAAAAAAAAAAAAAAAA51d9Z/TI3yc75s/RPcraui5zOObecJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCk/wYAAP//CIzIxg==") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x5}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2}, 0x20) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0x0, 0xfff3}, {0x9, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041044}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f00000001c0)) 4.608362457s ago: executing program 0 (id=7116): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) tkill(0x0, 0xb) fsopen(0x0, 0x1) 4.580645188s ago: executing program 7 (id=7117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0xffff}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x5}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) 3.593992648s ago: executing program 0 (id=7119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setgid(0x0) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0xda}]}, 0x2c}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000480)=@ethtool_test={0x1a, 0x9, 0x10}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) 3.593869448s ago: executing program 1 (id=7120): futex(&(0x7f00000000c0), 0xd, 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xffffffff, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) syz_open_dev$sg(0x0, 0x0, 0x82b6376ea19c0fc7) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 3.476806842s ago: executing program 7 (id=7121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000) recvmmsg(r6, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4096, 0x1000}], 0x3}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x10022, 0x0) 3.286058188s ago: executing program 0 (id=7122): r0 = socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="c5"], 0x10) r2 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4100, 0x1004}], 0x1, 0x145, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020643a00000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b7030000010000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x3, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4044050}, 0x404c0d0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b40)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001d80)=@newtaction={0x288, 0x30, 0x1, 0x7, 0x0, {}, [{0x274, 0x1, [@m_skbmod={0x144, 0x1d, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xc, 0xf8b, 0x7, 0x10000, 0x6}, 0xd}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0xfff, 0x0, 0x4, 0x6}, 0x10}}]}, {0xcd, 0x6, "27373f7c35a6170b85133d5670a2b33da4a20e208ae269cc40bdcba156b8555d8d9bad59bc313b00ce342e69fd76405ba828e33a186650e68d3a40e91da1e30924408dd8b0ff73ff65b207d3266571970457e98ff401aef47265347a3b8734ffe3100ee4ee7d42097f9660cc88ee79a472b64109668b661ca172e361d0aaf679600fe6b222fa1c2a3262ee6c5ff8ff891c9a36a04d8a62f34aa0e1cfed3bb466b1f2760e375d85747d9baabfc73306eee00e9818343410fdde7b91e1b3747b9e1c82cd0ddd22498040"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0xa0, 0xa, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xc}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xed3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xa}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xffe0}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x10000, 0x3c, 0x9, 0xffff, 0x3}}]}, {0x33, 0x6, "e23d10f14d4f4411d600cbd297c162f411b6d4274ad592eac719d39b61d61d037609393fd255d12ef24bcab2f398ce"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x8c, 0x8, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xbbb}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x46, 0x6, "8306f2e2c31aae92296bc3e4e4c5ebbc41ac987580dccab0c918b09754cdb87170a1b732cef32cb523507074effead2839853fa622cd5b3f724e5ba09f756d0c2eee"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x1}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x4) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000110001080000", @ANYBLOB="000000000000000004002b"], 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002100)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0xd, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000) socket$netlink(0x10, 0x3, 0x0) 3.227848929s ago: executing program 7 (id=7123): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0xc084) socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup(0xffffffffffffffff) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340), 0x0, 0x4855}, 0x40000d3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r3, @ANYBLOB="20000100"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) 2.991279357s ago: executing program 7 (id=7126): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="796100000000fedbdf377e0000"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) 2.744024475s ago: executing program 5 (id=7127): r0 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, 0x0) pread64(r3, 0x0, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) pread64(r4, &(0x7f00000001c0)=""/144, 0x90, 0x5e) 2.630955288s ago: executing program 5 (id=7128): syz_open_procfs(0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) gettid() sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) recvmmsg(r4, &(0x7f000000cf00), 0x400000000000062, 0x2, 0x0) 2.613946429s ago: executing program 1 (id=7129): socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = open(&(0x7f0000000280)='.\x00', 0x40, 0x0) fcntl$lock(r0, 0x410, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) syz_open_dev$vcsa(0x0, 0xbf, 0x42) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) io_setup(0x443, &(0x7f0000001100)=0x0) r3 = eventfd2(0x0, 0x1) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x1a, 0x8, 0x0, r1, 0x0, 0x0, 0x7, 0x0, 0x5, r3}]) 1.938036849s ago: executing program 1 (id=7130): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents(r0, 0x0, 0x0) getdents(r0, 0xffffffffffffffff, 0x5a) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000280)={{0x0, 0x1}, {0xe}, 0x0, 0x1}) syz_usb_connect$printer(0x4, 0x0, 0x0, &(0x7f0000000b00)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x310, 0x4, 0x0, 0x60, 0x10, 0x9f}, 0x0, 0x0}) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x2}) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) 1.752896035s ago: executing program 0 (id=7131): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) 1.521231583s ago: executing program 7 (id=7132): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0, 0x8a, &(0x7f0000000000), &(0x7f00000004c0)=""/138, 0xae46, 0x0, 0xba, 0x0, &(0x7f00000007c0)="73eb238ebdcbdd9341f7211bbe526b65f9aa8bcecfa1a48c2d4e623e3da85a7e26bcad3a2cd3641e26ad9ab2372d7548cf26c7403863910515a2d9d46af979da0eeb8ab5f37a524b09da8b98b82a2db5b670bcb3347e71d205eb8570384ee3161e01effcc65fb0e71c37b07eb267000fa59fb24ba9faa0c33c665ed53e3f7c1dc2fa8ef1f92051205dd65a81de13937f28927e5c241bf1afe54b4b26ee5fc14789edd602e8e1b3cda83c54693b35cec9ae9e9fa962c1070d86fe", 0x0, 0x0, 0x0, 0x2}, 0x50) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file4\x00', 0x80c406, &(0x7f0000002d40)=ANY=[@ANYRES8=0x0, @ANYRES8=0x0, @ANYRES32], 0xfb, 0x2b1, &(0x7f0000000100)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f5, 0x0, 0x32}, 0x9c) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10020, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x10049, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={&(0x7f0000000400), 0x1}, 0x1040e0, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x2}, 0x0, 0xff6fbfffffffffff, r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f00000003c0)=@ethtool_ts_info}) 1.520885043s ago: executing program 6 (id=7133): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 973.20516ms ago: executing program 1 (id=7134): socket$inet6(0xa, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) fcntl$dupfd(r0, 0x406, r0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000019480)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 756.402127ms ago: executing program 1 (id=7135): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r1, &(0x7f0000000dc0)=""/4106, 0x100a) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) lseek(r2, 0x80007, 0x4) connect$inet6(r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000200)) r3 = creat(&(0x7f0000000e40)='./bus\x00', 0x19) fallocate(r3, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000002c0)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000003c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) 707.355658ms ago: executing program 5 (id=7136): socket$netlink(0x10, 0x3, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x1}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x42283, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r3, 0x9, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd1, &(0x7f0000000000)=0xc, 0x4) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ADD(r2, 0x0, 0x2400c000) getpgrp(0x0) 547.552063ms ago: executing program 7 (id=7137): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x284001, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3ffff) write(r2, &(0x7f0000000a00)="c7", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 498.629184ms ago: executing program 5 (id=7138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)=0x84000000) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)=0x6100204) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, r3, 0x644ad2ec32b79f57, 0x70bd29, 0x25cfdc03, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4018010}, 0x4000) 452.077936ms ago: executing program 6 (id=7139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xb, 0x8}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xe, 0x6, 0x0, 0xfffd, 0x17, 0x9, 0x4, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="27030200590214000600002fb96dbcf706e1050344ee21144add66a44a6b1324890200a012eb", 0x26}], 0x1}, 0x20000000) 308.05154ms ago: executing program 6 (id=7140): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0xc, 0x2, 0x5, 0x40, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x80, 0xff, 0x1}}) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x51f9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x103300, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 173.429404ms ago: executing program 5 (id=7141): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x60, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b872, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_FAST_LEAVE={0x5, 0x7, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xb, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 5 (id=7142): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000300) r0 = socket$kcm(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8919, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): 902.324976][T23395] bridge0: port 1(ipvlan2) entered blocking state [ 902.390106][T23395] bridge0: port 1(ipvlan2) entered disabled state [ 902.423383][T23406] openvswitch: netlink: Key 8 has unexpected len 4 expected 40 [ 902.464691][T23395] ipvlan2: entered allmulticast mode [ 902.479132][T23395] bridge0: entered allmulticast mode [ 902.524081][T23395] ipvlan2: left allmulticast mode [ 902.548727][T23395] bridge0: left allmulticast mode [ 902.740443][T23412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5920'. [ 902.937449][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 903.613889][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 903.613925][ T28] audit: type=1400 audit(1781763952.284:4309): avc: denied { getopt } for pid=23441 comm="syz.6.5932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 903.699362][T23438] loop3: detected capacity change from 0 to 512 [ 903.729025][T23438] EXT4-fs: Ignoring removed oldalloc option [ 903.770285][T23438] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 903.781645][T23438] EXT4-fs (loop3): orphan cleanup on readonly fs [ 903.791779][T23438] EXT4-fs warning (device loop3): ext4_enable_quotas:7267: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 903.816611][T23438] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 903.833120][T23438] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.5931: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 903.857167][T23438] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 903.858631][T23438] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5931: couldn't read orphan inode 13 (err -117) [ 903.868003][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 903.868052][ C1] EXT4-fs (loop3): last error at time 1781763952: ext4_ext_check_inode:521: inode 13 [ 903.898562][T23438] loop3: lost filesystem error report for type 5 error -117 [ 903.911918][T23438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 903.928474][T23391] loop0: detected capacity change from 0 to 4096 [ 903.981183][ C1] net_ratelimit: 1 callbacks suppressed [ 903.981895][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 904.011207][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 904.027578][T23438] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.146472][ T28] audit: type=1400 audit(1781763952.824:4310): avc: denied { nlmsg_read } for pid=23451 comm="syz.3.5936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 904.267684][T23391] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 905.004641][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 905.011639][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 905.208954][ T28] audit: type=1400 audit(1781763953.884:4311): avc: denied { create } for pid=23498 comm="syz.6.5956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 905.256828][T23499] option changes via remount are deprecated (pid=23498 comm=syz.6.5956) [ 905.276453][ T28] audit: type=1400 audit(1781763953.924:4312): avc: denied { remount } for pid=23498 comm="syz.6.5956" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 905.369716][ T28] audit: type=1400 audit(1781763953.944:4313): avc: denied { write } for pid=23502 comm="syz.3.5958" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 905.411010][ T28] audit: type=1400 audit(1781763953.944:4314): avc: denied { open } for pid=23502 comm="syz.3.5958" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 905.438752][T23505] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5959'. [ 905.463771][ T28] audit: type=1400 audit(1781763953.974:4315): avc: denied { unmount } for pid=19172 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 905.479299][T23488] loop0: detected capacity change from 0 to 128 [ 905.550082][ T28] audit: type=1400 audit(1781763953.974:4316): avc: denied { connect } for pid=23502 comm="syz.3.5958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 905.574717][ T28] audit: type=1400 audit(1781763954.054:4317): avc: denied { ioctl } for pid=23502 comm="syz.3.5958" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 905.607598][T23505] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5959'. [ 905.849120][ T28] audit: type=1400 audit(1781763954.504:4318): avc: denied { mounton } for pid=23521 comm="syz.3.5965" path="/proc/3314/task" dev="proc" ino=63434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 905.901607][T23524] lo speed is unknown, defaulting to 1000 [ 905.907958][T23524] gre0 speed is unknown, defaulting to 1000 [ 905.987793][T23514] loop6: detected capacity change from 0 to 4096 [ 905.992213][T23488] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 906.028098][T23514] EXT4-fs: inline encryption not supported [ 906.044639][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 906.051640][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 906.054151][T23524] lo speed is unknown, defaulting to 1000 [ 906.061715][T23514] EXT4-fs: test_dummy_encryption option not supported [ 906.114681][T23488] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 906.607672][T23540] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5972'. [ 906.657261][T23544] netlink: 'syz.5.5974': attribute type 2 has an invalid length. [ 906.718481][T23540] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5972'. [ 906.888781][T23565] tipc: Failed to remove unknown binding: 66,0,0/2099199:3881725476/3881725477 [ 906.948042][ T3389] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 906.956476][ T3389] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 907.084726][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 907.114843][T23570] loop6: detected capacity change from 0 to 512 [ 907.174425][T23570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 907.227303][T23570] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 907.243977][T23590] lo speed is unknown, defaulting to 1000 [ 907.257274][T23570] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 907.277419][T23590] gre0 speed is unknown, defaulting to 1000 [ 907.340385][T23590] lo speed is unknown, defaulting to 1000 [ 907.357329][T23570] EXT4-fs (loop6): failed to initialize system zone (-117) [ 907.369012][T23598] SELinux: failed to load policy [ 907.376527][T23570] EXT4-fs (loop6): mount failed [ 908.089709][T23620] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6004'. [ 908.124635][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 908.131795][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 908.150618][T23620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6004'. [ 908.281421][T23641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6011'. [ 908.387484][T23646] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6012'. [ 908.420740][T23636] loop6: detected capacity change from 0 to 512 [ 908.447726][T23646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6012'. [ 908.449129][T23636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 908.470954][T23636] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.6010: iget: bad i_size value: 38620345925642 [ 908.483924][T23636] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 908.484360][T23636] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.6010: couldn't read orphan inode 15 (err -117) [ 908.493616][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 908.493668][ C0] EXT4-fs (loop6): initial error at time 1781763957: ext4_orphan_get:1399: inode 15 [ 908.493780][ C0] EXT4-fs (loop6): last error at time 1781763957: ext4_orphan_get:1399: inode 15 [ 908.531902][T23636] loop6: lost filesystem error report for type 5 error -117 [ 908.534707][T23636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 908.643057][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 908.643075][ T28] audit: type=1400 audit(1781763957.314:4370): avc: denied { setopt } for pid=23662 comm="syz.3.6018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 908.685496][ T28] audit: type=1326 audit(1781763957.354:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23634 comm="syz.6.6010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0735b8ce59 code=0x7ffc0000 [ 908.713013][ T28] audit: type=1326 audit(1781763957.354:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23634 comm="syz.6.6010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0735b8cbc2 code=0x7ffc0000 [ 908.738786][ T28] audit: type=1326 audit(1781763957.354:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23634 comm="syz.6.6010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0735b8cc57 code=0x7ffc0000 [ 908.765253][ T28] audit: type=1326 audit(1781763957.354:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23634 comm="syz.6.6010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0735b49b51 code=0x7ffc0000 [ 908.794647][ T28] audit: type=1326 audit(1781763957.354:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23634 comm="syz.6.6010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0735b8dc49 code=0x7ffc0000 [ 908.894416][ T28] audit: type=1326 audit(1781763957.354:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23634 comm="syz.6.6010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0735b49bbb code=0x7ffc0000 [ 909.004017][ T28] audit: type=1326 audit(1781763957.354:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23634 comm="syz.6.6010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0735b8ce59 code=0x7ffc0000 [ 909.123130][ T28] audit: type=1326 audit(1781763957.354:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23634 comm="syz.6.6010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0735b8ce59 code=0x7ffc0000 [ 909.174655][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 909.181664][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 909.442640][ T28] audit: type=1326 audit(1781763957.354:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23634 comm="syz.6.6010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f0735b492ac code=0x7ffc0000 [ 909.710023][ T3664] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:20: bg 0: block 5: invalid block bitmap [ 909.764502][ T3664] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 340 with error 28 [ 909.814590][ T3664] EXT4-fs (loop6): This should not happen!! Data will be lost [ 909.814590][ T3664] [ 909.847057][ T3664] EXT4-fs (loop6): Total free blocks count 0 [ 909.869594][ T3664] EXT4-fs (loop6): Free/Dirty block details [ 909.887240][ T3664] EXT4-fs (loop6): free_blocks=0 [ 909.919763][ T3664] EXT4-fs (loop6): dirty_blocks=344 [ 909.926764][ T3664] EXT4-fs (loop6): Block reservation details [ 909.943342][ T3664] EXT4-fs (loop6): i_reserved_data_blocks=344 [ 909.966469][T19172] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 909.990464][T19172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.150755][T23699] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6028'. [ 910.204650][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 910.211838][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 910.246370][T23706] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6028'. [ 910.288000][T23703] ipvlan2: entered promiscuous mode [ 910.302325][T23703] bridge0: port 4(ipvlan2) entered blocking state [ 910.324994][T23703] bridge0: port 4(ipvlan2) entered disabled state [ 910.346797][T23703] ipvlan2: entered allmulticast mode [ 910.369015][T23703] bridge0: entered allmulticast mode [ 910.389154][T23703] ipvlan2: left allmulticast mode [ 910.403107][T23703] bridge0: left allmulticast mode [ 910.452599][T23717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.463141][T23717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.798256][T23737] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6047'. [ 911.244656][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 911.251690][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 911.984073][T23760] syzkaller0: left promiscuous mode [ 912.002915][T23760] syzkaller0: left allmulticast mode [ 912.288481][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 913.045202][T23848] tipc: Enabled bearer , priority 0 [ 913.076418][T23848] syzkaller0: entered promiscuous mode [ 913.082379][T23848] syzkaller0: entered allmulticast mode [ 913.089027][T23848] tipc: Resetting bearer [ 913.203897][T23847] tipc: Resetting bearer [ 913.234266][T23847] tipc: Disabling bearer [ 913.324618][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 913.331699][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 913.586846][T23886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.636798][T23891] ip_vti0: entered promiscuous mode [ 913.643737][T23891] __nla_validate_parse: 2 callbacks suppressed [ 913.643753][T23891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6078'. [ 913.975179][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 913.975197][ T28] audit: type=1400 audit(1781763962.644:4432): avc: denied { mount } for pid=23897 comm="syz.3.6083" name="/" dev="configfs" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 914.018946][ T28] audit: type=1400 audit(1781763962.684:4433): avc: denied { read } for pid=23897 comm="syz.3.6083" name="/" dev="configfs" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 914.056320][ T28] audit: type=1400 audit(1781763962.684:4434): avc: denied { open } for pid=23897 comm="syz.3.6083" path="/1243/file0" dev="configfs" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 914.080699][ T28] audit: type=1400 audit(1781763962.694:4435): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 914.109973][ T28] audit: type=1400 audit(1781763962.784:4436): avc: denied { shutdown } for pid=23910 comm="syz.3.6087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 914.203090][ T28] audit: type=1400 audit(1781763962.874:4437): avc: denied { read } for pid=3024 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 914.281738][ T28] audit: type=1400 audit(1781763962.884:4438): avc: denied { search } for pid=3024 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.303489][T23924] loop3: detected capacity change from 0 to 512 [ 914.360830][ T28] audit: type=1400 audit(1781763962.884:4439): avc: denied { search } for pid=3024 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.365986][T23930] bridge0: entered allmulticast mode [ 914.382587][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 914.394872][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 914.419731][ T28] audit: type=1400 audit(1781763962.884:4440): avc: denied { search } for pid=3024 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.441871][ T28] audit: type=1400 audit(1781763962.884:4441): avc: denied { read } for pid=3024 comm="dhcpcd" name="n39" dev="tmpfs" ino=28408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 914.502766][T23924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.815101][T23956] --map-set only usable from mangle table [ 915.021046][T23966] loop0: detected capacity change from 0 to 512 [ 915.085804][T23966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.180197][T23966] ext4 filesystem being mounted at /1151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 915.211029][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.297093][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.414663][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 915.421637][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 915.610268][T23979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6108'. [ 915.816249][T23982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6108'. [ 916.021333][T23995] syz_tun: entered allmulticast mode [ 916.046765][T23995] pimreg: entered allmulticast mode [ 916.069241][T23994] syz_tun: left allmulticast mode [ 916.370394][T24013] lo speed is unknown, defaulting to 1000 [ 916.386602][T24013] gre0 speed is unknown, defaulting to 1000 [ 916.462426][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 916.575895][T24013] lo speed is unknown, defaulting to 1000 [ 916.844680][ T8739] IPVS: ip_vs_send_async error -101 [ 917.149224][T24029] netlink: 'syz.0.6123': attribute type 1 has an invalid length. [ 917.155970][T24027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6122'. [ 917.235489][T24035] macvlan3: entered promiscuous mode [ 917.242923][T24035] macvlan3: entered allmulticast mode [ 917.251355][T24035] bond4: (slave macvlan3): Opening slave failed [ 917.314376][T24047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6122'. [ 917.484656][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 917.487859][ T3388] kernel write not supported for file bpf-prog (pid: 3388 comm: kworker/0:4) [ 917.491686][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 918.524613][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 918.531705][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 919.574661][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 919.581685][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 919.985637][T24223] loop0: detected capacity change from 0 to 512 [ 919.986738][T24242] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6168'. [ 920.024790][T24239] loop6: detected capacity change from 0 to 512 [ 920.090077][T24242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6168'. [ 920.110582][T24223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.186387][T24223] ext4 filesystem being mounted at /1163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 920.348639][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 920.348655][ T28] audit: type=1400 audit(1781763969.024:4449): avc: denied { connect } for pid=24260 comm="syz.6.6174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 920.388522][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.439575][T24264] lo speed is unknown, defaulting to 1000 [ 920.446036][T24264] gre0 speed is unknown, defaulting to 1000 [ 920.453806][T24268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.463754][T24268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.500726][T24264] lo speed is unknown, defaulting to 1000 [ 920.577309][T24272] syzkaller0: entered promiscuous mode [ 920.582966][T24272] syzkaller0: entered allmulticast mode [ 920.616169][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 920.623635][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 920.730106][T24276] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6179'. [ 920.859174][T24279] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6179'. [ 921.217513][T24291] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6184'. [ 921.367606][T24303] lo speed is unknown, defaulting to 1000 [ 921.373856][T24303] gre0 speed is unknown, defaulting to 1000 [ 921.434386][T24303] lo speed is unknown, defaulting to 1000 [ 921.577522][T24309] loop3: detected capacity change from 0 to 512 [ 921.644674][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 921.663382][T24309] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 921.674770][T24309] EXT4-fs (loop3): orphan cleanup on readonly fs [ 921.685072][T24309] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 921.694200][T24309] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 921.733393][T24309] EXT4-fs error (device loop3): ext4_acquire_dquot:7032: comm syz.3.6192: Failed to acquire dquot type 1 [ 921.749181][T24309] loop3: lost filesystem error report for type 5 error -5 [ 921.754016][T24309] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6192: bg 0: block 40: padding at end of block bitmap is not set [ 921.761243][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 921.761264][ C1] EXT4-fs (loop3): initial error at time 1781763970: ext4_acquire_dquot:7032 [ 921.761285][ C1] EXT4-fs (loop3): last error at time 1781763970: ext4_acquire_dquot:7032 [ 921.804820][T24309] loop3: lost filesystem error report for type 5 error -117 [ 921.805248][T24309] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 921.828709][T24309] loop3: lost filesystem error report for type 5 error -117 [ 921.830610][T24309] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.6192: data will be lost [ 921.849312][T24309] EXT4-fs (loop3): 1 truncate cleaned up [ 921.855976][T24309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 921.910132][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.130841][T24323] loop3: detected capacity change from 0 to 512 [ 922.145131][ T28] audit: type=1400 audit(1781763970.814:4450): avc: denied { write } for pid=24326 comm="syz.1.6198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 922.153467][T24323] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 922.224070][T24323] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 922.264926][T24323] EXT4-fs (loop3): 1 truncate cleaned up [ 922.316590][T24323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.373667][T24330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.385720][T24330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.424152][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.631128][T24342] loop3: detected capacity change from 0 to 512 [ 922.698052][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 922.710608][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 922.726989][T24342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 922.739626][T24342] ext4 filesystem being mounted at /1265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 922.788445][ T28] audit: type=1400 audit(1781763971.464:4451): avc: denied { write } for pid=24341 comm="syz.3.6203" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 922.858664][ T28] audit: type=1400 audit(1781763971.534:4452): avc: denied { write } for pid=24341 comm="syz.3.6203" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 922.899694][ T28] audit: type=1400 audit(1781763971.534:4453): avc: denied { mounton } for pid=24341 comm="syz.3.6203" path="/1265/file1/bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 923.048304][T24342] loop3: detected capacity change from 512 to 0 [ 923.059058][ C1] I/O error, dev loop3, sector 104 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 923.068944][T24347] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 923.083901][T24347] EXT4-fs error (device loop3): ext4_write_dquot:7012: comm syz.3.6203: Failed to commit dquot type 0 [ 923.101351][T24347] buffer_io_error: 57 callbacks suppressed [ 923.101372][T24347] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 923.116214][T24347] EXT4-fs (loop3): I/O error while writing superblock [ 923.132438][T24347] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 923.141206][T24347] EXT4-fs error (device loop3): ext4_write_dquot:7012: comm syz.3.6203: Failed to commit dquot type 1 [ 923.152932][T24347] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 923.161772][T24347] EXT4-fs (loop3): I/O error while writing superblock [ 923.179655][T24347] EXT4-fs error (device loop3): ext4_get_inode_loc:5023: inode #18: block 37: comm syz.3.6203: unable to read itable block [ 923.196609][T24347] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 923.205100][T24347] EXT4-fs (loop3): I/O error while writing superblock [ 923.211983][T24347] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: IO failure [ 923.226769][T24347] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 923.236501][T24347] EXT4-fs (loop3): I/O error while writing superblock [ 923.259529][T24347] EXT4-fs error (device loop3): ext4_ext_truncate:4557: inode #18: comm syz.3.6203: mark_inode_dirty error [ 923.292742][T24347] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 923.335246][T24347] EXT4-fs (loop3): I/O error while writing superblock [ 923.344169][T24347] EXT4-fs error (device loop3): ext4_get_inode_loc:5023: inode #18: block 37: comm syz.3.6203: unable to read itable block [ 923.364506][T24347] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 923.372979][T24347] EXT4-fs (loop3): I/O error while writing superblock [ 923.379893][T24347] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: IO failure [ 923.396054][T24382] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6216'. [ 923.406892][T24371] loop6: detected capacity change from 0 to 512 [ 923.417138][T24347] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 923.431822][T24347] EXT4-fs (loop3): I/O error while writing superblock [ 923.439174][T24347] EXT4-fs error (device loop3): ext4_truncate:4690: inode #18: comm syz.3.6203: mark_inode_dirty error [ 923.450846][T24347] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 923.474342][T24347] EXT4-fs (loop3): I/O error while writing superblock [ 923.488761][T24371] EXT4-fs: Ignoring removed nobh option [ 923.508860][ T3307] EXT4-fs error (device loop3): ext4_get_inode_loc:5023: inode #2: block 35: comm syz-executor: unable to read itable block [ 923.526268][ T3307] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 923.538041][ T3307] EXT4-fs (loop3): I/O error while writing superblock [ 923.546808][ T3307] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: IO failure [ 923.574664][T24371] EXT4-fs (loop6): orphan cleanup on readonly fs [ 923.585353][ T3307] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 923.603436][T24371] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.6213: EA inode hash validation failed [ 923.725137][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 923.739122][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 923.778824][T24371] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 923.826248][T24371] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.6213: corrupted inode contents [ 923.863356][T24371] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 923.875473][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 923.899659][ C0] EXT4-fs (loop6): initial error at time 1781763973: ext4_do_update_inode:5690: inode 15 [ 923.913499][ C0] EXT4-fs (loop6): last error at time 1781763973: ext4_do_update_inode:5690: inode 15 [ 923.929967][T24397] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 923.945798][T24371] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #15: comm syz.6.6213: mark_inode_dirty error [ 923.964488][T24371] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 924.027833][T24371] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.6213: corrupted inode contents [ 924.066092][T24371] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 924.066293][T24371] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #15: comm syz.6.6213: mark_inode_dirty error [ 924.108989][T24371] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 924.112889][T24371] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #15: comm syz.6.6213: mark inode dirty (error -117) [ 924.137910][T24371] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 924.139330][T24371] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 924.161733][T24371] EXT4-fs (loop6): 1 orphan inode deleted [ 924.188210][T24371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 924.286468][ T3389] page_pool_release_retry() stalled pool shutdown: id 51, 50 inflight 363 sec [ 924.318819][T19172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.761620][T24417] netlink: 'syz.6.6229': attribute type 1 has an invalid length. [ 924.774629][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 924.775565][ T28] audit: type=1400 audit(1781763974.445:4454): avc: denied { mounton } for pid=24418 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 924.781643][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 924.825808][T24417] netlink: 'syz.6.6229': attribute type 1 has an invalid length. [ 924.942196][T24435] syzkaller0: entered promiscuous mode [ 924.948882][T24435] syzkaller0: entered allmulticast mode [ 924.995384][T24418] lo speed is unknown, defaulting to 1000 [ 925.045213][T24418] gre0 speed is unknown, defaulting to 1000 [ 925.109995][T24418] lo speed is unknown, defaulting to 1000 [ 925.127163][T24449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6239'. [ 925.161422][T24451] loop6: detected capacity change from 0 to 256 [ 925.213444][T24451] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 925.304141][T24430] loop0: detected capacity change from 0 to 512 [ 925.337490][T24430] EXT4-fs: Ignoring removed nobh option [ 925.353467][T24460] FAT-fs (loop6): error, invalid FAT chain (i_pos 196, last_block 8200) [ 925.362249][T24460] FAT-fs (loop6): Filesystem has been set read-only [ 925.365770][T24459] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6243'. [ 925.398097][T24430] EXT4-fs (loop0): orphan cleanup on readonly fs [ 925.425232][T24430] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.6233: EA inode hash validation failed [ 925.429092][T24460] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2051) [ 925.443655][T24430] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.6233: corrupted inode contents [ 925.460720][T24430] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 925.463822][T24430] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.6233: mark_inode_dirty error [ 925.466618][T24418] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.473965][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 925.485355][T24418] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.485586][T24418] bridge_slave_0: entered allmulticast mode [ 925.486349][T24418] bridge_slave_0: entered promiscuous mode [ 925.493431][ C0] EXT4-fs (loop0): initial error at time 1781763976: ext4_do_update_inode:5690 [ 925.501068][T24418] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.501130][T24418] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.501304][T24418] bridge_slave_1: entered allmulticast mode [ 925.501867][T24418] bridge_slave_1: entered promiscuous mode [ 925.508471][ C0] : inode 15 [ 925.527346][T24418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.533592][ C0] [ 925.542001][T24418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.549285][ C0] EXT4-fs (loop0): last error at time 1781763976: ext4_do_update_inode:5690 [ 925.565899][T24418] team0: Port device team_slave_0 added [ 925.566506][ C0] : inode 15 [ 925.577011][T24418] team0: Port device team_slave_1 added [ 925.578242][ C0] [ 925.597870][T24418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.602203][T24468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6243'. [ 925.603554][T24418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.620363][T24430] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 925.622664][T24418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.623494][T24418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.623509][T24418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.623539][T24418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.641225][T24418] hsr_slave_0: entered promiscuous mode [ 925.692518][T24430] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.6233: corrupted inode contents [ 925.726552][T24418] hsr_slave_1: entered promiscuous mode [ 925.753396][T24430] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 925.755059][T24418] debugfs: 'hsr0' already exists in 'hsr' [ 925.770612][T24430] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.6233: mark_inode_dirty error [ 925.773984][T24418] Cannot create hsr debugfs directory [ 925.784010][T24430] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 925.799607][T24430] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.6233: mark inode dirty (error -117) [ 925.820326][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 925.831256][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 925.865278][T24430] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 925.869665][T24430] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 925.896094][T24430] EXT4-fs (loop0): 1 orphan inode deleted [ 925.909333][T24430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 925.932408][T23825] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 925.976500][T24484] netlink: 'syz.1.6257': attribute type 1 has an invalid length. [ 926.003487][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.004465][T24484] bond2: entered promiscuous mode [ 926.018260][T24484] 8021q: adding VLAN 0 to HW filter on device bond2 [ 926.028677][T23825] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.046935][T24485] syzkaller0: entered promiscuous mode [ 926.050209][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 926.050263][ T28] audit: type=1400 audit(1781763976.729:4456): avc: denied { create } for pid=24483 comm="syz.1.6257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 926.056475][T24485] syzkaller0: entered allmulticast mode [ 926.060225][ T28] audit: type=1400 audit(1781763976.739:4457): avc: denied { write } for pid=24483 comm="syz.1.6257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 926.102149][T24418] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 926.114164][T24418] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 926.122143][T24418] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 926.131409][T24418] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 926.179605][T24490] bond2: (slave bridge4): making interface the new active one [ 926.187415][T24490] bridge4: entered promiscuous mode [ 926.194164][T24490] bridge4: left promiscuous mode [ 926.202747][T24418] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 926.211645][T24418] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 926.220116][T24418] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 926.228879][T24418] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 926.237254][T23825] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.290263][T24418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.301167][T24504] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6251'. [ 926.312877][T24502] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24502 comm=syz.6.6249 [ 926.330310][T24418] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.340398][T23825] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.377263][T21492] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.384398][T21492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.400994][T23821] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.408146][T23821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.552140][ T28] audit: type=1400 audit(1781763977.229:4458): avc: denied { read } for pid=24515 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 926.578701][ T28] audit: type=1400 audit(1781763977.229:4459): avc: denied { read open } for pid=24515 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 926.615170][ T28] audit: type=1400 audit(1781763977.229:4460): avc: denied { getattr } for pid=24515 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 926.665782][T23825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.680775][T23825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.695199][T23825] bond0 (unregistering): Released all slaves [ 926.709981][T23825] bond1 (unregistering): Released all slaves [ 926.721285][T23825] bond2 (unregistering): Released all slaves [ 926.727737][ T28] audit: type=1400 audit(1781763977.399:4461): avc: denied { write } for pid=24513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 926.740597][T23825] bond3 (unregistering): Released all slaves [ 926.772005][T23825] bond4 (unregistering): Released all slaves [ 926.775409][ T28] audit: type=1400 audit(1781763977.399:4462): avc: denied { add_name } for pid=24513 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 926.792784][T23825] bond5 (unregistering): Released all slaves [ 926.810850][ T28] audit: type=1400 audit(1781763977.399:4463): avc: denied { create } for pid=24513 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 926.845540][ T28] audit: type=1400 audit(1781763977.399:4464): avc: denied { write } for pid=24513 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth9.link" dev="tmpfs" ino=28931 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 926.853184][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 926.872425][ T28] audit: type=1400 audit(1781763977.399:4465): avc: denied { append } for pid=24513 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" dev="tmpfs" ino=28931 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 926.916385][ T3024] 8021q: adding VLAN 0 to HW filter on device eth9 [ 927.029450][T23825] tipc: Disabling bearer [ 927.039553][T23825] tipc: Left network mode [ 927.075503][T24547] syz.1.6261 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 927.115122][T24551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6262'. [ 927.161907][T24551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6262'. [ 927.198526][T24551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6262'. [ 927.210364][T24551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6262'. [ 927.246046][T23825] hsr_slave_0: left promiscuous mode [ 927.277312][T23825] hsr_slave_1: left promiscuous mode [ 927.290549][T23825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.336943][T24580] loop6: detected capacity change from 0 to 1024 [ 927.372331][T24580] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 927.430341][T19172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.476988][T23821] smc: removing ib device sz1 [ 927.487931][T24418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.502465][ T3024] 8021q: adding VLAN 0 to HW filter on device eth11 [ 927.801426][T24620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6270'. [ 927.848136][T24418] veth0_vlan: entered promiscuous mode [ 927.867813][ T3024] 8021q: adding VLAN 0 to HW filter on device eth10 [ 927.884641][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 927.891667][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 927.905711][T24418] veth1_vlan: entered promiscuous mode [ 927.933580][T24418] veth0_macvtap: entered promiscuous mode [ 927.959142][T24418] veth1_macvtap: entered promiscuous mode [ 927.977195][T24632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6273'. [ 928.005694][T24418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.029615][T24636] loop6: detected capacity change from 0 to 512 [ 928.038979][T24418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.063321][T23821] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.072610][T24636] EXT4-fs: Ignoring removed bh option [ 928.081659][T23821] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.082342][T24636] EXT4-fs: inline encryption not supported [ 928.102073][T24636] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 928.116671][T23821] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.132462][T24636] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 928.139618][T23821] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.167153][T23825] IPVS: stop unused estimator thread 0... [ 928.188156][T24636] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6275: bg 0: block 248: padding at end of block bitmap is not set [ 928.215331][T24636] loop6: lost filesystem error report for type 5 error -117 [ 928.217133][T24636] EXT4-fs error (device loop6): ext4_acquire_dquot:7032: comm syz.6.6275: Failed to acquire dquot type 1 [ 928.224557][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 928.224579][ C0] EXT4-fs (loop6): last error at time 1781763978: ext4_validate_block_bitmap:441 [ 928.258477][T24636] loop6: lost filesystem error report for type 5 error -28 [ 928.263344][T24636] EXT4-fs (loop6): 1 truncate cleaned up [ 928.285699][T24636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 928.335574][ T3024] 8021q: adding VLAN 0 to HW filter on device eth12 [ 928.530100][T19172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 928.920938][T24674] lo speed is unknown, defaulting to 1000 [ 928.928311][T24674] gre0 speed is unknown, defaulting to 1000 [ 928.934631][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 928.952695][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 929.760278][T24698] loop0: detected capacity change from 0 to 512 [ 929.803998][T24702] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.811625][T24702] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.816333][T24698] EXT4-fs: Ignoring removed nobh option [ 929.861657][T24695] loop6: detected capacity change from 0 to 512 [ 929.894467][T24698] EXT4-fs (loop0): orphan cleanup on readonly fs [ 929.939460][T24698] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.6289: EA inode hash validation failed [ 929.959140][T24695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 929.979247][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 929.990596][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 930.049113][T24698] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.6289: corrupted inode contents [ 930.091219][T24698] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 930.097188][T24698] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.6289: mark_inode_dirty error [ 930.107490][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 930.107550][ C1] EXT4-fs (loop0): initial error at time 1781763981: ext4_do_update_inode:5690: inode 15 [ 930.108920][ C1] EXT4-fs (loop0): last error at time 1781763981: ext4_do_update_inode:5690: inode 15 [ 930.184428][T24695] EXT4-fs: journaled quota format not specified [ 930.191743][T24698] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 930.216730][T24698] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.6289: corrupted inode contents [ 930.246704][T24698] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 930.247034][T24698] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.6289: mark_inode_dirty error [ 930.306934][T24698] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 930.308400][T24698] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.6289: mark inode dirty (error -117) [ 930.358351][T24724] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6298'. [ 930.384981][T24698] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 930.392449][T24698] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 930.470346][T24724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6298'. [ 930.486508][T24698] EXT4-fs (loop0): 1 orphan inode deleted [ 930.514078][T24698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 930.764911][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.852618][T24748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24748 comm=syz.7.6306 [ 930.921942][T24756] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24756 comm=syz.7.6306 [ 930.931529][T24743] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.005378][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 931.012830][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 931.173060][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 931.173104][ T28] audit: type=1326 audit(1781763982.849:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24757 comm="syz.5.6309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff3bbb6d68e code=0x7ffc0000 [ 931.184616][T24743] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.223784][T24764] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6310'. [ 931.229447][ T28] audit: type=1326 audit(1781763982.889:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24757 comm="syz.5.6309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff3bbbacc87 code=0x7ffc0000 [ 931.300155][ T28] audit: type=1326 audit(1781763982.889:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24757 comm="syz.5.6309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3bbb6d68e code=0x7ffc0000 [ 931.360467][T24764] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6310'. [ 931.364149][ T28] audit: type=1326 audit(1781763982.889:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24757 comm="syz.5.6309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff3bbb6d68e code=0x7ffc0000 [ 931.447446][ T28] audit: type=1326 audit(1781763982.889:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24757 comm="syz.5.6309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bbbace59 code=0x7ffc0000 [ 931.522132][ T28] audit: type=1326 audit(1781763982.889:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24757 comm="syz.5.6309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bbbace59 code=0x7ffc0000 [ 931.578219][ T28] audit: type=1326 audit(1781763982.939:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24757 comm="syz.5.6309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bbbace59 code=0x7ffc0000 [ 931.634510][T24743] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.649753][ T28] audit: type=1326 audit(1781763982.939:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24757 comm="syz.5.6309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bbbace59 code=0x7ffc0000 [ 931.655573][T24745] loop0: detected capacity change from 0 to 512 [ 931.708988][ T28] audit: type=1326 audit(1781763982.939:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24757 comm="syz.5.6309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3bbbace59 code=0x7ffc0000 [ 931.752173][ T28] audit: type=1326 audit(1781763982.939:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24757 comm="syz.5.6309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bbbace59 code=0x7ffc0000 [ 931.787314][T24743] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.870146][T23821] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.878694][T23821] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.895398][T23821] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.926992][T23821] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.054621][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 932.250207][T24745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 932.294826][T24745] ext4 filesystem being mounted at /1181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 932.556005][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.597558][T24798] team0: Device macvlan2 failed to change mtu [ 932.643209][T24787] loop6: detected capacity change from 0 to 512 [ 932.643241][T24800] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24800 comm=syz.0.6321 [ 932.689099][T24787] EXT4-fs: Ignoring removed nobh option [ 932.718443][T24787] EXT4-fs (loop6): orphan cleanup on readonly fs [ 932.745411][T24787] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.6315: EA inode hash validation failed [ 932.764189][T24787] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.6315: corrupted inode contents [ 932.787442][T24802] loop0: detected capacity change from 0 to 512 [ 932.798015][T24787] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 932.799176][T24787] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #15: comm syz.6.6315: mark_inode_dirty error [ 932.810798][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 932.810958][ C0] EXT4-fs (loop6): initial error at time 1781763985: ext4_do_update_inode:5690: inode 15 [ 932.812678][ C0] EXT4-fs (loop6): last error at time 1781763985: ext4_do_update_inode:5690: inode 15 [ 932.883450][T24787] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 932.886727][T24787] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.6315: corrupted inode contents [ 932.923483][T24787] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 932.944287][T24787] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #15: comm syz.6.6315: mark_inode_dirty error [ 932.970622][T24802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 932.996236][T24802] ext4 filesystem being mounted at /1184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 933.005410][T24787] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 933.024989][T24787] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #15: comm syz.6.6315: mark inode dirty (error -117) [ 933.088379][T24787] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 933.104674][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 933.129820][T24787] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 933.132792][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 933.145769][T24787] EXT4-fs (loop6): 1 orphan inode deleted [ 933.174434][T24802] EXT4-fs (loop0): resizing filesystem from 128 to 1 blocks [ 933.189903][T24802] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 933.201709][T24787] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 933.246284][T24809] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.274185][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.495388][T19172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.573898][T24809] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.576207][T24827] loop6: detected capacity change from 0 to 512 [ 933.651918][T24827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.664828][T24827] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 933.715384][T24809] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.775186][T24842] netlink: 'syz.5.6338': attribute type 1 has an invalid length. [ 933.799135][T24842] 8021q: adding VLAN 0 to HW filter on device bond4 [ 933.839949][T24809] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.124651][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 934.131729][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 934.372122][T24842] vlan2: entered allmulticast mode [ 934.378923][T24842] bond4: entered allmulticast mode [ 934.431551][T21494] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.481916][T21494] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.507200][T21494] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.556667][T21494] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.697013][T24857] ipvlan2: entered promiscuous mode [ 934.720641][T24857] bridge0: port 3(ipvlan2) entered blocking state [ 934.760325][T24857] bridge0: port 3(ipvlan2) entered disabled state [ 934.787904][T24857] ipvlan2: entered allmulticast mode [ 934.803542][T24850] loop0: detected capacity change from 0 to 512 [ 934.816687][T24857] bridge0: entered allmulticast mode [ 934.834162][T24857] ipvlan2: left allmulticast mode [ 934.868210][T24857] bridge0: left allmulticast mode [ 935.007081][T24850] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 935.092086][T24850] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 935.137038][T24859] syzkaller0: entered promiscuous mode [ 935.161192][T24859] syzkaller0: entered allmulticast mode [ 935.166973][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 935.167055][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 935.566027][T19172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.596361][T24871] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6347'. [ 935.598253][T24874] syzkaller0: entered promiscuous mode [ 935.611036][T24874] syzkaller0: entered allmulticast mode [ 935.652880][T24871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6347'. [ 935.888040][T24887] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6352'. [ 936.204656][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 936.211666][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 937.064105][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 937.064133][ T28] audit: type=1400 audit(1781763990.732:4574): avc: denied { write } for pid=24914 comm="syz.1.6362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 937.139328][T24913] syzkaller0: entered promiscuous mode [ 937.150597][T24913] syzkaller0: entered allmulticast mode [ 937.163734][T24918] netlink: 'syz.1.6363': attribute type 1 has an invalid length. [ 937.189944][T24918] 8021q: adding VLAN 0 to HW filter on device bond3 [ 937.224789][T24918] vlan3: entered allmulticast mode [ 937.230043][T24918] bond3: entered allmulticast mode [ 937.244688][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 937.352217][T24925] loop6: detected capacity change from 0 to 512 [ 937.371133][T24925] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 937.413091][T24925] EXT4-fs (loop6): 1 truncate cleaned up [ 937.431501][T24925] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.694439][T19172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.907685][T24947] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6373'. [ 937.993661][T24947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6373'. [ 938.284920][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 938.292109][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 938.481783][ T28] audit: type=1400 audit(1781763992.152:4575): avc: denied { write } for pid=24965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 938.527114][ T28] audit: type=1400 audit(1781763992.202:4576): avc: denied { write } for pid=24982 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 939.344595][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 939.363043][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 939.376747][T25002] loop6: detected capacity change from 0 to 512 [ 939.385339][T24999] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6386'. [ 939.387532][T25002] EXT4-fs: Ignoring removed nobh option [ 939.499363][T25002] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #3: comm syz.6.6384: corrupted inode contents [ 939.514622][T25002] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 939.517443][T25002] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #3: comm syz.6.6384: mark_inode_dirty error [ 939.526584][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 939.526608][ C0] EXT4-fs (loop6): initial error at time 1781763993: ext4_do_update_inode:5690: inode 3 [ 939.526656][ C0] EXT4-fs (loop6): last error at time 1781763993: ext4_do_update_inode:5690: inode 3 [ 939.564008][T25002] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 939.566120][T25005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6386'. [ 939.584754][T25002] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #3: comm syz.6.6384: corrupted inode contents [ 939.604757][T25002] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 939.604938][T25002] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.6384: mark_inode_dirty error [ 939.625520][ T28] audit: type=1400 audit(1781763993.292:4577): avc: denied { write } for pid=25000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 939.644000][T25002] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 939.648949][ T28] audit: type=1400 audit(1781763993.312:4578): avc: denied { write } for pid=25022 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 939.684783][T25002] Quota error (device loop6): write_blk: dquota write failed [ 939.692448][T25002] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 939.702559][T25002] EXT4-fs error (device loop6): ext4_acquire_dquot:7032: comm syz.6.6384: Failed to acquire dquot type 0 [ 939.714163][T25002] loop6: lost filesystem error report for type 5 error -117 [ 939.715097][T25002] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.6384: corrupted inode contents [ 939.734697][T25002] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 939.734905][T25002] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #16: comm syz.6.6384: mark_inode_dirty error [ 939.757722][T25002] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 939.757937][T25002] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.6384: corrupted inode contents [ 939.789486][T25002] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 939.790805][T25002] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.6384: mark_inode_dirty error [ 939.816993][T25002] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 939.817281][T25002] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.6384: corrupted inode contents [ 939.839239][T25002] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 939.839398][T25002] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 939.857511][T25002] loop6: lost filesystem error report for type 5 error -117 [ 939.857713][T25002] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.6384: corrupted inode contents [ 939.879092][T25002] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 939.879276][T25002] EXT4-fs error (device loop6): ext4_truncate:4690: inode #16: comm syz.6.6384: mark_inode_dirty error [ 939.910051][T25002] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 939.920354][T25002] loop6: lost filesystem error report for type 5 error -117 [ 939.920896][T25002] EXT4-fs (loop6): 1 truncate cleaned up [ 939.944876][T25002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 939.959572][T25002] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 939.973353][ T28] audit: type=1400 audit(1781763993.642:4579): avc: denied { write } for pid=25025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 940.010035][T25002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.034747][ T28] audit: type=1400 audit(1781763993.702:4580): avc: denied { write } for pid=25036 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 940.127257][ T28] audit: type=1326 audit(1781763993.802:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25043 comm="syz.1.6390" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f203379ce59 code=0x0 [ 940.374624][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 940.381653][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 940.914438][T25094] lo speed is unknown, defaulting to 1000 [ 940.934755][T25094] gre0 speed is unknown, defaulting to 1000 [ 940.962534][T25096] syzkaller0: entered promiscuous mode [ 940.968261][T25096] syzkaller0: entered allmulticast mode [ 941.058206][T25051] loop0: detected capacity change from 0 to 1024 [ 941.155113][T25051] EXT4-fs: Ignoring removed bh option [ 941.266950][T25103] loop6: detected capacity change from 0 to 128 [ 941.404674][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 941.411662][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 941.599828][T25113] syzkaller0: entered promiscuous mode [ 941.627415][T25113] syzkaller0: entered allmulticast mode [ 941.694674][T25051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 941.925997][T25051] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 942.003577][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.072783][T25135] syzkaller0: entered promiscuous mode [ 942.098296][T25135] syzkaller0: entered allmulticast mode [ 942.183712][ T28] kauditd_printk_skb: 246 callbacks suppressed [ 942.183729][ T28] audit: type=1326 audit(1781763995.852:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25127 comm="syz.5.6415" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3bbbace59 code=0x0 [ 942.253978][ T28] audit: type=1400 audit(1781763995.922:4829): avc: denied { mount } for pid=25139 comm="syz.0.6420" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 942.460187][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 942.501736][ T28] audit: type=1400 audit(1781763996.172:4830): avc: denied { append } for pid=25153 comm="syz.0.6425" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 942.705333][T25169] loop7: detected capacity change from 0 to 512 [ 942.730393][T25169] EXT4-fs: Ignoring removed nobh option [ 942.746023][T25169] EXT4-fs (loop7): orphan cleanup on readonly fs [ 942.759887][T25169] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.6430: EA inode hash validation failed [ 942.793239][T25169] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 942.799945][ T28] audit: type=1400 audit(1781763997.469:4831): avc: denied { search } for pid=25171 comm="syz.5.6431" name="/" dev="configfs" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 942.811740][T25169] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.6430: corrupted inode contents [ 942.850563][T25169] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #15: comm syz.7.6430: mark_inode_dirty error [ 942.863033][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 942.863421][ C0] EXT4-fs (loop7): initial error at time 1781763997: ext4_do_update_inode:5690: inode 15 [ 942.863763][ C0] EXT4-fs (loop7): last error at time 1781763997: ext4_do_update_inode:5690: inode 15 [ 942.898708][ T28] audit: type=1400 audit(1781763997.469:4832): avc: denied { search } for pid=25171 comm="syz.5.6431" name="/" dev="configfs" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 942.959704][T25174] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6432'. [ 942.982593][T25169] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.6430: corrupted inode contents [ 943.037815][T25169] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3001: inode #15: comm syz.7.6430: mark_inode_dirty error [ 943.065689][T25169] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3004: inode #15: comm syz.7.6430: mark inode dirty (error -117) [ 943.106547][T25174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6432'. [ 943.119410][T25169] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117) [ 943.132877][T25169] EXT4-fs (loop7): 1 orphan inode deleted [ 943.320387][T25169] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 943.466275][T25189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6436'. [ 943.484605][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 943.491127][T25189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6436'. [ 943.491584][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 943.526911][T24418] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.597598][ T28] audit: type=1400 audit(1781763998.279:4833): avc: denied { listen } for pid=25192 comm="syz.7.6437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 943.676748][T25201] loop6: detected capacity change from 0 to 512 [ 943.685779][T25201] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 943.789615][T25201] EXT4-fs (loop6): 1 truncate cleaned up [ 943.809167][T25201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 943.815678][T25209] loop0: detected capacity change from 0 to 4096 [ 944.229473][T19172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.261148][T25217] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6446'. [ 944.274173][T25209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 944.300847][ T28] audit: type=1400 audit(1781763998.979:4834): avc: denied { write } for pid=25208 comm="syz.0.6444" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 944.378551][T25217] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6446'. [ 944.524632][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 944.531730][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 944.622242][T25232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6451'. [ 944.773026][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.784791][T25235] tipc: Enabling of bearer rejected, failed to enable media [ 945.564652][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 945.571665][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 945.636097][T25272] tipc: Enabled bearer , priority 0 [ 946.091361][T25296] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6473'. [ 946.344268][T25308] syz_tun (unregistering): left allmulticast mode [ 946.552892][T25316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6480'. [ 946.623308][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 946.631361][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 946.663888][ T28] audit: type=1400 audit(1781764001.339:4835): avc: denied { ioctl } for pid=25325 comm="syz.6.6485" path="socket:[69365]" dev="sockfs" ino=69365 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 946.669072][T23821] Bluetooth: hci0: Frame reassembly failed (-84) [ 946.831932][T25333] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.6496'. [ 946.849734][ T28] audit: type=1400 audit(1781764001.519:4836): avc: denied { setopt } for pid=25332 comm="syz.5.6496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 946.869610][ T28] audit: type=1400 audit(1781764001.519:4837): avc: denied { write } for pid=25332 comm="syz.5.6496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 947.662111][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 947.767587][T25361] loop7: detected capacity change from 0 to 128 [ 947.781362][T25361] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 947.800856][T25361] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 947.821156][ T28] audit: type=1400 audit(1781764002.499:4838): avc: denied { write } for pid=25360 comm="syz.7.6499" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 947.848074][ T28] audit: type=1400 audit(1781764002.529:4839): avc: denied { unmount } for pid=25364 comm="syz.1.6500" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 947.904116][T25370] 9p: Bad value for 'rfdno' [ 947.924491][T24418] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 948.684615][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 948.691636][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 948.698931][ T3908] Bluetooth: hci0: command 0x1003 tx timeout [ 948.705094][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 948.711605][T25326] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 948.937543][T25411] veth1_to_bond: invalid flags given to default FDB implementation [ 949.003840][T25409] tipc: Enabled bearer , priority 10 [ 949.058543][ T28] audit: type=1400 audit(1781764003.739:4840): avc: denied { ioctl } for pid=25417 comm="syz.0.6522" path="socket:[69480]" dev="sockfs" ino=69480 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 949.177699][T25426] netlink: 'syz.0.6525': attribute type 1 has an invalid length. [ 949.219676][T25426] 8021q: adding VLAN 0 to HW filter on device bond5 [ 949.276935][T25432] bond5: (slave veth3): Enslaving as an active interface with a down link [ 949.301778][T25426] vlan4: entered allmulticast mode [ 949.350895][T25426] veth0_to_bond: entered allmulticast mode [ 949.357555][T25426] bond5: (slave vlan4): Opening slave failed [ 949.390439][T25439] lo speed is unknown, defaulting to 1000 [ 949.417585][T25439] gre0 speed is unknown, defaulting to 1000 [ 949.720070][T25448] __nla_validate_parse: 1 callbacks suppressed [ 949.720090][T25448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6535'. [ 949.734641][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 949.742372][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 949.906820][T25458] tipc: Enabling of bearer rejected, failed to enable media [ 950.061944][T25463] tipc: Enabling of bearer rejected, failed to enable media [ 950.764633][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 950.771646][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 950.936049][T25484] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6543'. [ 951.025358][T25484] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6543'. [ 951.773606][T25492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6546'. [ 951.798877][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811b1b1400: rx timeout, send abort [ 951.807346][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 951.814286][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 951.821259][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811b1b1400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 951.838870][ T28] audit: type=1400 audit(1781764006.519:4841): avc: denied { read } for pid=2966 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 951.847630][T25492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6546'. [ 951.861165][ T28] audit: type=1400 audit(1781764006.519:4842): avc: denied { search } for pid=2966 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 952.001441][T25498] syzkaller0: entered promiscuous mode [ 952.016284][T25498] syzkaller0: entered allmulticast mode [ 952.028368][ T28] audit: type=1400 audit(1781764006.519:4843): avc: denied { append } for pid=2966 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 952.033644][T25498] tipc: Started in network mode [ 952.050863][ T28] audit: type=1400 audit(1781764006.519:4844): avc: denied { open } for pid=2966 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 952.130325][T25497] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 952.147541][T25498] tipc: Node identity 1acc1d233552, cluster identity 4711 [ 952.164743][T25498] tipc: Enabled bearer , priority 0 [ 952.187388][T25502] tipc: Enabling of bearer rejected, failed to enable media [ 952.234609][ T28] audit: type=1400 audit(1781764006.519:4845): avc: denied { getattr } for pid=2966 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 952.262222][T25500] 8021q: adding VLAN 0 to HW filter on device bond6 [ 952.306177][T25495] tipc: Resetting bearer [ 952.334164][T25495] tipc: Disabling bearer [ 952.568171][T25522] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6556'. [ 952.590461][ T28] audit: type=1400 audit(1781764007.269:4846): avc: denied { read } for pid=25519 comm="syz.7.6555" lport=43340 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 952.666910][T25522] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6556'. [ 952.823862][T25541] syzkaller0: entered promiscuous mode [ 952.838467][T25541] syzkaller0: entered allmulticast mode [ 952.854662][T25543] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 952.871836][T25541] tipc: Enabled bearer , priority 0 [ 952.889301][T25540] tipc: Resetting bearer [ 952.898266][T25540] tipc: Disabling bearer [ 953.004672][T25549] syzkaller0: entered promiscuous mode [ 953.022553][ T28] audit: type=1400 audit(1781764007.699:4847): avc: denied { name_connect } for pid=25550 comm="syz.5.6565" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 953.024104][T25549] syzkaller0: entered allmulticast mode [ 953.098365][T25553] tipc: Enabling of bearer rejected, failed to enable media [ 953.195537][T25558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6567'. [ 953.780210][T25580] loop7: detected capacity change from 0 to 128 [ 955.006938][T25597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6581'. [ 955.234818][T25618] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6587'. [ 955.243986][T25618] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6587'. [ 955.253202][ T28] audit: type=1400 audit(1781764009.919:4848): avc: denied { watch } for pid=25616 comm="syz.0.6588" path="/1238/file0" dev="tmpfs" ino=6645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 955.292015][T25618] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6587'. [ 955.330453][T25620] lo speed is unknown, defaulting to 1000 [ 955.336618][T25620] gre0 speed is unknown, defaulting to 1000 [ 955.509163][T25626] tipc: Enabling of bearer rejected, already enabled [ 956.594093][T25652] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6602'. [ 956.702564][T25652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6602'. [ 956.750412][T25663] syzkaller0: entered promiscuous mode [ 956.762244][T25663] syzkaller0: entered allmulticast mode [ 956.785565][T25663] tipc: Started in network mode [ 956.797301][T25663] tipc: Node identity b6aec994bc24, cluster identity 4711 [ 956.820852][T25663] tipc: Enabled bearer , priority 0 [ 956.869989][T25662] tipc: Resetting bearer [ 956.893977][T25662] tipc: Disabling bearer [ 957.052738][ T28] audit: type=1400 audit(1781764011.729:4849): avc: denied { write } for pid=25679 comm="syz.6.6612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 957.226133][T25691] syzkaller0: entered promiscuous mode [ 957.231753][T25691] syzkaller0: entered allmulticast mode [ 957.383078][T25705] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6620'. [ 957.472477][T25710] syzkaller0: entered promiscuous mode [ 957.491917][T25710] syzkaller0: entered allmulticast mode [ 957.508914][T25705] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6620'. [ 957.580078][T25714] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6624'. [ 957.826317][T25720] syzkaller0: entered promiscuous mode [ 957.843518][T25720] syzkaller0: entered allmulticast mode [ 957.878506][T25722] loop7: detected capacity change from 0 to 128 [ 957.935264][T25722] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 957.952490][T25722] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 957.997297][T25722] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 958.094808][ T28] audit: type=1400 audit(1781764012.769:4850): avc: denied { execute_no_trans } for pid=25721 comm="syz.7.6627" path="/57/file0" dev="tmpfs" ino=316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 958.237197][T25731] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6631'. [ 958.739169][ T28] audit: type=1400 audit(1781764013.419:4851): avc: denied { read write } for pid=25766 comm="syz.6.6643" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 958.802122][ T28] audit: type=1400 audit(1781764013.419:4852): avc: denied { open } for pid=25766 comm="syz.6.6643" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 958.856069][ T28] audit: type=1400 audit(1781764013.449:4853): avc: denied { ioctl } for pid=25766 comm="syz.6.6643" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 959.137543][T25783] loop7: detected capacity change from 0 to 512 [ 959.158939][T25783] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 959.180435][T25783] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.6649: bad orphan inode 15 [ 959.220118][T25783] loop7: lost filesystem error report for type 5 error -117 [ 959.221743][T25783] ext4_test_bit(bit=14, block=18) = 1 [ 959.229121][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 959.229139][ C1] EXT4-fs (loop7): initial error at time 1781764013: ext4_orphan_get:1425 [ 959.229162][ C1] EXT4-fs (loop7): last error at time 1781764013: ext4_orphan_get:1425 [ 959.288821][T25783] is_bad_inode(inode)=0 [ 959.307573][T25783] NEXT_ORPHAN(inode)=1023 [ 959.328149][T25783] max_ino=32 [ 959.339088][T25783] i_nlink=0 [ 959.360277][T25783] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6649: bg 0: block 161: padding at end of block bitmap is not set [ 959.385073][T25783] loop7: lost filesystem error report for type 5 error -117 [ 959.385422][T25783] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 959.406332][T25783] loop7: lost filesystem error report for type 5 error -117 [ 959.407119][T25783] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.440291][T25783] ext2 filesystem being mounted at /65/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 959.495721][T24418] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.579867][T25792] IPVS: persistence engine module ip_vs_pe_€ not found [ 959.669718][T25797] tipc: Enabling of bearer rejected, failed to enable media [ 960.602643][T25822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 960.636316][T25842] syzkaller0: entered promiscuous mode [ 960.661768][T25842] syzkaller0: entered allmulticast mode [ 960.801135][T25852] __nla_validate_parse: 9 callbacks suppressed [ 960.801170][T25852] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6670'. [ 960.902977][T25852] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6670'. [ 961.001227][T25866] netlink: 'syz.1.6674': attribute type 12 has an invalid length. [ 961.057340][T25866] netlink: 'syz.1.6674': attribute type 29 has an invalid length. [ 961.073214][T25866] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6674'. [ 961.091575][T25866] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6674'. [ 961.096767][T25877] tipc: Failed to remove unknown binding: 66,0,0/2099199:868411979/868411981 [ 961.141008][T25877] tipc: Failed to remove unknown binding: 66,0,0/2099199:868411979/868411980 [ 961.244260][T25887] syzkaller0: entered promiscuous mode [ 961.249941][T25887] syzkaller0: entered allmulticast mode [ 961.578936][T25900] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6686'. [ 961.631824][T25900] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6686'. [ 962.429369][T25915] SET target dimension over the limit! [ 963.412493][T25926] vlan2: entered promiscuous mode [ 963.417886][T25926] bridge0: entered promiscuous mode [ 963.549175][T25930] syzkaller0: entered promiscuous mode [ 963.584204][T25930] syzkaller0: entered allmulticast mode [ 964.462407][T25955] tipc: Enabled bearer , priority 0 [ 964.483347][T25955] syzkaller0: entered promiscuous mode [ 964.489060][T25955] syzkaller0: entered allmulticast mode [ 964.498139][T25955] tipc: Resetting bearer [ 964.511024][T25954] tipc: Resetting bearer [ 964.521555][T25954] tipc: Disabling bearer [ 964.523156][ T28] audit: type=1400 audit(1781764019.199:4854): avc: denied { create } for pid=25959 comm="syz.1.6708" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 964.571234][ T28] audit: type=1400 audit(1781764019.219:4855): avc: denied { getopt } for pid=25949 comm="syz.7.6704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 964.784462][T25965] loop6: detected capacity change from 0 to 128 [ 964.817264][T25968] loop7: detected capacity change from 0 to 512 [ 964.859681][T25968] EXT4-fs: inline encryption not supported [ 964.893596][T25968] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 965.065124][T25968] EXT4-fs (loop7): failed to open journal device unknown-block(0,0) -6 [ 965.541113][ T28] audit: type=1400 audit(1781764019.229:4856): avc: denied { write } for pid=25959 comm="syz.1.6708" name="file0" dev="tmpfs" ino=7640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 965.563745][ T28] audit: type=1400 audit(1781764019.229:4857): avc: denied { open } for pid=25959 comm="syz.1.6708" path="/1451/file0" dev="tmpfs" ino=7640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 965.586871][ T28] audit: type=1400 audit(1781764019.229:4858): avc: denied { ioctl } for pid=25959 comm="syz.1.6708" path="/1451/file0" dev="tmpfs" ino=7640 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 965.633000][T25980] bond1: entered promiscuous mode [ 965.660173][T25980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 965.669338][ T28] audit: type=1400 audit(1781764020.199:4859): avc: denied { unlink } for pid=3300 comm="syz-executor" name="file0" dev="tmpfs" ino=7640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 965.704212][T25980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 965.711782][T25980] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 965.770093][T25982] xt_CT: You must specify a L4 protocol and not use inversions on it [ 965.803517][T25980] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 965.998507][T25992] syzkaller0: entered promiscuous mode [ 966.009741][T25992] syzkaller0: entered allmulticast mode [ 966.174852][T26006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6720'. [ 966.297184][T26014] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26014 comm=syz.7.6720 [ 966.349539][T26014] veth3: entered allmulticast mode [ 966.365548][T26014] bond2: (slave veth3): Enslaving as an active interface with an up link [ 966.415691][ T28] audit: type=1400 audit(1781764021.099:4860): avc: denied { read } for pid=26017 comm="syz.6.6722" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 966.460606][ T28] audit: type=1400 audit(1781764021.099:4861): avc: denied { open } for pid=26017 comm="syz.6.6722" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 966.544442][T26018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6722'. [ 966.660675][T26027] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6725'. [ 967.075258][T26034] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6726'. [ 967.257433][T26031] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6726'. [ 967.744042][ T28] audit: type=1400 audit(1781764022.419:4862): avc: denied { lock } for pid=26049 comm="syz.7.6731" path="socket:[72373]" dev="sockfs" ino=72373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 968.300399][ T28] audit: type=1400 audit(1781764022.959:4863): avc: denied { create } for pid=26059 comm="syz.7.6735" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 968.670863][T26077] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6741'. [ 968.777560][T26081] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26081 comm=syz.6.6741 [ 969.230415][T26081] veth3: entered allmulticast mode [ 969.245300][T26081] bond2: (slave veth3): Enslaving as an active interface with an up link [ 969.256719][T26085] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6743'. [ 969.304106][T26087] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6744'. [ 969.335119][T26087] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6744'. [ 969.367996][T26085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6743'. [ 969.377820][T26087] syzkaller0: entered promiscuous mode [ 969.399546][T26087] syzkaller0: entered allmulticast mode [ 969.877256][T26108] syzkaller0: entered promiscuous mode [ 969.890206][T26108] syzkaller0: entered allmulticast mode [ 970.512440][T26132] syzkaller0: entered promiscuous mode [ 970.524968][T26132] syzkaller0: entered allmulticast mode [ 970.588895][T26131] loop6: detected capacity change from 0 to 164 [ 970.789758][T26131] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 970.876685][T26140] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 971.402463][T26161] veth5: entered promiscuous mode [ 971.524316][T26165] loop7: detected capacity change from 0 to 2048 [ 971.602168][T26165] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 972.270683][T26181] syzkaller0: entered promiscuous mode [ 972.276253][T26181] syzkaller0: entered allmulticast mode [ 972.361946][T24418] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.531600][T26186] loop7: detected capacity change from 0 to 2048 [ 972.805431][T26198] syzkaller0: entered promiscuous mode [ 972.816999][T26198] syzkaller0: entered allmulticast mode [ 972.882128][ T28] audit: type=1400 audit(1781764027.559:4864): avc: denied { ioctl } for pid=26204 comm="syz.0.6784" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=72594 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 973.003330][T26208] __nla_validate_parse: 3 callbacks suppressed [ 973.003358][T26208] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6785'. [ 973.052121][T26211] syzkaller0: entered promiscuous mode [ 973.069131][T26211] syzkaller0: entered allmulticast mode [ 973.112768][T26208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6785'. [ 973.906734][ T28] audit: type=1400 audit(1781764028.539:4865): avc: denied { audit_write } for pid=26234 comm="syz.5.6795" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 973.957848][ T28] audit: type=1107 audit(1781764028.609:4866): pid=26234 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='^ñ¸É×èÙB3¶Êܑ݅؂bCŒ+fx:£Rê¾h|' [ 974.036817][T24511] lo speed is unknown, defaulting to 1000 [ 974.340588][T26257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6801'. [ 975.378048][T26275] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6807'. [ 975.439484][T26275] hsr_slave_0: left promiscuous mode [ 975.479314][T26275] hsr_slave_1: left promiscuous mode [ 975.879032][T26298] syzkaller0: entered promiscuous mode [ 975.909094][T26298] syzkaller0: entered allmulticast mode [ 976.066590][ T28] audit: type=1107 audit(1781764030.729:4867): pid=26305 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='^ñ¸É×èÙB3¶Êܑ݅؂bCŒ+fx:£Rê¾h|' [ 976.624542][T26318] loop7: detected capacity change from 0 to 1024 [ 976.635152][T26318] EXT4-fs: Ignoring removed bh option [ 976.671496][T26318] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 976.775038][T24418] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.030260][ T28] audit: type=1400 audit(1781764031.709:4868): avc: denied { write } for pid=26328 comm="syz.7.6823" path="socket:[73017]" dev="sockfs" ino=73017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 977.627190][T26346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6828'. [ 977.789027][T26359] syzkaller0: entered promiscuous mode [ 977.809065][T26359] syzkaller0: entered allmulticast mode [ 978.271645][T26369] netlink: 'syz.5.6834': attribute type 8 has an invalid length. [ 978.355179][T26369] netlink: 'syz.5.6834': attribute type 7 has an invalid length. [ 978.429100][T26369] netlink: 194488 bytes leftover after parsing attributes in process `syz.5.6834'. [ 978.450062][T26367] loop6: detected capacity change from 0 to 128 [ 980.485280][T26408] loop7: detected capacity change from 0 to 2048 [ 980.517715][T26408] EXT4-fs: quotafile must be on filesystem root [ 980.895460][T26413] syzkaller0: entered promiscuous mode [ 980.918881][T26413] syzkaller0: entered allmulticast mode [ 981.758803][ T28] audit: type=1400 audit(1781764036.439:4869): avc: denied { getopt } for pid=26436 comm="syz.1.6857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 983.728321][ T28] audit: type=1107 audit(1781764038.409:4870): pid=26486 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='^ñ¸É×èÙB3¶Êܑ݅؂bCŒ+fx:£Rê¾h|' [ 984.182393][ T28] audit: type=1400 audit(1781764038.859:4871): avc: denied { name_bind } for pid=26493 comm="syz.1.6878" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 984.465087][T26518] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6886'. [ 984.614671][ T3389] page_pool_release_retry() stalled pool shutdown: id 51, 50 inflight 424 sec [ 984.869963][T26526] lo speed is unknown, defaulting to 1000 [ 984.981251][T26526] gre0 speed is unknown, defaulting to 1000 [ 985.192595][T26530] syzkaller0: entered promiscuous mode [ 985.204372][T26530] syzkaller0: entered allmulticast mode [ 985.326114][T26535] tipc: Enabling of bearer rejected, failed to enable media [ 985.471047][ T28] audit: type=1400 audit(1781764040.149:4872): avc: denied { name_bind } for pid=26525 comm="syz.7.6888" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 985.508452][ T28] audit: type=1400 audit(1781764040.149:4873): avc: denied { node_bind } for pid=26525 comm="syz.7.6888" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 985.762767][ T28] audit: type=1400 audit(1781764040.439:4874): avc: denied { ioctl } for pid=26552 comm="syz.7.6898" path="socket:[73233]" dev="sockfs" ino=73233 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 986.746264][ T28] audit: type=1400 audit(1781764041.429:4875): avc: denied { setopt } for pid=26568 comm="syz.1.6903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 986.782708][ T28] audit: type=1400 audit(1781764041.449:4876): avc: denied { read } for pid=26566 comm="syz.7.6902" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 986.856239][ T28] audit: type=1400 audit(1781764041.449:4877): avc: denied { open } for pid=26566 comm="syz.7.6902" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 986.915967][ T28] audit: type=1400 audit(1781764041.449:4878): avc: denied { ioctl } for pid=26566 comm="syz.7.6902" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 987.707136][T26602] syzkaller0: entered promiscuous mode [ 987.712943][T26602] syzkaller0: entered allmulticast mode [ 987.855231][T26606] syzkaller0: entered promiscuous mode [ 987.879814][T26606] syzkaller0: entered allmulticast mode [ 988.093943][ T28] audit: type=1326 audit(1781764042.769:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26607 comm="syz.0.6913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b263ace59 code=0x0 [ 988.473676][ T28] audit: type=1326 audit(1781764043.149:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26625 comm="syz.5.6920" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bbbace59 code=0x7ffc0000 [ 988.537607][ T28] audit: type=1326 audit(1781764043.149:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26625 comm="syz.5.6920" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bbbace59 code=0x7ffc0000 [ 988.571577][T26623] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6918'. [ 988.596727][ T28] audit: type=1326 audit(1781764043.149:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26625 comm="syz.5.6920" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bbbace59 code=0x7ffc0000 [ 988.629377][ T28] audit: type=1326 audit(1781764043.149:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26625 comm="syz.5.6920" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bbbace59 code=0x7ffc0000 [ 988.668820][ T28] audit: type=1326 audit(1781764043.149:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26625 comm="syz.5.6920" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff3bbbace59 code=0x7ffc0000 [ 988.726371][ T28] audit: type=1326 audit(1781764043.209:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26625 comm="syz.5.6920" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3bbb6d68e code=0x7ffc0000 [ 988.753269][T26630] syzkaller0: entered promiscuous mode [ 988.771043][T26630] syzkaller0: entered allmulticast mode [ 988.813783][T26632] lo speed is unknown, defaulting to 1000 [ 988.820065][T26632] gre0 speed is unknown, defaulting to 1000 [ 988.924012][T26638] netlink: 'syz.7.6924': attribute type 1 has an invalid length. [ 988.963999][T26638] 8021q: adding VLAN 0 to HW filter on device bond3 [ 989.023314][T26638] bond3: (slave gretap1): making interface the new active one [ 989.042364][T26638] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 989.137033][T26638] bond3: (slave veth7): Enslaving as an active interface with a down link [ 989.166651][T26646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26646 comm=syz.6.6926 [ 989.179409][T26646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26646 comm=syz.6.6926 [ 989.192031][T26646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26646 comm=syz.6.6926 [ 989.200526][T26638] veth0_virt_wifi: entered promiscuous mode [ 989.204681][T26646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26646 comm=syz.6.6926 [ 989.223524][T26646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26646 comm=syz.6.6926 [ 989.236097][T26646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26646 comm=syz.6.6926 [ 989.248968][T26646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26646 comm=syz.6.6926 [ 989.261715][T26646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26646 comm=syz.6.6926 [ 989.274630][T26646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26646 comm=syz.6.6926 [ 989.287212][T26646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26646 comm=syz.6.6926 [ 989.302363][T26638] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 990.204943][T26668] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6934'. [ 990.288114][T26668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6934'. [ 990.491731][T26673] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6937'. [ 990.519353][T26673] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6937'. [ 990.530063][T26673] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6937'. [ 990.548440][T26673] veth5: entered allmulticast mode [ 990.560895][T26673] bond3: (slave veth5): Enslaving as an active interface with an up link [ 990.768283][T26687] futex_wake_op: syz.5.6939 tries to shift op by 144; fix this program [ 991.288117][T26696] loop7: detected capacity change from 0 to 512 [ 991.625463][T26710] syzkaller0: entered promiscuous mode [ 991.631017][T26710] syzkaller0: entered allmulticast mode [ 991.805391][T26715] tipc: Enabling of bearer rejected, failed to enable media [ 991.896384][T26725] syzkaller0: entered promiscuous mode [ 991.902054][T26725] syzkaller0: entered allmulticast mode [ 992.267383][T26739] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6956'. [ 992.511107][T26757] loop7: detected capacity change from 0 to 512 [ 992.536888][T26757] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6960: Unrecognised inode hash code 255 [ 992.592243][T26761] netlink: 'syz.0.6961': attribute type 1 has an invalid length. [ 992.597245][T26757] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6960: Corrupt directory, running e2fsck is recommended [ 992.620757][T26761] 8021q: adding VLAN 0 to HW filter on device bond7 [ 992.643239][T26757] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 992.652031][T26761] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 992.664725][T26757] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6960: corrupted in-inode xattr: e_name out of bounds [ 992.681493][T26757] fserror_report: 6 callbacks suppressed [ 992.681510][T26757] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 992.689910][T26757] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.6960: couldn't read orphan inode 15 (err -117) [ 992.699128][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 992.699147][ C1] EXT4-fs (loop7): initial error at time 1781764047: ext4_iget_extra_inode:5128: inode 15 [ 992.699179][ C1] EXT4-fs (loop7): last error at time 1781764047: ext4_iget_extra_inode:5128: inode 15 [ 992.738135][T26757] loop7: lost filesystem error report for type 5 error -117 [ 992.738408][T26761] bond7: entered promiscuous mode [ 992.752092][T26757] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.765356][T26761] bond7: entered allmulticast mode [ 992.788151][T26763] macvlan3: entered promiscuous mode [ 992.804306][T26763] macvlan3: entered allmulticast mode [ 992.818652][T26763] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 992.966704][T24418] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.244914][T26772] syzkaller0: entered promiscuous mode [ 993.258515][T26772] syzkaller0: entered allmulticast mode [ 993.488924][T26778] syzkaller0: entered promiscuous mode [ 993.630075][T26778] syzkaller0: entered allmulticast mode [ 995.314455][T26812] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6978'. [ 995.353138][T26812] ip6erspan0: entered promiscuous mode [ 995.434963][T26814] selinux_netlink_send: 73 callbacks suppressed [ 995.434982][T26814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26814 comm=syz.7.6979 [ 995.454538][T26814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26814 comm=syz.7.6979 [ 995.467076][T26814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26814 comm=syz.7.6979 [ 995.480230][T26814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26814 comm=syz.7.6979 [ 995.492870][T26814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26814 comm=syz.7.6979 [ 995.505958][T26814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26814 comm=syz.7.6979 [ 995.518636][T26814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26814 comm=syz.7.6979 [ 995.524774][T26814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26814 comm=syz.7.6979 [ 995.548541][T26814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26814 comm=syz.7.6979 [ 995.561229][T26814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26814 comm=syz.7.6979 [ 995.685205][T26816] lo speed is unknown, defaulting to 1000 [ 995.691856][T26816] gre0 speed is unknown, defaulting to 1000 [ 995.936729][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 995.936745][ T28] audit: type=1400 audit(1781764050.619:4944): avc: denied { watch watch_reads } for pid=26819 comm="syz.1.6981" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 996.253516][T26828] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6992'. [ 996.533961][T26833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6984'. [ 996.680866][T26835] lo speed is unknown, defaulting to 1000 [ 996.707564][T26835] gre0 speed is unknown, defaulting to 1000 [ 997.199815][T26853] netlink: 'syz.5.6990': attribute type 1 has an invalid length. [ 997.308951][ T28] audit: type=1400 audit(1781764051.989:4945): avc: denied { ioctl } for pid=26856 comm="syz.1.6993" path="socket:[74709]" dev="sockfs" ino=74709 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 998.911225][T26880] loop7: detected capacity change from 0 to 1764 [ 999.083343][T26888] syzkaller0: entered promiscuous mode [ 999.089350][T26888] syzkaller0: entered allmulticast mode [ 999.291477][T26895] syzkaller0: entered promiscuous mode [ 999.297853][T26895] syzkaller0: entered allmulticast mode [ 1000.693220][T26917] bond1: entered allmulticast mode [ 1000.787403][T26919] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7016'. [ 1000.846707][T26921] syzkaller0: entered promiscuous mode [ 1000.846733][T26921] syzkaller0: entered allmulticast mode [ 1001.372785][ T28] audit: type=1400 audit(1781764056.049:4946): avc: denied { shutdown } for pid=26932 comm="syz.1.7021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1001.695609][T26942] futex_wake_op: syz.0.7023 tries to shift op by 144; fix this program [ 1003.289940][T26962] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7030'. [ 1003.399973][T26969] syzkaller0: entered promiscuous mode [ 1003.436451][T26969] syzkaller0: entered allmulticast mode [ 1003.812399][T26987] futex_wake_op: syz.7.7039 tries to shift op by 144; fix this program [ 1005.374073][T26982] loop6: detected capacity change from 0 to 2048 [ 1005.492590][T26982] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.599673][ T28] audit: type=1326 audit(1781764060.279:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27016 comm="syz.0.7057" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b263ace59 code=0x7ffc0000 [ 1005.650189][ T28] audit: type=1326 audit(1781764060.279:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27016 comm="syz.0.7057" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b263ace59 code=0x7ffc0000 [ 1005.721439][T27012] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1005.727781][ T28] audit: type=1326 audit(1781764060.279:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27016 comm="syz.0.7057" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b263ace59 code=0x7ffc0000 [ 1005.735780][T26982] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.7038: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1005.822805][ T28] audit: type=1326 audit(1781764060.279:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27016 comm="syz.0.7057" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b263ace59 code=0x7ffc0000 [ 1005.822842][ T28] audit: type=1326 audit(1781764060.279:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27016 comm="syz.0.7057" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b263ace59 code=0x7ffc0000 [ 1005.822870][ T28] audit: type=1326 audit(1781764060.279:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27016 comm="syz.0.7057" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4b263ace59 code=0x7ffc0000 [ 1005.822900][ T28] audit: type=1326 audit(1781764060.359:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27016 comm="syz.0.7057" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b263ace59 code=0x7ffc0000 [ 1005.822973][ T28] audit: type=1326 audit(1781764060.359:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27016 comm="syz.0.7057" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b263ace59 code=0x7ffc0000 [ 1006.041564][ T28] audit: type=1326 audit(1781764060.689:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27016 comm="syz.0.7057" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b263ace59 code=0x7ffc0000 [ 1006.155020][T27017] rdma_rxe: rxe_newlink: failed to add bond0 [ 1006.168597][T27018] loop7: detected capacity change from 0 to 164 [ 1006.184708][T27012] EXT4-fs (loop6): Remounting filesystem read-only [ 1006.453397][T27018] Symlink component flag not implemented [ 1006.465614][T27026] Symlink component flag not implemented (7) [ 1006.467938][T27026] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7048'. [ 1006.515448][T27018] Symlink component flag not implemented (7) [ 1006.754262][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 1006.754356][ T28] audit: type=1326 audit(1781764061.429:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27016 comm="syz.0.7057" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4b263ace59 code=0x7ffc0000 [ 1006.809565][T19172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.844150][T27030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7052'. [ 1006.908544][T27034] syzkaller0: entered promiscuous mode [ 1006.922913][T27034] syzkaller0: entered allmulticast mode [ 1006.932244][T27037] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7051'. [ 1006.964260][T27043] netlink: 'syz.0.7055': attribute type 1 has an invalid length. [ 1006.965998][T27044] netlink: 'syz.5.7054': attribute type 13 has an invalid length. [ 1007.380807][T27061] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7059'. [ 1008.402499][T27072] loop7: detected capacity change from 0 to 512 [ 1009.195081][T27072] EXT4-fs: Ignoring removed nobh option [ 1009.456942][T27072] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1009.612061][T27072] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.640355][ T28] audit: type=1400 audit(1781764064.319:4988): avc: denied { write } for pid=27068 comm="syz.7.7063" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1009.673609][ T28] audit: type=1400 audit(1781764064.339:4989): avc: denied { remove_name } for pid=27068 comm="syz.7.7063" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1009.718082][ T28] audit: type=1400 audit(1781764064.339:4990): avc: denied { unlink } for pid=27068 comm="syz.7.7063" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1010.109654][T24418] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.676086][ T28] audit: type=1400 audit(1781764065.359:4991): avc: denied { read } for pid=27109 comm="syz.7.7072" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1010.768879][ T28] audit: type=1400 audit(1781764065.439:4992): avc: denied { create } for pid=27125 comm="syz.7.7077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1010.985369][T27130] netlink: 168 bytes leftover after parsing attributes in process `syz.7.7079'. [ 1011.061907][T27138] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.7082'. [ 1011.077001][T27138] veth0_to_bond: default FDB implementation only supports local addresses [ 1011.157592][T27138] netlink: 'syz.7.7082': attribute type 2 has an invalid length. [ 1011.177589][T27138] netlink: 'syz.7.7082': attribute type 1 has an invalid length. [ 1011.189541][T27138] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.7082'. [ 1011.942007][T27153] loop7: detected capacity change from 0 to 512 [ 1012.073983][T27153] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1012.771012][T27172] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7092'. [ 1012.776576][T27153] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1012.867293][T27178] netlink: 168 bytes leftover after parsing attributes in process `syz.6.7093'. [ 1012.890526][T27175] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7092'. [ 1012.915181][T27181] syzkaller0: entered promiscuous mode [ 1012.926078][T27181] syzkaller0: entered allmulticast mode [ 1014.284024][T27205] pim6reg: entered allmulticast mode [ 1014.310189][T27213] pim6reg: left allmulticast mode [ 1014.456687][T27232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7110'. [ 1014.515427][T27232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7110'. [ 1015.105615][T27252] syzkaller0: entered promiscuous mode [ 1015.111332][T27252] syzkaller0: entered allmulticast mode [ 1015.914218][T27244] loop6: detected capacity change from 0 to 512 [ 1016.019412][T27259] netlink: 'syz.0.7119': attribute type 6 has an invalid length. [ 1016.346648][T27266] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7122'. [ 1016.430166][T27244] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1016.482250][T27270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7122'. [ 1016.524643][T27244] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1016.583840][T27244] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1016.607949][T27244] EXT4-fs warning (device loop6): ext4_enable_quotas:7267: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1016.682975][T27244] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1016.762868][T27244] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #16: comm syz.6.7114: inode has both inline data and extents flags [ 1016.809948][T27244] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1016.814509][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1016.830161][ C1] EXT4-fs (loop6): initial error at time 1781764071: ext4_orphan_get:1399: inode 16 [ 1016.839805][ C1] EXT4-fs (loop6): last error at time 1781764071: ext4_orphan_get:1399: inode 16 [ 1016.876997][T27244] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.7114: couldn't read orphan inode 16 (err -117) [ 1016.934991][T27244] loop6: lost filesystem error report for type 5 error -117 [ 1017.524707][T27283] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7126'. [ 1017.623243][T27244] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1017.656997][T27283] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1017.657065][T27283] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1017.695991][ T28] audit: type=1400 audit(1781764072.319:4993): avc: denied { firmware_load } for pid=27279 comm="syz.7.7126" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1018.022922][T19172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.962829][T27314] loop7: detected capacity change from 0 to 128 [ 1019.050072][T27316] loop7: detected capacity change from 0 to 128 [ 1019.114905][T27320] syzkaller0: entered promiscuous mode [ 1019.125219][T27320] syzkaller0: entered allmulticast mode [ 1019.623608][T27316] ================================================================== [ 1019.631846][T27316] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 1019.639781][T27316] [ 1019.642203][T27316] write to 0xffff88811ac7bc44 of 4 bytes by task 27321 on cpu 1: [ 1019.650009][T27316] xas_set_mark+0x12b/0x140 [ 1019.654519][T27316] __folio_start_writeback+0x16a/0x350 [ 1019.660340][T27316] __mpage_writepages+0xd92/0x1370 [ 1019.665548][T27316] fat_writepages+0x26/0x30 [ 1019.670175][T27316] do_writepages+0x1b9/0x300 [ 1019.675143][T27316] file_write_and_wait_range+0x178/0x2f0 [ 1019.680821][T27316] mmb_fsync_noflush+0x48/0x140 [ 1019.685672][T27316] fat_file_fsync+0x98/0x110 [ 1019.690273][T27316] vfs_fsync_range+0xc5/0xe0 [ 1019.694861][T27316] generic_file_write_iter+0x1a3/0x1f0 [ 1019.700339][T27316] iter_file_splice_write+0x6a0/0xa60 [ 1019.705712][T27316] direct_splice_actor+0x156/0x280 [ 1019.710955][T27316] splice_direct_to_actor+0x2f9/0x680 [ 1019.716508][T27316] do_splice_direct+0x119/0x1a0 [ 1019.721395][T27316] do_sendfile+0x37d/0x640 [ 1019.725810][T27316] __x64_sys_sendfile64+0x105/0x150 [ 1019.731273][T27316] x64_sys_call+0x2dc4/0x3020 [ 1019.735954][T27316] do_syscall_64+0x136/0x3c0 [ 1019.740575][T27316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.746466][T27316] [ 1019.748805][T27316] read to 0xffff88811ac7bc44 of 4 bytes by task 27316 on cpu 0: [ 1019.756433][T27316] __writeback_single_inode+0x1fb/0x660 [ 1019.762078][T27316] writeback_single_inode+0x16d/0x400 [ 1019.767465][T27316] sync_inode_metadata+0x6e/0xa0 [ 1019.772408][T27316] mmb_fsync_noflush+0xfa/0x140 [ 1019.777250][T27316] fat_file_fsync+0x98/0x110 [ 1019.781845][T27316] vfs_fsync_range+0xc5/0xe0 [ 1019.786439][T27316] generic_file_write_iter+0x1a3/0x1f0 [ 1019.791922][T27316] iter_file_splice_write+0x6a0/0xa60 [ 1019.797419][T27316] direct_splice_actor+0x156/0x280 [ 1019.802542][T27316] splice_direct_to_actor+0x2f9/0x680 [ 1019.807916][T27316] do_splice_direct+0x119/0x1a0 [ 1019.812773][T27316] do_sendfile+0x37d/0x640 [ 1019.817190][T27316] __x64_sys_sendfile64+0x105/0x150 [ 1019.822412][T27316] x64_sys_call+0x2dc4/0x3020 [ 1019.827103][T27316] do_syscall_64+0x136/0x3c0 [ 1019.831705][T27316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.837623][T27316] [ 1019.839938][T27316] value changed: 0x0a000021 -> 0x04000021 [ 1019.845743][T27316] [ 1019.848168][T27316] Reported by Kernel Concurrency Sanitizer on: [ 1019.854419][T27316] CPU: 0 UID: 0 PID: 27316 Comm: syz.7.7137 Not tainted syzkaller #0 PREEMPT(lazy) [ 1019.864098][T27316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1019.874146][T27316] ==================================================================