last executing test programs: 5m29.562261641s ago: executing program 32 (id=557): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trus\\'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c8) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x8005, 0x0) 5m29.190997261s ago: executing program 33 (id=570): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x1) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x100802, 0x2, 0x8}) 5m13.268911629s ago: executing program 34 (id=894): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000040), 0x2, 0xbc6, &(0x7f00000027c0)="$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") r0 = open(&(0x7f0000000140)='./file2\x00', 0x105480, 0x100) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x86) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) preadv2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 5m4.222223186s ago: executing program 35 (id=763): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000600)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in6={0xa, 0x4e20, 0x6, @private0, 0x6}, @in6={0xa, 0x4e22, 0x5, @remote, 0x4}, @in6={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x47}, @in6={0xa, 0x4e24, 0x9, @private1, 0x401}], 0x8c) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xe, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000009c80), 0x2, 0x0) write$selinux_access(r3, &(0x7f0000009d00)=ANY=[@ANYBLOB='system_u:objectib_t:s0 /sbin/dh'], 0x48) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x301000, 0x124) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff, 0x0, 0x4}}}}}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e1c, @empty}, 0x10) sendto(r4, 0x0, 0x0, 0x404c001, 0x0, 0xffffff40) writev(r4, &(0x7f00000021c0)=[{&(0x7f0000000380)}, {&(0x7f0000001180)="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", 0xffa}, {&(0x7f0000002180)="458f23f186f3b7e59e05e4aab7add07bc92c9e2879261fb31fc763ee26f96cc2b2f6dd13bb3f9e0e37ede036e8ad403dc688d42089d2c07c638d", 0x3a}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) 4m53.602686802s ago: executing program 36 (id=975): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x9}, 0x8) 4m52.576006147s ago: executing program 37 (id=1170): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xff84, 0x100, 0x0, 0xff, 0x2, "db2d416fbecfb84b5452b768e08ee205751089"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x6f) 4m38.554193998s ago: executing program 38 (id=1424): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2712, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x41) 4m38.507632699s ago: executing program 39 (id=1427): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000600)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x6, @private0, 0x6}, @in6={0xa, 0x4e22, 0x5, @remote, 0x4}, @in6={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x47}, @in6={0xa, 0x4e24, 0x9, @private1, 0x401}], 0x9c) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xe, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000009c80), 0x2, 0x0) write$selinux_access(r3, &(0x7f0000009d00)=ANY=[@ANYBLOB='system_u:objectib_t:s0 /sbin/dhclient 000'], 0x48) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x301000, 0x124) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0xffff, 0x0, 0x4, {[@mss={0x2, 0x4, 0xcbb}]}}}}}}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) shutdown(r4, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e1c, @empty}, 0x10) sendto(r4, 0x0, 0x0, 0x404c001, 0x0, 0xffffff40) writev(r4, &(0x7f00000021c0)=[{&(0x7f0000000380)}, {&(0x7f0000001180)="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", 0xbfc}, {&(0x7f0000002180)="458f23f186f3b7e59e05e4aab7add07bc92c9e2879261fb31fc763ee26f96cc2b2f6dd13bb3f9e0e37ede036e8ad403dc688d42089d2c07c638d", 0x3a}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) 4m27.387051168s ago: executing program 40 (id=1583): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/fail_page_alloc/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='100', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/fail_page_alloc/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000580)='10', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 4m16.375197964s ago: executing program 41 (id=1513): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 4m15.976613243s ago: executing program 42 (id=1715): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000047c0)=[{{&(0x7f0000004280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x1, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000a16000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setuid(0xee00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r0, 0x12a, 0x14, 0x17, 0x0, 0x0) 4m1.584157553s ago: executing program 43 (id=1702): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/131, 0x83}}], 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 3m49.650123642s ago: executing program 44 (id=2028): perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000400)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, @in6={0xa, 0x4e24, 0x4, @private1, 0x1}, @in6={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}]}, &(0x7f0000000040)=0x10) inotify_init1(0x80000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0x203, 0x7, 0xb}, 0x10) 3m36.046198853s ago: executing program 45 (id=2200): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf4ff7f0000eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000100)) 3m26.395781504s ago: executing program 46 (id=2125): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) 3m3.035262289s ago: executing program 47 (id=2531): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x331f, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xd, 0x10b}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe3a, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40080c1}, 0x20000054) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x29, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x300fdfd, 0x8, 0x14, 0x100, &(0x7f00000004c0)="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"}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m50.140016851s ago: executing program 48 (id=3006): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x56f2be14c64fc14d}, 0x400c000) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 2m48.934275382s ago: executing program 1 (id=3035): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x60042, 0x0) write$P9_RSETATTR(r0, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m48.910125362s ago: executing program 1 (id=3036): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2m48.790141015s ago: executing program 1 (id=3040): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x240448c1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071107b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m48.737514206s ago: executing program 1 (id=3042): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0xe078, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_uring_setup(0x14cf, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@quota}, {@sysvgroups}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x47) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 2m48.074290403s ago: executing program 1 (id=3050): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000140)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 2m47.186569865s ago: executing program 1 (id=3070): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0), 0x5f) 2m47.174483905s ago: executing program 49 (id=3070): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0), 0x5f) 2m33.01838259s ago: executing program 8 (id=3352): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000100)="ef08", 0x2}], 0x1}}], 0x1, 0x24008800) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r2, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) 2m32.99953487s ago: executing program 8 (id=3355): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, @perf_config_ext={0x1, 0xfffffbfffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x4040) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8ff248670b87d03c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x0) 2m32.779948236s ago: executing program 8 (id=3360): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000000, 0x0) close_range(r0, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2m32.533593822s ago: executing program 8 (id=3362): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) 2m32.487614953s ago: executing program 8 (id=3364): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fe, 0xf6d, 0x0, 0x4000000000001, 0x7ffffffe, 0x0, 0x4, 0x200000000000000, 0x40000000, 0x100, 0xcf2c, 0x0, 0x9, 0x5, 0x3, 0xfffffffffffffff9, 0x0, 0xf41, 0x1000, 0x2000000000008, 0xb, 0x3, 0x8000000000005a, 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m31.546547867s ago: executing program 8 (id=3386): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x2400c090) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r2, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) 2m31.546382567s ago: executing program 50 (id=3386): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x2400c090) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r2, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) 2m28.152466232s ago: executing program 9 (id=3447): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) 2m28.135709832s ago: executing program 9 (id=3449): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800, &(0x7f0000000200)={[{@usrjquota}, {@nobh}, {@bh}, {@usrjquota}, {@sysvgroups}, {@data_err_ignore}]}, 0x2, 0x481, &(0x7f0000001540)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101041, 0xf0) openat$dir(0xffffffffffffff9c, 0x0, 0x109800, 0x61) socket(0x400000000010, 0x3, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000009c0)={0x2, 0x0, 0xd, 0x1c, 0x6b, &(0x7f00000005c0)="8b4a3655e91990556018ae206cd3b217c5f60521fdb4ad6f4a2d445367ef0eacd8b2913af6232c1ae0501912a0fee34104bef33409f47355515c8d28ad932c7b6fb9abef1053e3d348961123bea1d8745d44c1bf2b885239f25ad60b42f2346040f40181c57d5fb8308e4bd413c7f17ab9e945df7cb8d17b4af3af3ae7e5c2079430fb242b098a1c4f63db79fc6ff8b574ef7a4e812a87662ac83c66a7d7db33149f12d6d0e7f9d91177e08adc7351b4f553390d35632df2e070adc2c9ee3ef468b05028fb84ed9a9d126830e8e5da0de26311705fbf7d649061ea0416753ebf87690cdb24496290be495045222a10f915faf4d0c1906bacf89325a4965d07270779bd66248333a7bf2597dad40dd7548429bb172f0fb7f2b03b8527cbc5f3ed134e907423a5ad46348a7b9e5d95a1f2f64728d19809bea5fd13e46858d57f0fdc351feb1991ceda2a00e2b96949c1ae8c89aff4ecde9538098bfc771e86dcf2e01f28d97d79a9dbf3866b2d9659767cad98cf4589c3e2b694ac694cca384b51d06d2ccd67fa2a0b8d3666f11387970c9e31489bf2b07fde093fe4d6ee967a062277012ec39f6b048676755baa690b0da81373c69478baec522147e7cf8ccf613f7e04b3263f869c6241e18cd8e96841b7fa0bf39d1fa16f64c436b60770aec88bef136f5ebee10e69d947965d6caf7d209dec8e4619cfa40222fd0daac00d5021d5b9b6c9ce92d38ec8b57c13a5c5b19eb688be9d275cca3c78dcf478fa3a79a822d56342fa658890b89b83944d49dbceec0d5ab2ffb6486ef68edabb508d3eacb8d0eebeda728ecdad6e3a4f594be92c6ab6899d77ea78c0026aadde990e4cf8c2df990e7d33f550b7ab684bd19ea2e9e540268d2ae9f30938d9d31ca5054f2e3fd2c569b5ddc206aebf094aae7a500fc3a135c1db4f7b671a5e14843f0306c6492159efd583c7741a62a277c60bd74be4372cb615d95d5f5c82b74ddfc94c01a9943843f331ea7b9ef65baec106884a845e816cf7bbd090127bc8729bf1fd71b31f36fc273bf1d23f3e3326002522b7063e9599e5240bd7a540ee6e389fc41d3373bc753ff3e11ce2acda81fb7403a35be2ee19f6c072433b8a7f6a52992d62efdf83428ac2f9dca5a9c4d952081cddb9923423c05ef6e97bbcb2f9d20cd144dbc732a3158f7591bf3cb104cb4aa239a189917e29866a21f252059856815263ead0da0cd11faa9e57dc3ebab6ed9375b3da0fa9c56fe431d6de762d3fbeb1f07a5a63cc3b701d7e84d63768be97fb9756116bcf285bdbd5eb1618decabd56862eafbbc790b57a7c49d4c85d46ee9090763e0d37840d8c527092812954b8ebf673bdb4a65ff1cce4ca891910c45b77e4d0ef1efc25aac697e4eac194f912d6f57651c67b96024907f6038f4f09a8902fba4e11e67b054530b7152cc9a00748"}) socket$unix(0x1, 0x1, 0x0) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@nobarrier}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 2m27.770568971s ago: executing program 9 (id=3453): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) 2m26.880630974s ago: executing program 9 (id=3465): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0xe078, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_uring_setup(0x14cf, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@quota}, {@sysvgroups}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x47) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 2m26.518338413s ago: executing program 9 (id=3475): r0 = semget(0x1, 0x2, 0xe) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) semget$private(0x0, 0x4, 0x430) r1 = socket$netlink(0x10, 0x3, 0xe) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0xf, 0x8, 0x80, 0x1, 0x0, 0x7f, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x1, 0xfffffffffffffffb}, 0x80, 0x7, 0xff, 0x8a430f2c656198eb, 0x4, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x8}, r1, 0x1, 0xffffffffffffffff, 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000440)=[0x0]) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000800)=0x5) 2m25.910473158s ago: executing program 9 (id=3481): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000500)={0x11, 0x1a, r3, 0x1, 0x3, 0x6, @broadcast}, 0x14) bind$packet(r1, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="aa0000000000000080a2aa0d0606"], 0x0) 2m25.910234158s ago: executing program 51 (id=3481): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000500)={0x11, 0x1a, r3, 0x1, 0x3, 0x6, @broadcast}, 0x14) bind$packet(r1, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="aa0000000000000080a2aa0d0606"], 0x0) 1m53.967831177s ago: executing program 4 (id=4017): bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc5, 0x0, 0xe1b31c0aaf6f5dc5}}, 0x40) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x4, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 1m53.488650349s ago: executing program 4 (id=4027): socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x5e}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m53.339538783s ago: executing program 4 (id=4032): perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0x80000000, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0xf58, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r0, 0x3) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0xfffffffe}, 0x1c) listen(r1, 0x50) fsmount(0xffffffffffffffff, 0x0, 0x2) 1m53.269660395s ago: executing program 4 (id=4035): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x6, r2, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x4c}}, 0x24000040) 1m53.115116499s ago: executing program 4 (id=4040): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1m52.959178022s ago: executing program 4 (id=4044): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5, 0x0, 0x7fff, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x880000000000, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x2, 0x4}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0x0, &(0x7f0000000340)="b4bf11a369d8625dd5ee1d8288a8599486dd47046c2ee101408b3257de22781e530b0de0953f0116a725b46025a6951587880f72ce91dd30ca9844d597c24d848870c30f32ced51d54fa6b80b80c84346553a2fd35d9367af322ea7eeba816e0f4aee1a10f0284", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x2a) 1m37.940051809s ago: executing program 52 (id=4044): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5, 0x0, 0x7fff, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x880000000000, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x2, 0x4}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0x0, &(0x7f0000000340)="b4bf11a369d8625dd5ee1d8288a8599486dd47046c2ee101408b3257de22781e530b0de0953f0116a725b46025a6951587880f72ce91dd30ca9844d597c24d848870c30f32ced51d54fa6b80b80c84346553a2fd35d9367af322ea7eeba816e0f4aee1a10f0284", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x2a) 1m13.391528273s ago: executing program 7 (id=4683): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000feb000/0x12000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x114b, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000c, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xa}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c805}, 0x8090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(0x3) 1m13.357500953s ago: executing program 7 (id=4685): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x80004, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000180)="dc585a83891847a949e294b2ec22d45742376dfcb543156221c3eebd", 0x1c, 0xc) mount$nfs(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4800) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000300)=[{&(0x7f0000007900)=""/4095, 0xfff}], 0x1) socket$nl_rdma(0x10, 0x3, 0x14) 1m13.286361736s ago: executing program 7 (id=4689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m12.647901382s ago: executing program 7 (id=4699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bda6, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0x4}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x1, 0x20000000, 0x9, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8880}, 0x0) 1m12.546448924s ago: executing program 7 (id=4703): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1m12.29132739s ago: executing program 7 (id=4706): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000feb000/0x12000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x114b, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000c, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xa}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c805}, 0x8090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 56.374071759s ago: executing program 53 (id=4706): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000feb000/0x12000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x114b, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000c, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xa}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c805}, 0x8090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.78102701s ago: executing program 6 (id=5419): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x378) 4.352913151s ago: executing program 6 (id=5422): ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000003060300000000000000000001000003050001000700000005000100070000000fd70a25ca8f25580500010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x200, 0x70bd2d, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xae, 0xfff, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xffff, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d4, 0x3c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x1, 0x3, 0x0, 0x49, 0x0, 0x1}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100"/30], 0xfc}}, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) socket(0x2c, 0x80000, 0x3a5) 4.233747383s ago: executing program 6 (id=5423): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r1, r3, 0x80000000, 0x100000000000000) 2.955389235s ago: executing program 0 (id=5433): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 2.844645069s ago: executing program 0 (id=5435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x0) 2.77214648s ago: executing program 0 (id=5437): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5b6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000380)='v', &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f00000001c0), &(0x7f0000000040)=@tcp=r0}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) 2.688144772s ago: executing program 0 (id=5438): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, @perf_config_ext={0x9, 0x30}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$rtc(0xffffffffffffff9c, 0x0, 0x40, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}]}, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[], 0x48) 2.653538483s ago: executing program 3 (id=5439): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in6=@loopback}}, {{@in6=@private2}, 0x0, @in=@loopback}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x1000010, &(0x7f00000004c0)={[{@quota}, {@huge_always}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r2, 0x0, 0x4, 0x88ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r3, 0x0, 0x0, 0x5412, 0x0, 0x0) 2.538810766s ago: executing program 0 (id=5440): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.474632838s ago: executing program 3 (id=5441): r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}, 0x10531c, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000200)=@assoc_value, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) sendmmsg$inet(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x4040090) 2.449368268s ago: executing program 0 (id=5442): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xffffbffd, 0x200, 0x0, 'queue1\x00', 0x1}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000005c0)={[{@init_itable_val}, {@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000180)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x20000}, &(0x7f0000000140), 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) fsopen(&(0x7f0000000940)='hostfs\x00', 0x0) 2.366526881s ago: executing program 3 (id=5443): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) 1.215619959s ago: executing program 3 (id=5445): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0xe0000526) open(&(0x7f0000000180)='./bus\x00', 0x149cc2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x203}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffe0}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.19766789s ago: executing program 6 (id=5447): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) iopl(0x3) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.16027342s ago: executing program 3 (id=5448): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000000840)={&(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x45}, 0x0) 901.006657ms ago: executing program 5 (id=5451): socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_clone(0x2a801400, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1a3803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 701.975302ms ago: executing program 5 (id=5453): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) 650.115403ms ago: executing program 2 (id=5454): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) close(r1) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0xce, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x2}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 625.135204ms ago: executing program 2 (id=5455): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x740, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xf0, 0x6, 0xff, 0x7, 0x0, 0x7fffffff, 0xd3751, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xf}, 0xc93, 0x2000000000001, 0x3, 0x1, 0x200000000081, 0x8005, 0x7fff, 0x0, 0x2cb, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000001b000000660000000000000016000000000000009500000000010000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000200)="73e73d76f0e0afcbf80cd93c9babefa71a3061d23012ad9f378e93aa98d98ab5da36ad34112c8016ba2c04032f9b59da757272e6c8ee5a296c5a1f076572d6f7510f3ebff32a48a0204135ba9acdb993e8e62464a30b4a41cd7e963d79fa7cfc33c63c8dd4f42983e802e2b62206c8b35630977bf6260eacbe90e5d2b63c3585fd7e347309b5021f7a364325ee", 0x8d}, {&(0x7f00000002c0)="ed9422f0e3096d9fffd803d3cd45c77d3f6db0a4343d6fc3902999a502622253fbf804a549799e02eacedf8234", 0x2d}], 0x2, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x48}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0xe, 0x0, &(0x7f00000007c0)="0000000000000000fe7346f74af2", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 466.996498ms ago: executing program 5 (id=5456): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000002e40)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b70400000000"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d82}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x830, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000140)=0x1ff, 0x4) 422.618939ms ago: executing program 2 (id=5457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x8, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x5, 0x7fbffffe, 0x3fe, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x3f, 0x7, 0x12, 0x8000, 0x1, 0x4db, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x7, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x203, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x5, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r4, 0x1, 0x9, 0x6, @local}, 0x14) 313.992422ms ago: executing program 6 (id=5458): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 313.607862ms ago: executing program 2 (id=5459): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x26, 0x0) capget(0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x20000043, 0x1004, 0x2, 0x3}, 0x10) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x121484b, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 235.189674ms ago: executing program 6 (id=5460): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2ca, &(0x7f0000000500)="$eJzs3E9rE2sUx/HTpk3TlDa5cLlwBfWgG92ENr4ADdKCGFBqU9SFMLUTDRmTMhMqEbHZiFtfR3HpTlBfgN2IG3HrrgiCmy7Ekc6fmrRpzZ+2SdvvB8o8mWd+PKfTaTlTmFm//fJRMe+k8kZFBmMqgyI12RBJbo4CA8F20BtHpV5NLo79+Hz61p271zPZ7PSs6kxm7lJaVSfOvn389NW595Wx+dcTb0ZkLXlv/Xv669p/a/+v/5p7WHCGxdFSuaKGLpTLFWPBMnWx4BRTqjct03BMLZQc026Yz1vlpaWqGqXF8fiSbTqOGqWqFs2qVspasatqPDAKJU2lUjoel5Mi0XTvUAvJ3OrsrJHZddqNdFEVemC02U7bztSaT+ZWD6EmAADQZ/bu//1ef/f+Pzvvbzvq/7WwW/8v0nX//yF6+OfyKKg1fPpL/x9qfoMR27eicKBsO2PEg9/fRvT/AAAAAAAAAAAAAAAAAAAAAAAcBRuum3BdNxFuw6+R4AGP8HOv68TBaPPnH74Q4HIPS8Y+qntwLyZivVjOLef8rT+fyUtBLDFlUhLy07seAv545lp2elI9SXlnrQT5leVcRDavoUxUCluLJcP8gPcYmp8/88+Un9fG/LDE69dPS0L+bb5+umk+KhfO1+VTkpCP96UsliyKfAkuaC//bEr16o3stvzo5nEAAAAAABwLKd2y4/7dm/cOiMnOeT/fxv8Htt1fD8mpVl5RCQAAAAAAuuZUnxQNyzLtDgYjItJF/LgOItIXZWwbXBGRTuLxfii+/UFMRPw92kn821a8pZTbwjFDItLz09LGoNd/mQAAAADstz9NfxuhT88PsCIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6eVt8HFh6/Yyqc2CNet1zk0L9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoI/8DgAA///REBf+") sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x2b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) connect$inet(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 217.174954ms ago: executing program 5 (id=5461): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x1) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) 199.976455ms ago: executing program 2 (id=5462): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x7ff, 0x0, 0x52, 0xfc0, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='k\x9a\xf7\xdf`', 0x0) r1 = socket(0x2, 0xa, 0x300) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 163.379636ms ago: executing program 3 (id=5463): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 134.168696ms ago: executing program 2 (id=5464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffe0, 0xb}, {0x9, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 129.557886ms ago: executing program 5 (id=5465): socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c23003f) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 0s ago: executing program 5 (id=5466): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7ffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) readv(r1, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0xfdef}, {0x0, 0xe00}], 0x10000000000000fb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007eb000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00001ed000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006ee000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000946000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): s `syz.4.3963'. [ 278.273931][ T28] audit: type=1326 audit(1785840419.389:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19325 comm="syz.3.3952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ffad72ade99 code=0x7ffc0000 [ 278.307600][ T28] audit: type=1326 audit(1785840419.389:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19325 comm="syz.3.3952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad72ade99 code=0x7ffc0000 [ 278.333737][ T28] audit: type=1326 audit(1785840419.459:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19325 comm="syz.3.3952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffad726e6ce code=0x7ffc0000 [ 278.338996][T19353] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.359933][ T28] audit: type=1326 audit(1785840419.469:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19325 comm="syz.3.3952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffad726e6ce code=0x7ffc0000 [ 278.397235][ T28] audit: type=1326 audit(1785840419.469:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19325 comm="syz.3.3952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffad726e6ce code=0x7ffc0000 [ 278.598247][T15865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.731625][T19376] tipc: Failed to remove unknown binding: 66,0,0/0:3310565174/3310565176 [ 278.740576][T19376] tipc: Failed to remove unknown binding: 66,0,0/0:3310565174/3310565175 [ 278.814764][T19378] netlink: 127592 bytes leftover after parsing attributes in process `syz.4.3971'. [ 278.962396][T19390] syz_tun: entered allmulticast mode [ 279.049441][T19398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3981'. [ 279.407433][ T3384] IPVS: starting estimator thread 0... [ 279.535949][T19417] IPVS: using max 2592 ests per chain, 129600 per kthread [ 279.989966][T19447] syzkaller0: entered promiscuous mode [ 280.006850][T19447] syzkaller0: entered allmulticast mode [ 281.024581][T19491] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4026'. [ 281.339758][T19509] loop3: detected capacity change from 0 to 512 [ 281.394904][T19509] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 281.422898][T19509] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.4022: invalid block [ 281.452300][T19509] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 281.455645][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 281.471322][ C0] EXT4-fs (loop3): initial error at time 1785840422: ext4_get_branch:178: inode 13: block 1024 [ 281.481701][ C0] EXT4-fs (loop3): last error at time 1785840422: ext4_get_branch:178: inode 13: block 1024 [ 281.503733][T19509] EXT4-fs (loop3): 1 truncate cleaned up [ 281.564777][T19509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.655080][T19540] netlink: 'syz.4.4035': attribute type 10 has an invalid length. [ 281.688755][T19540] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.690406][T15648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.711208][T19540] bond0: (slave team0): Enslaving as an active interface with an up link [ 281.859600][T19554] loop7: detected capacity change from 0 to 512 [ 281.862354][T19556] 9pnet_fd: p9_fd_create_unix (19556): problem connecting socket: ./file0: -111 [ 281.877166][T19554] EXT4-fs: inline encryption not supported [ 281.881658][T19554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c198, mo2=0002] [ 281.881882][T19554] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.4041: corrupted in-inode xattr: e_value size too large [ 281.881917][T19554] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 281.882132][T19554] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4041: couldn't read orphan inode 15 (err -117) [ 281.887962][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 281.887983][ C0] EXT4-fs (loop7): initial error at time 1785840423: ext4_iget_extra_inode:5180: inode 15 [ 281.888017][ C0] EXT4-fs (loop7): last error at time 1785840423: ext4_iget_extra_inode:5180: inode 15 [ 281.958488][T19554] loop7: lost filesystem error report for type 5 error -117 [ 281.959059][T19554] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.980714][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4043'. [ 282.037071][T19560] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4043'. [ 282.046603][T19561] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4041'. [ 282.171288][T15865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.231432][T19568] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4046'. [ 282.455942][T19579] loop5: detected capacity change from 0 to 512 [ 282.491329][T19579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.518503][T19579] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.699947][T17253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.114214][T19618] sctp: [Deprecated]: syz.5.4068 (pid 19618) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.114214][T19618] Use struct sctp_sack_info instead [ 283.271608][T19628] loop5: detected capacity change from 0 to 512 [ 283.310938][T19626] loop7: detected capacity change from 0 to 8192 [ 283.330609][T19626] vfat: Unknown parameter 'bridge0' [ 283.354927][T19628] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 283.435781][T19628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.462916][T19630] syzkaller0: entered promiscuous mode [ 283.529024][T19628] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.631519][T19628] tipc: Started in network mode [ 283.660221][T19628] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 283.712410][T19628] tipc: Enabling of bearer rejected, failed to enable media [ 283.793559][T17253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.503881][T19661] xt_hashlimit: size too large, truncated to 1048576 [ 285.010786][T19681] sctp: [Deprecated]: syz.3.4092 (pid 19681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.010786][T19681] Use struct sctp_sack_info instead [ 285.411181][T19714] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4108'. [ 285.773458][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 285.773471][ T28] audit: type=1400 audit(1785840426.999:2890): avc: denied { accept } for pid=19729 comm="syz.5.4115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.801058][T19730] loop5: detected capacity change from 0 to 128 [ 286.453065][T19773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4135'. [ 286.593699][T19779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.655913][T19779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.208463][T19818] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: 1 [ 287.227528][T19818] ref_ctr increment failed for inode: 0x392 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888100068000 [ 287.266197][T19817] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: -1 [ 287.280890][T19817] ref_ctr decrement failed for inode: 0x392 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888100068000 [ 287.305686][T19817] uprobe: syz.7.4154:19817 failed to unregister, leaking uprobe [ 287.398413][T19825] net_ratelimit: 72 callbacks suppressed [ 287.398428][T19825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.505053][T19833] uprobe: syz.5.4161:19833 failed to unregister, leaking uprobe [ 287.522592][T19833] uprobe: syz.5.4161:19833 failed to unregister, leaking uprobe [ 288.619491][T19855] bond0: (slave bond_slave_1): Releasing backup interface [ 288.780424][ T283] IPVS: starting estimator thread 0... [ 288.875787][T19871] IPVS: using max 1872 ests per chain, 93600 per kthread [ 288.899988][ T28] audit: type=1400 audit(1785840430.129:2891): avc: denied { listen } for pid=19872 comm="syz.5.4176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 288.925702][T19864] loop3: detected capacity change from 0 to 512 [ 289.001839][T19864] EXT4-fs error (device loop3): ext4_get_journal_inode:5900: comm syz.3.4174: inode #1792: comm syz.3.4174: iget: illegal inode # [ 289.038264][T19864] loop3: lost filesystem error report for type 5 error -117 [ 289.040696][T19864] EXT4-fs (loop3): Remounting filesystem read-only [ 289.048696][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 289.048832][ C1] EXT4-fs (loop3): initial error at time 1785840430: ext4_get_journal_inode:5900 [ 289.048985][ C1] EXT4-fs (loop3): last error at time 1785840430: ext4_get_journal_inode:5900 [ 289.088880][T19864] EXT4-fs (loop3): no journal found [ 289.094259][T19864] EXT4-fs (loop3): can't get journal size [ 289.105241][T19864] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 289.151738][T19864] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 289.212981][T19864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.358164][T15648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.679175][T19909] loop3: detected capacity change from 0 to 128 [ 289.700218][T19909] FAT-fs (loop3): bogus number of FAT structure [ 289.706988][T19909] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 289.719034][T19909] FAT-fs (loop3): Can't find a valid FAT filesystem [ 289.999984][T19918] loop3: detected capacity change from 0 to 512 [ 290.064875][T19918] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4204: bg 0: block 393: padding at end of block bitmap is not set [ 290.085226][ T28] audit: type=1400 audit(1785840431.309:2892): avc: denied { setattr } for pid=19927 comm="syz.5.4198" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 290.131012][T19918] loop3: lost filesystem error report for type 5 error -117 [ 290.132826][T19918] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 290.141516][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 290.141586][ C1] EXT4-fs (loop3): initial error at time 1785840431: ext4_validate_block_bitmap:441 [ 290.141715][ C1] EXT4-fs (loop3): last error at time 1785840431: ext4_validate_block_bitmap:441 [ 290.192699][T19918] loop3: lost filesystem error report for type 5 error -117 [ 290.196368][T19918] EXT4-fs (loop3): 2 truncates cleaned up [ 290.252637][T19918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.292862][ T28] audit: type=1400 audit(1785840431.519:2893): avc: denied { write } for pid=19915 comm="syz.3.4204" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.343012][T15648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.492501][T19952] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4209'. [ 290.510535][T19954] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4208'. [ 291.232088][T19989] loop5: detected capacity change from 0 to 512 [ 291.250298][T19989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.263623][T19989] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.278469][ T28] audit: type=1400 audit(1785840432.509:2894): avc: denied { write } for pid=19988 comm="syz.5.4223" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 291.314580][ T28] audit: type=1400 audit(1785840432.529:2895): avc: denied { setattr } for pid=19988 comm="syz.5.4223" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 291.351978][T17253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.534974][T19999] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 291.584202][T20002] loop5: detected capacity change from 0 to 512 [ 291.591594][T20002] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 291.621809][T20002] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.4230: bad orphan inode 16 [ 291.632153][T20002] loop5: lost filesystem error report for type 5 error -117 [ 291.632330][T20002] ext4_test_bit(bit=15, block=4) = 0 [ 291.639676][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 291.639696][ C0] EXT4-fs (loop5): initial error at time 1785840432: ext4_orphan_get:1425 [ 291.639723][ C0] EXT4-fs (loop5): last error at time 1785840432: ext4_orphan_get:1425 [ 291.670363][T20002] EXT4-fs (loop5): 1 orphan inode deleted [ 291.677217][T20002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.707804][T17253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.940732][T20018] netlink: 'syz.5.4237': attribute type 3 has an invalid length. [ 291.949356][T20018] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.4237'. [ 291.972599][T20018] loop5: detected capacity change from 0 to 512 [ 292.001607][T20018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.078005][ T28] audit: type=1400 audit(1785840433.309:2896): avc: denied { write } for pid=20016 comm="syz.5.4237" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 292.185133][T17253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.246534][ T28] audit: type=1400 audit(1785840433.469:2897): avc: denied { nlmsg_write } for pid=20029 comm="syz.3.4242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 292.346444][T20031] loop3: detected capacity change from 0 to 164 [ 292.369881][T20031] iso9660: Unknown parameter 'D'@æ' [ 292.471846][T20046] tipc: Cannot configure node identity twice [ 292.550289][T20051] netlink: 'syz.3.4250': attribute type 4 has an invalid length. [ 292.579646][T20051] netlink: 'syz.3.4250': attribute type 4 has an invalid length. [ 292.980346][T20054] loop7: detected capacity change from 0 to 128 [ 293.371073][T20065] loop5: detected capacity change from 0 to 1764 [ 293.480651][T20073] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4259'. [ 293.693484][T20088] tmpfs: Bad value for 'mpol' [ 294.906963][T20127] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4278'. [ 295.018084][ T3384] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 295.029114][ T3384] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 296.476126][ T283] page_pool_release_retry() stalled pool shutdown: id 101, 1 inflight 181 sec [ 296.535693][T20076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.699533][T20157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4291'. [ 296.758136][T20160] loop3: detected capacity change from 0 to 512 [ 296.789924][T20160] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 296.987141][T20168] loop3: detected capacity change from 0 to 512 [ 297.022411][T20168] EXT4-fs: Ignoring removed oldalloc option [ 297.040418][T20168] EXT4-fs: Ignoring removed oldalloc option [ 297.066796][T17706] syz_tun (unregistering): left allmulticast mode [ 297.074855][T20168] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.4298: corrupted in-inode xattr: invalid ea_ino [ 297.095174][T20168] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 297.095667][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 297.111408][ C0] EXT4-fs (loop3): initial error at time 1785840438: ext4_iget_extra_inode:5180: inode 15 [ 297.121382][ C0] EXT4-fs (loop3): last error at time 1785840438: ext4_iget_extra_inode:5180: inode 15 [ 297.133488][T20168] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.4298: couldn't read orphan inode 15 (err -117) [ 297.150840][T20168] loop3: lost filesystem error report for type 5 error -117 [ 297.153012][T20168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.184462][ T28] audit: type=1400 audit(1785840438.409:2898): avc: denied { write } for pid=20167 comm="syz.3.4298" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 297.207403][ T28] audit: type=1400 audit(1785840438.419:2899): avc: denied { write } for pid=20167 comm="syz.3.4298" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 297.230213][ T28] audit: type=1400 audit(1785840438.439:2900): avc: denied { write } for pid=20167 comm="syz.3.4298" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 297.272200][ T28] audit: type=1400 audit(1785840438.499:2901): avc: denied { write } for pid=20167 comm="syz.3.4298" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 297.321857][T20187] loop7: detected capacity change from 0 to 512 [ 297.328934][ T28] audit: type=1400 audit(1785840438.499:2902): avc: denied { write } for pid=20167 comm="syz.3.4298" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 297.355950][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.358740][T15648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.402148][T20187] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 297.419364][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.493408][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.592501][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.779758][ T12] bridge_slave_1: left allmulticast mode [ 297.786453][ T12] bridge_slave_1: left promiscuous mode [ 297.792182][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.802610][ T12] bridge_slave_0: left allmulticast mode [ 297.823944][ T12] bridge_slave_0: left promiscuous mode [ 297.839428][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.993636][ T28] audit: type=1400 audit(1785840439.219:2903): avc: denied { write } for pid=20222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.026865][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.068742][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.082772][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 298.083313][ T28] audit: type=1400 audit(1785840439.309:2904): avc: denied { write } for pid=20247 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.124757][ T12] bond0 (unregistering): Released all slaves [ 298.254959][ T12] team0: Port device bond1 removed [ 298.261207][ T12] bond1 (unregistering): Released all slaves [ 298.291111][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 298.342807][ T12] hsr_slave_0: left promiscuous mode [ 298.356077][ T12] hsr_slave_1: left promiscuous mode [ 298.368222][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.393369][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.418712][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.435580][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.458111][ T12] veth1_macvtap: left promiscuous mode [ 298.463723][ T12] veth0_macvtap: left promiscuous mode [ 298.473801][ T12] veth1_vlan: left promiscuous mode [ 298.484943][ T12] veth0_vlan: left promiscuous mode [ 298.533905][ T28] audit: type=1400 audit(1785840439.759:2905): avc: denied { write } for pid=20251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.598653][ T28] audit: type=1400 audit(1785840439.809:2906): avc: denied { write } for pid=20262 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.681996][ T12] team0 (unregistering): Port device team_slave_1 removed [ 298.708893][ T12] team0 (unregistering): Port device team_slave_0 removed [ 298.801328][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 298.842653][T20176] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.854739][T20176] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.870338][T20176] bridge_slave_0: entered allmulticast mode [ 298.877013][T20176] bridge_slave_0: entered promiscuous mode [ 298.891795][T20176] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.901591][T20176] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.908796][T20176] bridge_slave_1: entered allmulticast mode [ 298.915403][T20176] bridge_slave_1: entered promiscuous mode [ 298.934350][T20176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.949407][T20176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.983430][T20176] team0: Port device team_slave_0 added [ 298.997255][T20176] team0: Port device team_slave_1 added [ 299.033010][T20176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.052887][T20176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.080313][T20176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.092408][ T28] audit: type=1400 audit(1785840440.319:2907): avc: denied { write } for pid=20268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.099038][T20176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.137141][T20176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.165154][T20176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.198070][T20176] hsr_slave_0: entered promiscuous mode [ 299.204342][T20176] hsr_slave_1: entered promiscuous mode [ 299.210399][T20176] debugfs: 'hsr0' already exists in 'hsr' [ 299.216265][T20176] Cannot create hsr debugfs directory [ 299.231945][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 299.418085][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 299.521270][T20176] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 299.541145][T20176] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.560821][T20176] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 299.571833][T20176] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 299.589829][T20176] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 299.609469][T20176] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.628071][T20176] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 299.640249][T20176] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 299.719776][T20176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.743631][T20176] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.766237][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.773509][ T7802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.785186][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.792276][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.820539][T20176] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 299.832354][T20176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.988754][T20176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.098233][T20176] veth0_vlan: entered promiscuous mode [ 300.117844][T20176] veth1_vlan: entered promiscuous mode [ 300.143390][T20176] veth0_macvtap: entered promiscuous mode [ 300.160416][T20176] veth1_macvtap: entered promiscuous mode [ 300.185875][T20176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.209778][T20176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.233149][ T7802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.244254][ T7802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.257514][ T7802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.277250][ T7802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.361458][T20403] loop0: detected capacity change from 0 to 512 [ 300.372022][T20399] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4331'. [ 300.378535][T20403] EXT4-fs: Ignoring removed nobh option [ 300.389209][T20403] EXT4-fs: Ignoring removed bh option [ 300.402239][T20403] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 300.423927][T20405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.447968][T20403] EXT4-fs (loop0): 1 truncate cleaned up [ 300.466236][T20403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.480394][T20405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.508819][T20403] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 300.536568][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.700528][T20428] loop0: detected capacity change from 0 to 512 [ 300.710843][T20428] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 301.619255][T20449] loop5: detected capacity change from 0 to 512 [ 301.643865][T20449] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 301.949842][T20462] loop0: detected capacity change from 0 to 512 [ 302.012453][T20462] EXT4-fs: inline encryption not supported [ 302.030461][T20462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 302.053902][T20462] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 302.117033][T20462] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -ENXIO [ 302.205633][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 302.205652][ T28] audit: type=1400 audit(1785840443.429:2929): avc: denied { write } for pid=20483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.265309][ T28] audit: type=1400 audit(1785840443.489:2930): avc: denied { write } for pid=20494 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.362860][ T28] audit: type=1400 audit(1785840443.589:2931): avc: denied { write } for pid=20496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.415881][ T28] audit: type=1400 audit(1785840443.639:2932): avc: denied { write } for pid=20507 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.511991][ T28] audit: type=1400 audit(1785840443.739:2933): avc: denied { write } for pid=20509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.558585][ T28] audit: type=1400 audit(1785840443.789:2934): avc: denied { write } for pid=20520 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.254069][ T28] audit: type=1400 audit(1785840444.479:2935): avc: denied { ioctl } for pid=20550 comm="syz.5.4343" path="socket:[58022]" dev="sockfs" ino=58022 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 305.701762][ T28] audit: type=1326 audit(1785840446.929:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20615 comm="syz.7.4365" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4c23fde99 code=0x0 [ 305.727609][T20617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4361'. [ 305.790235][T20628] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4370'. [ 305.877610][T20638] loop3: detected capacity change from 0 to 512 [ 305.897585][T20638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 305.922146][T20638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.935045][T20638] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.965424][T15648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.162764][T20661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4382'. [ 306.181639][T20661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.195832][T20661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4382'. [ 306.218311][T20661] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 306.519195][T20703] loop5: detected capacity change from 0 to 512 [ 306.528732][T20703] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.4398: corrupted in-inode xattr: e_value out of bounds [ 306.543158][T20703] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 306.543353][T20703] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.4398: couldn't read orphan inode 15 (err -117) [ 306.552652][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 306.552668][ C1] EXT4-fs (loop5): initial error at time 1785840447: ext4_iget_extra_inode:5180: inode 15 [ 306.552699][ C1] EXT4-fs (loop5): last error at time 1785840447: ext4_iget_extra_inode:5180: inode 15 [ 306.591715][T20703] loop5: lost filesystem error report for type 5 error -117 [ 306.592458][T20703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.616383][ T28] audit: type=1400 audit(1785840447.849:2937): avc: denied { write } for pid=20700 comm="syz.5.4398" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 306.693945][T17253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.864107][T20726] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4408'. [ 307.285708][T20694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.336875][T20739] tipc: Failed to remove unknown binding: 66,0,0/0:1685632747/1685632749 [ 307.374410][T20739] tipc: Failed to remove unknown binding: 66,0,0/0:1685632747/1685632748 [ 307.423964][T20749] syz_tun: entered allmulticast mode [ 307.675232][T20764] syz_tun: entered allmulticast mode [ 308.246791][T20780] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4429'. [ 308.289167][T20784] loop0: detected capacity change from 0 to 1024 [ 308.312731][T20784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.368705][ T28] audit: type=1400 audit(1785840449.599:2938): avc: denied { write } for pid=20783 comm="syz.0.4430" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 308.583586][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.678149][T20807] syz_tun: entered allmulticast mode [ 308.693888][T20808] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4437'. [ 308.782448][T20819] loop7: detected capacity change from 0 to 512 [ 308.794457][T20819] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.4440: corrupted in-inode xattr: e_value out of bounds [ 308.809611][T20819] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 308.810689][T20819] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4440: couldn't read orphan inode 15 (err -117) [ 308.819893][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 308.819915][ C1] EXT4-fs (loop7): initial error at time 1785840450: ext4_iget_extra_inode:5180: inode 15 [ 308.819943][ C1] EXT4-fs (loop7): last error at time 1785840450: ext4_iget_extra_inode:5180: inode 15 [ 308.865977][T20819] loop7: lost filesystem error report for type 5 error -117 [ 308.878886][T20819] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.914253][ T28] audit: type=1400 audit(1785840450.139:2939): avc: denied { write } for pid=20818 comm="syz.7.4440" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 309.041690][T15865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.284898][T20867] syz_tun: entered allmulticast mode [ 310.320408][ T28] audit: type=1400 audit(1785840451.549:2940): avc: denied { write } for pid=20859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.372069][ T28] audit: type=1400 audit(1785840451.599:2941): avc: denied { write } for pid=20874 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.948228][T20900] netlink: 436 bytes leftover after parsing attributes in process `syz.7.4468'. [ 310.966461][T20900] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4468'. [ 311.085548][T20900] loop7: detected capacity change from 0 to 512 [ 311.115440][T20900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 311.130261][T20900] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 311.169325][T20900] EXT4-fs (loop7): 1 truncate cleaned up [ 311.199080][T20900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.274011][ T28] audit: type=1400 audit(1785840452.499:2942): avc: denied { write } for pid=20899 comm="syz.7.4468" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 311.440309][ T28] audit: type=1400 audit(1785840452.669:2943): avc: denied { write } for pid=20909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.502808][ T28] audit: type=1400 audit(1785840452.729:2944): avc: denied { write } for pid=20922 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.572177][T20928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4473'. [ 311.583243][T20926] loop5: detected capacity change from 0 to 512 [ 311.599065][T20926] EXT4-fs: inline encryption not supported [ 311.615029][T20928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4473'. [ 311.638300][T20926] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c198, mo2=0002] [ 311.648411][T20926] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.4474: corrupted in-inode xattr: e_value size too large [ 311.673069][T20926] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 311.685776][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 311.702468][ C1] EXT4-fs (loop5): initial error at time 1785840452: ext4_iget_extra_inode:5180: inode 15 [ 311.712948][ C1] EXT4-fs (loop5): last error at time 1785840452: ext4_iget_extra_inode:5180: inode 15 [ 311.731828][T20926] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.4474: couldn't read orphan inode 15 (err -117) [ 311.797328][T20926] loop5: lost filesystem error report for type 5 error -117 [ 311.798057][T20926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.909032][T15865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.943409][T20937] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4474'. [ 312.002314][T20942] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4479'. [ 312.166109][T17253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.573523][ T28] audit: type=1400 audit(1785840453.799:2945): avc: denied { write } for pid=20951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.607830][ T28] audit: type=1400 audit(1785840453.839:2946): avc: denied { write } for pid=20962 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.004780][T20982] netlink: 436 bytes leftover after parsing attributes in process `syz.0.4488'. [ 313.017330][T20982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4488'. [ 313.119396][T20982] loop0: detected capacity change from 0 to 512 [ 313.141619][T20982] EXT4-fs: Ignoring removed nomblk_io_submit option [ 313.164418][T20982] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 313.171926][T20992] netlink: 830 bytes leftover after parsing attributes in process `syz.6.4503'. [ 313.205130][T20982] EXT4-fs (loop0): 1 truncate cleaned up [ 313.231418][T20982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.263378][ T28] audit: type=1400 audit(1785840454.489:2947): avc: denied { write } for pid=20980 comm="syz.0.4488" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 313.696412][T21015] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4499'. [ 314.017108][ T28] audit: type=1400 audit(1785840455.239:2948): avc: denied { write } for pid=21033 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.053340][T21030] loop3: detected capacity change from 0 to 512 [ 314.078969][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.082333][T21035] loop7: detected capacity change from 0 to 512 [ 314.107418][T21030] EXT4-fs: Ignoring removed mblk_io_submit option [ 314.136231][ T28] audit: type=1400 audit(1785840455.369:2949): avc: denied { write } for pid=21050 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.144657][T21030] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 314.211017][ T28] audit: type=1326 audit(1785840455.409:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.6.4512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c76ede99 code=0x7ffc0000 [ 314.217004][T21030] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 314.238350][ T28] audit: type=1326 audit(1785840455.409:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.6.4512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c76ede99 code=0x7ffc0000 [ 314.272050][ T28] audit: type=1326 audit(1785840455.419:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.6.4512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f96c76ede99 code=0x7ffc0000 [ 314.279459][T21035] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 314.300684][ T28] audit: type=1326 audit(1785840455.419:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.6.4512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c76ede99 code=0x7ffc0000 [ 314.319855][T21030] System zones: 1-12 [ 314.339827][T21030] EXT4-fs (loop3): orphan cleanup on readonly fs [ 314.341997][T21035] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 1024: comm syz.7.4507: invalid block [ 314.363247][T21030] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4519: bg 0: block 361: padding at end of block bitmap is not set [ 314.378762][T21030] loop3: lost filesystem error report for type 5 error -117 [ 314.380720][ T28] audit: type=1326 audit(1785840455.419:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.6.4512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c76ede99 code=0x7ffc0000 [ 314.388082][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 314.388098][ C0] EXT4-fs (loop3): initial error at time 1785840455: ext4_validate_block_bitmap:441 [ 314.388122][ C0] EXT4-fs (loop3): last error at time 1785840455: ext4_validate_block_bitmap:441 [ 314.399013][T21035] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 314.413970][T21030] EXT4-fs (loop3): Remounting filesystem read-only [ 314.420537][ T28] audit: type=1326 audit(1785840455.419:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.6.4512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f96c76ede99 code=0x7ffc0000 [ 314.490445][T21030] EXT4-fs (loop3): 1 truncate cleaned up [ 314.496467][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 314.496506][ C0] EXT4-fs (loop7): initial error at time 1785840455: ext4_get_branch:178: inode 13: block 1024 [ 314.496663][ C0] EXT4-fs (loop7): last error at time 1785840455: ext4_get_branch:178: inode 13: block 1024 [ 314.528796][T21035] EXT4-fs (loop7): 1 truncate cleaned up [ 314.547065][ T28] audit: type=1326 audit(1785840455.419:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.6.4512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c76ede99 code=0x7ffc0000 [ 314.574316][T21035] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.592676][T21030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 314.608506][ T28] audit: type=1326 audit(1785840455.419:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21049 comm="syz.6.4512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c76ede99 code=0x7ffc0000 [ 314.618706][T21065] netlink: 'syz.6.4515': attribute type 10 has an invalid length. [ 314.681220][T21065] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.698722][T21065] bond0: (slave team0): Enslaving as an active interface with an up link [ 314.717142][T20904] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 314.752681][T20904] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 314.772581][T15865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.785015][T15648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 314.878192][T21076] tipc: Cannot configure node identity twice [ 314.922138][T21078] sctp: [Deprecated]: syz.7.4522 (pid 21078) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.922138][T21078] Use struct sctp_sack_info instead [ 314.988213][T21082] tipc: Enabled bearer , priority 0 [ 315.041081][T21082] +: renamed from syzkaller0 [ 315.051846][T21082] tipc: Disabling bearer [ 315.183382][T21092] loop0: detected capacity change from 0 to 512 [ 315.208781][T21092] EXT4-fs: Ignoring removed mblk_io_submit option [ 315.228904][T21092] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 315.270233][T21092] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 315.289256][T21092] System zones: 1-12 [ 315.294576][T21092] EXT4-fs (loop0): orphan cleanup on readonly fs [ 315.304679][T21092] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4529: bg 0: block 361: padding at end of block bitmap is not set [ 315.320946][T21092] loop0: lost filesystem error report for type 5 error -117 [ 315.322918][T21092] EXT4-fs (loop0): Remounting filesystem read-only [ 315.330519][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 315.330819][ C1] EXT4-fs (loop0): initial error at time 1785840456: ext4_validate_block_bitmap:441 [ 315.330937][ C1] EXT4-fs (loop0): last error at time 1785840456: ext4_validate_block_bitmap:441 [ 315.371987][T21092] EXT4-fs (loop0): 1 truncate cleaned up [ 315.384587][T21092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 315.466090][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 315.486342][ T3397] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 315.499050][ T3397] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 315.555646][T21117] syzkaller1: entered promiscuous mode [ 315.575761][T21117] syzkaller1: entered allmulticast mode [ 315.684651][T21127] loop0: detected capacity change from 0 to 512 [ 315.710173][T21127] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 315.731763][T21131] tipc: Enabling of bearer rejected, failed to enable media [ 315.768967][T21127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.785820][T21127] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.872536][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.034702][T21156] tmpfs: Bad value for 'size' [ 316.431295][T21175] loop7: detected capacity change from 0 to 512 [ 316.459265][T21175] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 316.505789][T21175] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.531510][T21175] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.624518][T15865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.657741][T21185] sctp: [Deprecated]: syz.7.4566 (pid 21185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.657741][T21185] Use struct sctp_sack_info instead [ 316.941225][T21202] loop5: detected capacity change from 0 to 1024 [ 316.990781][T21202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.184978][T21214] __nla_validate_parse: 1 callbacks suppressed [ 317.185001][T21214] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4577'. [ 317.465112][T17253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.977556][T21266] loop3: detected capacity change from 0 to 128 [ 318.011973][T21266] loop3: detected capacity change from 0 to 1024 [ 318.018846][T21266] EXT4-fs: Ignoring removed bh option [ 318.054665][T21269] loop0: detected capacity change from 0 to 512 [ 318.073836][T21269] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.4601: iget: bad extended attribute block 1 [ 318.086649][T21269] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 318.086831][T21269] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.4601: couldn't read orphan inode 15 (err -117) [ 318.096038][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 318.096061][ C0] EXT4-fs (loop0): initial error at time 1785840459: ext4_orphan_get:1399: inode 15 [ 318.096098][ C0] EXT4-fs (loop0): last error at time 1785840459: ext4_orphan_get:1399: inode 15 [ 318.134418][T21266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.154897][T21266] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 318.168382][T21269] loop0: lost filesystem error report for type 5 error -117 [ 318.168909][T21269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.227814][T21268] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 13: comm syz.0.4601: lblock 0 mapped to illegal pblock 13 (length 1) [ 318.401716][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.403575][T15648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.457963][T21280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4612'. [ 319.051339][T21289] loop0: detected capacity change from 0 to 4096 [ 319.103196][T21289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.117410][T21308] ref_ctr increment failed for inode: 0x594 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811a4bc600 [ 319.127867][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 319.127914][ T28] audit: type=1400 audit(1785840460.349:2972): avc: denied { write } for pid=21288 comm="syz.0.4607" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.130607][T21307] uprobe: syz.7.4615:21307 failed to unregister, leaking uprobe [ 319.196585][T21314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.205129][T21314] team0: Failed to send port change of device bond1 via netlink (err -105) [ 319.213939][T21314] team0: Failed to send options change via netlink (err -105) [ 319.222008][T21314] team0: Port device bond1 added [ 319.409990][T21325] loop7: detected capacity change from 0 to 4096 [ 319.434088][T21325] EXT4-fs: dax option not supported [ 319.657985][T21289] Set syz1 is full, maxelem 65536 reached [ 319.683845][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.172977][T21384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4648'. [ 320.429344][T21397] loop0: detected capacity change from 0 to 128 [ 320.454676][T21397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 320.467219][T21397] System zones: 1-3, 19-19, 35-36 [ 320.484375][T21397] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 320.529049][T21397] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 320.588021][T21382] loop3: detected capacity change from 0 to 764 [ 320.605655][T21382] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 320.643020][T20176] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.753933][T21405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4657'. [ 320.818858][T21405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.845143][T21405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.992449][T21425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.041148][T21430] uprobe: syz.6.4664:21430 failed to unregister, leaking uprobe [ 321.052433][T21430] uprobe: syz.6.4664:21430 failed to unregister, leaking uprobe [ 321.084111][T21433] loop7: detected capacity change from 0 to 128 [ 321.113560][T21433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 321.121669][T21433] System zones: 1-3, 19-19, 35-36 [ 321.127605][T21433] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 321.140381][T21433] ext4 filesystem being mounted at /285/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 321.188555][T15865] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 321.671921][T21482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4689'. [ 321.745918][T21482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.756009][T21482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.799629][T21491] netlink: 'syz.5.4702': attribute type 10 has an invalid length. [ 321.822557][T21491] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.832405][T21491] bond0: (slave team0): Enslaving as an active interface with an up link [ 322.163135][T21505] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4696'. [ 322.737415][T21515] loop5: detected capacity change from 0 to 512 [ 322.788559][T21515] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 322.813805][T21515] EXT4-fs (loop5): 1 truncate cleaned up [ 322.824706][T21515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.928555][T21537] netlink: 'syz.0.4714': attribute type 2 has an invalid length. [ 323.549805][T17253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.690616][T21547] tipc: Cannot configure node identity twice [ 323.710120][T21547] tipc: Enabled bearer , priority 1 [ 323.726306][T21546] tipc: Resetting bearer [ 323.755966][T21546] tipc: Disabling bearer [ 324.453309][T21557] loop5: detected capacity change from 0 to 4096 [ 324.512633][T21557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.537616][ T28] audit: type=1400 audit(1785840465.759:2973): avc: denied { write } for pid=21556 comm="syz.5.4720" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 324.567051][T17253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.536534][T21574] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4723'. [ 326.603501][T21595] loop0: detected capacity change from 0 to 512 [ 326.619302][T21595] EXT4-fs: inline encryption not supported [ 326.632853][T21595] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c198, mo2=0002] [ 326.642780][T21595] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.4737: corrupted in-inode xattr: e_value size too large [ 326.687438][T21595] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 326.687671][T21595] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.4737: couldn't read orphan inode 15 (err -117) [ 326.697020][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 326.697043][ C1] EXT4-fs (loop0): initial error at time 1785840467: ext4_iget_extra_inode:5180: inode 15 [ 326.697083][ C1] EXT4-fs (loop0): last error at time 1785840467: ext4_iget_extra_inode:5180: inode 15 [ 326.759189][T21595] loop0: lost filesystem error report for type 5 error -117 [ 326.759856][T21595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.909557][T21602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4737'. [ 327.204104][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.411319][T21626] loop0: detected capacity change from 0 to 512 [ 327.439006][T21626] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 327.476032][T21626] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.4747: bad orphan inode 16 [ 327.516510][T21626] loop0: lost filesystem error report for type 5 error -117 [ 327.520609][T21626] ext4_test_bit(bit=15, block=4) = 0 [ 327.527994][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 327.528010][ C0] EXT4-fs (loop0): initial error at time 1785840468: ext4_orphan_get:1425 [ 327.528036][ C0] EXT4-fs (loop0): last error at time 1785840468: ext4_orphan_get:1425 [ 327.556810][T21626] EXT4-fs (loop0): 1 orphan inode deleted [ 327.562984][T21626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.644292][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.766875][T21639] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.774011][T21639] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.781513][T21639] bridge_slave_0: entered allmulticast mode [ 338.788180][T21639] bridge_slave_0: entered promiscuous mode [ 338.804067][T17437] syz_tun (unregistering): left allmulticast mode [ 338.813031][T21639] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.820421][T21639] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.828998][T21639] bridge_slave_1: entered allmulticast mode [ 338.835788][T21639] bridge_slave_1: entered promiscuous mode [ 338.852794][T21639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.863401][T21639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.882604][T21639] team0: Port device team_slave_0 added [ 338.889303][T21639] team0: Port device team_slave_1 added [ 338.904858][T21639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.911886][T21639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.937896][T21639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.949120][T21639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.956124][T21639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.982104][T21639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.009541][T21639] hsr_slave_0: entered promiscuous mode [ 339.015684][T21639] hsr_slave_1: entered promiscuous mode [ 339.021729][T21639] debugfs: 'hsr0' already exists in 'hsr' [ 339.027500][T21639] Cannot create hsr debugfs directory [ 339.138394][ T28] audit: type=1400 audit(1785840480.369:2974): avc: denied { write } for pid=21656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.172196][ T28] audit: type=1400 audit(1785840480.399:2975): avc: denied { write } for pid=21668 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.263229][ T28] audit: type=1400 audit(1785840480.489:2976): avc: denied { write } for pid=21670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.287786][T21639] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.296637][T21639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 339.304383][T21639] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.313364][T21639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.321332][T21639] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.328634][ T28] audit: type=1400 audit(1785840480.549:2977): avc: denied { write } for pid=21681 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.352484][T21639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 339.360228][T21639] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.369446][T21639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 339.384791][T21639] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.391896][T21639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.399249][T21639] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.406332][T21639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.437837][T21639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.450339][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.460530][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.473593][T21639] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.480250][ T28] audit: type=1400 audit(1785840480.699:2978): avc: denied { write } for pid=21683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.509098][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.516238][ T7784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.523805][ T28] audit: type=1400 audit(1785840480.749:2979): avc: denied { write } for pid=21700 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.549322][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.556429][ T7784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.645857][ T28] audit: type=1400 audit(1785840480.869:2980): avc: denied { write } for pid=21702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.684302][ T28] audit: type=1400 audit(1785840480.909:2981): avc: denied { write } for pid=21720 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.729974][T21639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.791066][ T28] audit: type=1400 audit(1785840481.019:2982): avc: denied { write } for pid=21725 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.823365][T21639] veth0_vlan: entered promiscuous mode [ 339.831437][T21639] veth1_vlan: entered promiscuous mode [ 339.848513][ T28] audit: type=1400 audit(1785840481.079:2983): avc: denied { write } for pid=21742 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.848921][T21639] veth0_macvtap: entered promiscuous mode [ 339.880639][T21639] veth1_macvtap: entered promiscuous mode [ 339.892564][T21639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.904882][T21639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.917606][ T7795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.927801][ T7795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.943016][ T7795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.952509][ T7795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.899112][T21873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4751'. [ 341.023912][T21881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.032424][T21881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.006129][T21893] syzkaller0: entered promiscuous mode [ 342.583629][T21911] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 345.874260][T21946] cgroup: Unexpected value for 'nofavordynmods' [ 346.803242][T21977] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4803'. [ 346.914823][T21991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4808'. [ 346.924129][T21991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4808'. [ 347.146826][T22003] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4815'. [ 347.229542][T21998] loop5: detected capacity change from 0 to 512 [ 347.282945][T22013] loop0: detected capacity change from 0 to 512 [ 347.339780][T22013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.362352][T22013] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.435731][T21998] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.4813: ea_inode file size=458758 entry size=16777216 [ 347.468530][T21998] ------------[ cut here ]------------ [ 347.474391][T21998] EA inode 11 i_nlink=2 [ 347.474458][T21998] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.5.4813/21998 [ 347.490340][T21998] Modules linked in: [ 347.494790][T21998] CPU: 0 UID: 0 PID: 21998 Comm: syz.5.4813 Not tainted syzkaller #0 PREEMPT(lazy) [ 347.504961][T21998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 347.515710][T21998] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 347.522871][T21998] Code: 86 ba 96 ff 49 8d 7e 40 4c 8d 2d fb 98 5a 05 e8 26 a0 b5 ff 49 8b 6e 40 4c 89 e7 e8 5a 9b b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 01 02 da 03 90 90 90 90 90 90 90 [ 347.542971][T21998] RSP: 0018:ffffc90004f4b7f8 EFLAGS: 00010246 [ 347.549771][T21998] RAX: ffff88811a6f1c70 RBX: ffff88811b4ff788 RCX: ffffffff81c29d46 [ 347.559121][T21998] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3630 [ 347.568140][T21998] RBP: 000000000000000b R08: 000188811b4ff73b R09: 0000000000000000 [ 347.576693][T21998] R10: ffffc90004f4b728 R11: 0001c90004f4b728 R12: ffff88811b4ff738 [ 347.586270][T21998] R13: ffffffff871d3630 R14: ffff88811b4ff6f0 R15: 0000000000000001 [ 347.594829][T21998] FS: 00007f172e9d76c0(0000) GS:ffff8882ae8cc000(0000) knlGS:0000000000000000 [ 347.604141][T21998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.611260][T21998] CR2: 0000000000000000 CR3: 000000011e70c000 CR4: 00000000003506f0 [ 347.621188][T21998] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 347.629520][T21998] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 347.638000][T21998] Call Trace: [ 347.641470][T21998] [ 347.644570][T21998] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 347.651070][T21998] ext4_xattr_delete_inode+0x6b5/0x790 [ 347.656850][T21998] ext4_evict_inode+0xb18/0xdf0 [ 347.661929][T21998] ? __pfx_ext4_evict_inode+0x10/0x10 [ 347.667859][T21998] evict+0x2a5/0x510 [ 347.671933][T21998] ? iput+0x228/0x5a0 [ 347.676319][T21998] iput+0x430/0x5a0 [ 347.680300][T21998] ext4_process_orphan+0x1a4/0x1c0 [ 347.685571][T21998] ext4_orphan_cleanup+0x6a6/0xa10 [ 347.691210][T21998] ext4_fill_super+0x33ab/0x3760 [ 347.696519][T21998] ? sb_set_blocksize+0xf3/0x170 [ 347.701700][T21998] ? __pfx_ext4_fill_super+0x10/0x10 [ 347.707419][T21998] get_tree_bdev_flags+0x291/0x300 [ 347.712746][T21998] ? __pfx_ext4_fill_super+0x10/0x10 [ 347.718560][T21998] get_tree_bdev+0x1f/0x30 [ 347.723580][T21998] ext4_get_tree+0x1c/0x30 [ 347.728250][T21998] vfs_get_tree+0x57/0x1d0 [ 347.732950][T21998] do_new_mount+0x288/0x8d0 [ 347.737870][T21998] path_mount+0x4ad/0xb90 [ 347.742360][T21998] __se_sys_mount+0x28c/0x2e0 [ 347.747630][T21998] __x64_sys_mount+0x67/0x80 [ 347.752881][T21998] x64_sys_call+0x2d61/0x3020 [ 347.757811][T21998] do_syscall_64+0x136/0x3c0 [ 347.762590][T21998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.768829][T21998] RIP: 0033:0x7f172ff7f10a [ 347.773370][T21998] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.793339][T21998] RSP: 002b:00007f172e9d6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 347.802089][T21998] RAX: ffffffffffffffda RBX: 00007f172e9d6ee0 RCX: 00007f172ff7f10a [ 347.810350][T21998] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f172e9d6ea0 [ 347.818579][T21998] RBP: 00002000000009c0 R08: 00007f172e9d6ee0 R09: 0000000000800718 [ 347.827220][T21998] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 347.836051][T21998] R13: 00007f172e9d6ea0 R14: 000000000000048d R15: 0000200000000200 [ 347.844280][T21998] [ 347.847650][T21998] ---[ end trace 0000000000000000 ]--- [ 347.854386][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.864019][T21998] EXT4-fs (loop5): 1 orphan inode deleted [ 347.875526][T21998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.914558][T22026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4824'. [ 347.936697][T22030] syz_tun: left allmulticast mode [ 347.942559][T22030] ip6t_REJECT: ECHOREPLY is not supported [ 348.128160][T17253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.324745][T22058] cgroup: Unexpected value for 'nofavordynmods' [ 348.389932][T22061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4838'. [ 348.417686][T22061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4838'. [ 348.606195][T22071] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.4843'. [ 348.635249][T22071] openvswitch: netlink: Key type 386 is out of range max 32 [ 349.368634][T22098] loop3: detected capacity change from 0 to 512 [ 349.413113][T22098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.463772][T22098] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.599028][T22109] loop2: detected capacity change from 0 to 512 [ 349.681066][T15648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.739787][T22109] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.4856: ea_inode file size=458758 entry size=16777216 [ 349.770082][T22109] EXT4-fs (loop2): 1 orphan inode deleted [ 349.784471][T22109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.858645][T21639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.869729][T22125] loop3: detected capacity change from 0 to 1764 [ 349.918603][T22131] tipc: Failed to remove unknown binding: 66,0,0/0:1553908821/1553908822 [ 349.947828][T22131] tipc: Failed to remove unknown binding: 66,0,0/0:1553908821/1553908822 [ 349.970674][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 349.970689][ T28] audit: type=1326 audit(1785840491.199:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.6.4862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c76ede99 code=0x7ffc0000 [ 350.010182][ T28] audit: type=1326 audit(1785840491.199:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.6.4862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c76ede99 code=0x7ffc0000 [ 350.053584][ T28] audit: type=1326 audit(1785840491.199:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.6.4862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c76ede99 code=0x7ffc0000 [ 350.084275][ T28] audit: type=1326 audit(1785840491.209:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.6.4862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f96c76ede99 code=0x7ffc0000 [ 350.109984][ T28] audit: type=1326 audit(1785840491.269:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.6.4862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96c76ae6ce code=0x7ffc0000 [ 350.136073][ T28] audit: type=1326 audit(1785840491.269:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.6.4862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96c76ae6ce code=0x7ffc0000 [ 350.162901][ T28] audit: type=1326 audit(1785840491.269:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.6.4862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96c76ae6ce code=0x7ffc0000 [ 350.189701][ T28] audit: type=1326 audit(1785840491.279:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.6.4862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96c76ae6ce code=0x7ffc0000 [ 350.218110][ T28] audit: type=1326 audit(1785840491.279:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.6.4862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96c76ae6ce code=0x7ffc0000 [ 350.269523][T22141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4868'. [ 350.279463][ T28] audit: type=1326 audit(1785840491.279:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22122 comm="syz.6.4862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96c76ae6ce code=0x7ffc0000 [ 350.391753][T22150] tipc: Failed to remove unknown binding: 66,0,0/2099199:787966520/787966521 [ 350.405219][T22150] tipc: Failed to remove unknown binding: 66,0,0/2099199:787966520/787966521 [ 350.495888][T22156] netlink: 'syz.5.4875': attribute type 4 has an invalid length. [ 350.509012][T22156] netlink: 'syz.5.4875': attribute type 4 has an invalid length. [ 350.594959][T22156] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.602229][T22156] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.653795][T22163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4879'. [ 350.694234][T22156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.715212][T22156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.750591][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.765427][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.775119][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.802455][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.837872][T22173] syz_tun (unregistering): left allmulticast mode [ 350.880512][T22167] loop0: detected capacity change from 0 to 8192 [ 351.272276][T22196] loop3: detected capacity change from 0 to 512 [ 351.402141][T22196] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.4893: ea_inode file size=458758 entry size=16777216 [ 351.446291][T22196] EXT4-fs (loop3): 1 orphan inode deleted [ 351.455011][T22196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.468893][T22205] macvlan0: entered allmulticast mode [ 351.484719][T22205] veth1_vlan: entered allmulticast mode [ 351.499054][T22205] veth1_vlan: left allmulticast mode [ 351.519242][T22205] macvlan0 (unregistering): left allmulticast mode [ 351.561592][T15648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.622583][T22212] loop0: detected capacity change from 0 to 512 [ 351.642156][T22212] EXT4-fs: Ignoring removed nobh option [ 351.661566][T22212] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.4900: corrupted in-inode xattr: overlapping e_value [ 351.677048][T22212] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 351.677205][T22212] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.4900: couldn't read orphan inode 15 (err -117) [ 351.686441][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 351.686462][ C0] EXT4-fs (loop0): initial error at time 1785840492: ext4_iget_extra_inode:5180: inode 15 [ 351.686510][ C0] EXT4-fs (loop0): last error at time 1785840492: ext4_iget_extra_inode:5180: inode 15 [ 351.725755][T22212] loop0: lost filesystem error report for type 5 error -117 [ 351.727204][T22212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.491126][T22238] tipc: Failed to remove unknown binding: 66,0,0/0:3897201934/3897201935 [ 352.507983][T22238] tipc: Failed to remove unknown binding: 66,0,0/0:3897201934/3897201935 [ 352.766717][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.033090][T22247] loop0: detected capacity change from 0 to 512 [ 353.069444][T22261] __nla_validate_parse: 8 callbacks suppressed [ 353.069462][T22261] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4916'. [ 353.164879][T22261] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.172135][T22261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.274896][T22247] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.4909: ea_inode file size=458758 entry size=16777216 [ 353.316196][T22247] EXT4-fs (loop0): 1 orphan inode deleted [ 353.332713][T22247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.404903][T22268] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4919'. [ 353.426831][T22268] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4919'. [ 353.444894][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.468927][T22268] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4919'. [ 353.541864][T22274] loop0: detected capacity change from 0 to 1764 [ 354.052557][T22298] loop3: detected capacity change from 0 to 512 [ 354.085349][T22298] EXT4-fs: Ignoring removed orlov option [ 354.148115][T22298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 354.196303][T15648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.199397][T22310] loop5: detected capacity change from 0 to 128 [ 354.269129][T22310] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 354.291415][T22310] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.362116][T17253] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 354.474039][T22332] loop3: detected capacity change from 0 to 1024 [ 354.753858][T22356] loop5: detected capacity change from 0 to 256 [ 355.764518][T22381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4966'. [ 355.888249][T22384] xt_hashlimit: size too large, truncated to 1048576 [ 356.294747][T22411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4986'. [ 356.434451][T22426] loop3: detected capacity change from 0 to 128 [ 356.463651][T22426] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 356.480749][T22426] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.508621][T15648] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 356.787266][ T283] page_pool_release_retry() stalled pool shutdown: id 101, 1 inflight 241 sec [ 357.327225][T22459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4992'. [ 357.361487][T22459] syz_tun (unregistering): left allmulticast mode [ 357.389948][ T28] kauditd_printk_skb: 464 callbacks suppressed [ 357.389960][ T28] audit: type=1400 audit(1785840498.619:3488): avc: denied { write } for pid=22462 comm="syz.5.4994" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 357.422276][T22465] loop0: detected capacity change from 0 to 128 [ 357.448697][T22465] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 357.461427][T22465] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.483358][T20176] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 357.637839][T22474] netlink: 'syz.0.4996': attribute type 4 has an invalid length. [ 357.773089][ T28] audit: type=1400 audit(1785840498.999:3489): avc: denied { prog_load } for pid=22481 comm="syz.2.5003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.874381][T22484] loop3: detected capacity change from 0 to 512 [ 357.882180][T22484] EXT4-fs: Ignoring removed nobh option [ 357.897376][T22484] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.5004: corrupted in-inode xattr: overlapping e_value [ 357.929962][T22484] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 357.930279][T22484] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5004: couldn't read orphan inode 15 (err -117) [ 357.939583][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 357.939599][ C1] EXT4-fs (loop3): initial error at time 1785840499: ext4_iget_extra_inode:5180: inode 15 [ 357.939624][ C1] EXT4-fs (loop3): last error at time 1785840499: ext4_iget_extra_inode:5180: inode 15 [ 358.000243][T22484] loop3: lost filesystem error report for type 5 error -117 [ 358.000816][T22484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.084563][T22489] loop0: detected capacity change from 0 to 128 [ 358.159678][T22489] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 358.166688][ T28] audit: type=1400 audit(1785840499.389:3490): avc: denied { prog_run } for pid=22485 comm="syz.2.5005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 358.195169][T22489] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 358.275483][ T7784] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 358.461546][T22495] loop0: detected capacity change from 0 to 256 [ 358.652724][ T28] audit: type=1326 audit(1785840499.879:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22498 comm="syz.6.5010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c76ede99 code=0x7ffc0000 [ 358.748798][ T28] audit: type=1326 audit(1785840499.879:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22498 comm="syz.6.5010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f96c76ede99 code=0x7ffc0000 [ 358.831859][ T28] audit: type=1326 audit(1785840499.969:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22498 comm="syz.6.5010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c76ede99 code=0x7ffc0000 [ 358.921473][ T28] audit: type=1326 audit(1785840500.029:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22498 comm="syz.6.5010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c76ede99 code=0x7ffc0000 [ 358.923296][T22512] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5015'. [ 358.995895][ T28] audit: type=1400 audit(1785840500.089:3495): avc: denied { map_create } for pid=22508 comm="syz.2.5014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 359.063752][ T28] audit: type=1400 audit(1785840500.149:3496): avc: denied { map_read map_write } for pid=22511 comm="syz.0.5016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 359.236275][T15648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.255590][T22519] loop0: detected capacity change from 0 to 764 [ 359.300274][T22519] rock: directory entry would overflow storage [ 359.310805][T22519] rock: sig=0x5245, size=8, remaining=5 [ 359.470706][ T28] audit: type=1326 audit(1785840500.699:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22536 comm="syz.0.5026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb684b2de99 code=0x7ffc0000 [ 359.849723][T22554] netlink: 'syz.0.5032': attribute type 11 has an invalid length. [ 360.170690][T22574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5040'. [ 360.204537][T22574] team0: Failed to send options change via netlink (err -105) [ 360.219196][T22574] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 360.229791][T22563] netlink: 'syz.2.5036': attribute type 4 has an invalid length. [ 360.239293][T22574] team0: Port device team_slave_0 removed [ 360.333971][T22580] syzkaller0: entered promiscuous mode [ 360.345450][T22580] syzkaller0: entered allmulticast mode [ 360.486087][T22590] uprobe: syz.2.5048:22590 failed to unregister, leaking uprobe [ 360.499371][T22590] uprobe: syz.2.5048:22590 failed to unregister, leaking uprobe [ 360.583791][T22600] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5052'. [ 360.733978][T22608] netlink: 'syz.5.5055': attribute type 4 has an invalid length. [ 361.035242][T22623] tipc: Failed to remove unknown binding: 66,0,0/2099199:2287666366/2287666368 [ 361.056531][T22623] tipc: Failed to remove unknown binding: 66,0,0/2099199:2287666366/2287666367 [ 361.069793][T22621] loop5: detected capacity change from 0 to 764 [ 361.071995][T22623] tipc: Failed to remove unknown binding: 66,0,0/2099199:2287666366/2287666368 [ 361.086039][T22623] tipc: Failed to remove unknown binding: 66,0,0/2099199:2287666366/2287666367 [ 361.099486][T22621] rock: directory entry would overflow storage [ 361.106348][T22621] rock: sig=0x5245, size=8, remaining=5 [ 361.376336][T22644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5069'. [ 361.408073][T22644] netlink: 'syz.3.5069': attribute type 5 has an invalid length. [ 361.416162][T22644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5069'. [ 361.534530][T22665] netlink: 'syz.2.5079': attribute type 11 has an invalid length. [ 361.550070][T22654] loop3: detected capacity change from 0 to 128 [ 361.579122][T22654] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 361.626452][T22654] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 361.695479][ T7784] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 362.187294][T22686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5087'. [ 362.322750][T22699] syzkaller0: entered promiscuous mode [ 362.331482][T22699] syzkaller0: entered allmulticast mode [ 362.600500][T22667] syz.2.5080 (22667) used greatest stack depth: 8768 bytes left [ 363.319134][T22732] 9pnet_fd: p9_fd_create_unix (22732): problem connecting socket: ./file0: -111 [ 363.395644][T22739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5105'. [ 363.720319][T22753] loop5: detected capacity change from 0 to 512 [ 363.755946][T22753] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 363.774625][T22758] netlink: 'syz.6.5126': attribute type 4 has an invalid length. [ 363.801566][T22753] EXT4-fs (loop5): 1 truncate cleaned up [ 363.855468][T22766] ieee802154 phy0 wpan0: encryption failed: -22 [ 363.916270][T22753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.981804][T17253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.092752][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 364.092768][ T28] audit: type=1400 audit(1785840505.319:3502): avc: denied { bind } for pid=22789 comm="syz.5.5129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 364.129089][T22788] loop2: detected capacity change from 0 to 512 [ 364.152893][T22788] EXT4-fs: Ignoring removed bh option [ 364.172649][T22788] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 364.250576][T22788] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.5130: iget: bad i_size value: 3298534883338 [ 364.281064][T22788] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 364.284030][T22788] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.5130: couldn't read orphan inode 15 (err -117) [ 364.294461][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 364.294660][ C1] EXT4-fs (loop2): initial error at time 1785840505: ext4_orphan_get:1399: inode 15 [ 364.295240][ C1] EXT4-fs (loop2): last error at time 1785840505: ext4_orphan_get:1399: inode 15 [ 364.340161][T22788] loop2: lost filesystem error report for type 5 error -117 [ 364.369657][T22788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.448604][T21639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.222589][T22884] ieee802154 phy0 wpan0: encryption failed: -22 [ 365.460114][T22926] file system registered [ 365.462972][ T28] audit: type=1400 audit(1785840506.689:3503): avc: denied { write } for pid=22922 comm="syz.2.5148" name="functions" dev="configfs" ino=12181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 365.482709][T22926] read descriptors [ 365.550442][ T28] audit: type=1400 audit(1785840506.709:3504): avc: denied { mount } for pid=22922 comm="syz.2.5148" name="/" dev="functionfs" ino=65406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 365.617158][ T28] audit: type=1400 audit(1785840506.779:3505): avc: denied { unmount } for pid=21639 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 365.642250][T22941] tipc: Started in network mode [ 365.661591][T22941] tipc: Node identity 0e932c0d1f8, cluster identity 4711 [ 365.676207][T22941] tipc: Enabled bearer , priority 0 [ 365.739462][T22941] syzkaller0: entered promiscuous mode [ 365.750817][T22941] syzkaller0: entered allmulticast mode [ 365.768284][T22941] tipc: Resetting bearer [ 365.966926][T21639] ffs_data_put(): freeing [ 365.971666][T22940] tipc: Resetting bearer [ 365.993426][T22940] tipc: Disabling bearer [ 366.023426][ T3286] kernel read not supported for file /vcs (pid: 3286 comm: kworker/0:2) [ 366.152977][T22960] loop2: detected capacity change from 0 to 512 [ 366.181636][T22960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.216946][T22960] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.236606][T22955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5159'. [ 366.250124][T22969] loop3: detected capacity change from 0 to 512 [ 366.271258][ T28] audit: type=1326 audit(1785840507.499:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22961 comm="syz.5.5161" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172ff7de99 code=0x7ffc0000 [ 366.300082][T22955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5159'. [ 366.365831][T22969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.380126][ T28] audit: type=1326 audit(1785840507.499:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22961 comm="syz.5.5161" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172ff7de99 code=0x7ffc0000 [ 366.429070][ T28] audit: type=1326 audit(1785840507.499:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22961 comm="syz.5.5161" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172ff7de99 code=0x7ffc0000 [ 366.464582][ T28] audit: type=1326 audit(1785840507.499:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22961 comm="syz.5.5161" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f172ff7de99 code=0x7ffc0000 [ 366.470044][T21639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.490768][ T28] audit: type=1326 audit(1785840507.549:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22961 comm="syz.5.5161" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f172ff3e6ce code=0x7ffc0000 [ 366.500008][T22969] ext4 filesystem being mounted at /428/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 366.583208][ T28] audit: type=1326 audit(1785840507.559:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22961 comm="syz.5.5161" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f172ff3e6ce code=0x7ffc0000 [ 366.710080][T22990] netlink: 'syz.5.5168': attribute type 4 has an invalid length. [ 366.757507][T22990] netlink: 'syz.5.5168': attribute type 4 has an invalid length. [ 366.878919][T22996] loop5: detected capacity change from 0 to 8192 [ 369.554078][T15648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.727609][T23017] netlink: 'syz.0.5181': attribute type 83 has an invalid length. [ 369.986754][T23037] loop2: detected capacity change from 0 to 512 [ 369.996693][T23026] netlink: 'syz.2.5184': attribute type 322 has an invalid length. [ 370.007394][T23036] tipc: Failed to remove unknown binding: 66,0,0/0:2678414607/2678414608 [ 370.026186][T23037] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.5184: corrupted inode contents [ 370.047123][T23036] tipc: Failed to remove unknown binding: 66,0,0/0:2678414607/2678414608 [ 370.070443][T23040] netlink: 'syz.6.5188': attribute type 1 has an invalid length. [ 370.083174][T23037] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 370.084154][T23037] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 370.095661][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 370.108320][ C1] EXT4-fs (loop2): initial error at time 1785840511: ext4_do_update_inode:5742: inode 15 [ 370.118290][ C1] EXT4-fs (loop2): last error at time 1785840511: ext4_do_update_inode:5742: inode 15 [ 370.156025][T23040] 8021q: adding VLAN 0 to HW filter on device bond5 [ 370.166948][T23037] loop2: lost filesystem error report for type 5 error -117 [ 370.167111][T23037] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.5184: corrupted inode contents [ 370.191320][T23040] bond4: (slave bond5): making interface the new active one [ 370.199128][T23037] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 370.199288][T23037] EXT4-fs error (device loop2): ext4_evict_inode:315: inode #15: comm syz.2.5184: mark_inode_dirty error [ 370.208479][T23040] bond4: (slave bond5): Enslaving as an active interface with an up link [ 370.220728][T23037] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 370.233344][T23037] EXT4-fs (loop2): 1 orphan inode deleted [ 370.249529][T23037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.252096][T23043] loop3: detected capacity change from 0 to 512 [ 370.321383][T23047] bond4: (slave gretap4): Enslaving as a backup interface with an up link [ 370.341419][T23050] loop0: detected capacity change from 0 to 512 [ 370.377940][T23050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.390752][T23050] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.412014][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 370.412162][ T28] audit: type=1400 audit(1785840511.639:3528): avc: denied { write } for pid=23049 comm="syz.0.5191" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 370.487321][T21639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.508901][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.824471][T23079] loop0: detected capacity change from 0 to 8192 [ 371.129673][T23111] syzkaller0: entered promiscuous mode [ 371.138926][T23111] syzkaller0: entered allmulticast mode [ 372.289346][T23134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5223'. [ 372.298655][T23133] loop5: detected capacity change from 0 to 512 [ 372.352954][T23133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.421891][T23133] ext4 filesystem being mounted at /399/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 372.458837][T23134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5223'. [ 372.572939][ T28] audit: type=1400 audit(1785840513.799:3529): avc: denied { setopt } for pid=23140 comm="syz.0.5226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 372.607353][T17253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.728718][T23145] uprobe: syz.0.5228:23145 failed to unregister, leaking uprobe [ 372.729087][ T28] audit: type=1400 audit(1785840513.959:3530): avc: denied { write } for pid=23149 comm="syz.2.5229" name="functions" dev="configfs" ino=12181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 372.760350][T23145] uprobe: syz.0.5228:23145 failed to unregister, leaking uprobe [ 372.796844][ T28] audit: type=1400 audit(1785840513.969:3531): avc: denied { write } for pid=23149 comm="syz.2.5229" name="header" dev="configfs" ino=66233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 372.847970][ T28] audit: type=1400 audit(1785840513.969:3532): avc: denied { write } for pid=23149 comm="syz.2.5229" name="ss" dev="configfs" ino=66230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 372.975268][ T28] audit: type=1400 audit(1785840513.969:3533): avc: denied { write } for pid=23149 comm="syz.2.5229" name="hs" dev="configfs" ino=66241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 372.999343][ T28] audit: type=1400 audit(1785840513.969:3534): avc: denied { write } for pid=23149 comm="syz.2.5229" name="hs" dev="configfs" ino=66241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 373.021862][ T28] audit: type=1400 audit(1785840513.969:3535): avc: denied { write } for pid=23149 comm="syz.2.5229" name="ss" dev="configfs" ino=66242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 373.112835][ T28] audit: type=1400 audit(1785840513.969:3536): avc: denied { write } for pid=23149 comm="syz.2.5229" name="ss" dev="configfs" ino=66242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 373.168584][ T28] audit: type=1400 audit(1785840513.969:3537): avc: denied { write } for pid=23149 comm="syz.2.5229" name="c.1" dev="configfs" ino=19920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 373.214638][T23162] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5234'. [ 373.229643][T23167] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5238'. [ 373.255309][T23167] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5238'. [ 373.742008][T23184] uprobe: syz.6.5244:23184 failed to unregister, leaking uprobe [ 373.773532][T23184] uprobe: syz.6.5244:23184 failed to unregister, leaking uprobe [ 373.793436][T23186] veth0_vlan: entered allmulticast mode [ 373.837451][T23186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5245'. [ 374.188298][T23186] veth0_vlan (unregistering): left allmulticast mode [ 374.658179][T23211] loop5: detected capacity change from 0 to 512 [ 374.838959][T23265] netlink: 'syz.5.5254': attribute type 1 has an invalid length. [ 374.939420][T23265] 8021q: adding VLAN 0 to HW filter on device bond3 [ 374.950235][T23265] bond2: (slave bond3): making interface the new active one [ 374.958158][T23265] bond2: (slave bond3): Enslaving as an active interface with an up link [ 374.983469][T23265] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 375.049256][T23288] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5258'. [ 375.237446][T23326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5264'. [ 375.246682][T23326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5264'. [ 375.309858][T23335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5268'. [ 375.323813][T23335] team1: entered promiscuous mode [ 375.329252][T23335] team1: entered allmulticast mode [ 375.334578][T23335] 8021q: adding VLAN 0 to HW filter on device team1 [ 375.344080][T23335] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 375.355459][T23336] loop5: detected capacity change from 0 to 2048 [ 375.361316][T23335] team2: entered promiscuous mode [ 375.367417][T23335] team2: entered allmulticast mode [ 375.372837][T23335] 8021q: adding VLAN 0 to HW filter on device team2 [ 375.389725][T23336] Alternate GPT is invalid, using primary GPT. [ 375.396367][T23336] loop5: p2 p3 p7 [ 376.912721][T23386] 9pnet_fd: p9_fd_create_unix (23386): problem connecting socket: ./file0: -111 [ 377.292143][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 377.292161][ T28] audit: type=1400 audit(1785840518.519:3539): avc: denied { write } for pid=23409 comm="syz.3.5294" name="functions" dev="configfs" ino=12181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 378.513533][T23444] syzkaller0: entered promiscuous mode [ 378.543080][T23444] syzkaller0: entered allmulticast mode [ 378.564548][T23448] __nla_validate_parse: 4 callbacks suppressed [ 378.564611][T23448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5307'. [ 378.644953][T23448] hsr_slave_1 (unregistering): left promiscuous mode [ 378.691190][T23453] syzkaller0: entered promiscuous mode [ 378.703886][T23453] syzkaller0: entered allmulticast mode [ 378.930047][T23464] syzkaller0: entered promiscuous mode [ 378.942429][T23464] syzkaller0: entered allmulticast mode [ 379.441689][T23470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5314'. [ 379.765147][T23494] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5323'. [ 379.775053][T23494] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5323'. [ 379.791128][ T28] audit: type=1326 audit(1785840521.019:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23483 comm="syz.2.5320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3903fde99 code=0x7ffc0000 [ 379.806152][T23494] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5323'. [ 379.863298][T23499] syzkaller0: entered promiscuous mode [ 379.868920][T23499] syzkaller0: entered allmulticast mode [ 379.888837][ T28] audit: type=1326 audit(1785840521.049:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23483 comm="syz.2.5320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd3903fde99 code=0x7ffc0000 [ 379.891277][T23500] bridge0: port 3(veth0) entered blocking state [ 379.944138][T23500] bridge0: port 3(veth0) entered disabled state [ 379.957020][T23500] veth0: entered allmulticast mode [ 379.962784][T23500] veth0: entered promiscuous mode [ 379.979245][T23494] bridge0: port 4(veth1) entered blocking state [ 379.985719][T23494] bridge0: port 4(veth1) entered disabled state [ 379.993103][ T28] audit: type=1326 audit(1785840521.219:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23483 comm="syz.2.5320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3903fde99 code=0x7ffc0000 [ 379.993173][T23494] veth1: entered allmulticast mode [ 379.994454][T23494] veth1: entered promiscuous mode [ 380.029099][ T28] audit: type=1326 audit(1785840521.219:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23483 comm="syz.2.5320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3903fde99 code=0x7ffc0000 [ 382.278053][T23525] syzkaller0: entered promiscuous mode [ 382.291799][T23525] syzkaller0: entered allmulticast mode [ 382.316298][T23528] syzkaller0: entered promiscuous mode [ 382.327088][T23528] syzkaller0: entered allmulticast mode [ 382.382334][T23532] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.5339'. [ 382.393027][T23532] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.5339'. [ 383.929482][T23539] loop0: detected capacity change from 0 to 512 [ 383.949494][T23539] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.5342: corrupted in-inode xattr: invalid ea_ino [ 383.976030][T23539] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 383.976202][T23539] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.5342: couldn't read orphan inode 15 (err -117) [ 383.997218][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 383.997249][ C1] EXT4-fs (loop0): initial error at time 1785840525: ext4_iget_extra_inode:5180: inode 15 [ 383.997275][ C1] EXT4-fs (loop0): last error at time 1785840525: ext4_iget_extra_inode:5180: inode 15 [ 384.034132][T23539] loop0: lost filesystem error report for type 5 error -117 [ 384.035071][T23539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.075330][ T28] audit: type=1400 audit(1785840525.299:3544): avc: denied { write } for pid=23536 comm="syz.0.5342" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 384.144883][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.194988][T23555] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5347'. [ 384.234536][T23563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5351'. [ 384.250244][T23561] syzkaller0: entered promiscuous mode [ 384.263568][T23563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5351'. [ 384.290765][ T28] audit: type=1400 audit(1785840525.509:3545): avc: denied { lock } for pid=23564 comm="syz.5.5353" path="socket:[67213]" dev="sockfs" ino=67213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 384.340585][T23572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5355'. [ 384.355813][T23572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5355'. [ 384.392645][T23575] loop0: detected capacity change from 0 to 512 [ 384.441745][T23575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.463401][T23575] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.643778][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.710106][T23589] loop0: detected capacity change from 0 to 512 [ 384.724772][T23589] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 384.749345][T23589] EXT4-fs (loop0): 1 truncate cleaned up [ 384.759017][T23589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.910322][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.268762][T23608] loop5: detected capacity change from 0 to 512 [ 385.299615][T23608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.334201][T23608] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.579363][T17253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.171670][T23629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5374'. [ 386.440614][T23637] loop3: detected capacity change from 0 to 512 [ 386.498466][T23637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.563046][T23646] loop5: detected capacity change from 0 to 128 [ 386.590225][T23637] ext4 filesystem being mounted at /474/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 386.682740][ T28] audit: type=1400 audit(1785840527.909:3546): avc: denied { watch } for pid=23636 comm="syz.3.5375" path="/" dev="ramfs" ino=67974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 386.706111][ T28] audit: type=1400 audit(1785840527.909:3547): avc: denied { execute_no_trans } for pid=23636 comm="syz.3.5375" path="/file0" dev="ramfs" ino=67975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 386.707018][T23646] syz.5.5379: attempt to access beyond end of device [ 386.707018][T23646] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 386.762381][ T7787] kworker/u8:13: attempt to access beyond end of device [ 386.762381][ T7787] loop5: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 386.788481][T15648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.800264][T23646] syz.5.5379: attempt to access beyond end of device [ 386.800264][T23646] loop5: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 386.845386][T23646] Buffer I/O error on dev loop5, logical block 75, lost async page write [ 386.855944][T23646] syz.5.5379: attempt to access beyond end of device [ 386.855944][T23646] loop5: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 386.891585][T23646] Buffer I/O error on dev loop5, logical block 76, lost async page write [ 386.905330][T23646] syz.5.5379: attempt to access beyond end of device [ 386.905330][T23646] loop5: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 386.954934][T23646] syz.5.5379: attempt to access beyond end of device [ 386.954934][T23646] loop5: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 386.987355][T23646] Buffer I/O error on dev loop5, logical block 87, lost async page write [ 387.008800][T23646] syz.5.5379: attempt to access beyond end of device [ 387.008800][T23646] loop5: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 387.056021][T23646] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 387.072900][T23646] syz.5.5379: attempt to access beyond end of device [ 387.072900][T23646] loop5: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 387.191264][T23646] syz.5.5379: attempt to access beyond end of device [ 387.191264][T23646] loop5: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 387.214703][T23646] Buffer I/O error on dev loop5, logical block 91, lost async page write [ 387.236816][T23646] syz.5.5379: attempt to access beyond end of device [ 387.236816][T23646] loop5: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 387.264225][T23646] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 387.271893][T23664] netlink: 4560 bytes leftover after parsing attributes in process `syz.6.5386'. [ 387.289352][T23646] Buffer I/O error on dev loop5, logical block 103, lost async page write [ 387.298710][T23646] Buffer I/O error on dev loop5, logical block 104, lost async page write [ 387.304536][T23664] netlink: 4560 bytes leftover after parsing attributes in process `syz.6.5386'. [ 387.311597][T23646] Buffer I/O error on dev loop5, logical block 107, lost async page write [ 387.343233][T23646] Buffer I/O error on dev loop5, logical block 108, lost async page write [ 387.537548][T23677] loop5: detected capacity change from 0 to 512 [ 387.554564][T23677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.576249][T23677] ext4 filesystem being mounted at /429/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 388.130005][T17253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.165669][ T28] audit: type=1400 audit(1785840529.389:3548): avc: denied { ioctl } for pid=23689 comm="syz.5.5395" path="socket:[68022]" dev="sockfs" ino=68022 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 388.208864][ T7778] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.315275][T23695] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5398'. [ 388.336153][T23699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5399'. [ 388.376777][ T7778] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.419037][T23704] syzkaller0: entered promiscuous mode [ 388.428395][T23704] syzkaller0: entered allmulticast mode [ 388.455396][ T7778] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.539035][ T7778] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.689571][ T7778] bridge_slave_1: left allmulticast mode [ 388.695923][ T7778] bridge_slave_1: left promiscuous mode [ 388.701986][ T7778] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.710919][ T7778] bridge_slave_0: left allmulticast mode [ 388.718883][ T7778] bridge_slave_0: left promiscuous mode [ 388.724692][ T7778] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.869995][ T7778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.888979][ T7778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.899081][ T7778] bond0 (unregistering): Released all slaves [ 388.915961][ T7778] team0: Port device bond1 removed [ 388.927374][ T7778] bond1 (unregistering): Released all slaves [ 388.999387][ T7778] tipc: Left network mode [ 389.009546][ T7778] hsr_slave_0: left promiscuous mode [ 389.015408][ T7778] hsr_slave_1: left promiscuous mode [ 389.021387][ T7778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.030588][ T7778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.038264][ T7778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.045758][ T7778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.056326][ T7778] veth1_macvtap: left promiscuous mode [ 389.063517][ T7778] veth0_macvtap: left promiscuous mode [ 389.069183][ T7778] veth1_vlan: left promiscuous mode [ 389.074588][ T7778] veth0_vlan: left promiscuous mode [ 389.097608][ T28] audit: type=1400 audit(1785840530.329:3549): avc: denied { write } for pid=23729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.142685][ T28] audit: type=1400 audit(1785840530.359:3550): avc: denied { write } for pid=23740 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.352724][ T7778] team0 (unregistering): Port device team_slave_1 removed [ 389.377946][ T7778] team0 (unregistering): Port device team_slave_0 removed [ 389.771177][ T28] audit: type=1400 audit(1785840530.989:3551): avc: denied { getopt } for pid=23753 comm="syz.2.5414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 389.908804][ T28] audit: type=1400 audit(1785840531.039:3552): avc: denied { ioctl } for pid=23753 comm="syz.2.5414" path="socket:[68191]" dev="sockfs" ino=68191 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 389.954376][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 390.269196][ T7778] IPVS: stop unused estimator thread 0... [ 390.332180][ T28] audit: type=1400 audit(1785840531.559:3553): avc: denied { write } for pid=23760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.400279][ T28] audit: type=1400 audit(1785840531.629:3554): avc: denied { write } for pid=23790 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.450499][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 390.525817][T23787] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 390.603358][T23799] __nla_validate_parse: 3 callbacks suppressed [ 390.603376][T23799] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5422'. [ 390.862973][ T28] audit: type=1400 audit(1785840532.089:3555): avc: denied { write } for pid=23800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.959842][ T28] audit: type=1400 audit(1785840532.179:3556): avc: denied { write } for pid=23818 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.019832][T23807] loop3: detected capacity change from 0 to 1024 [ 391.039054][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 391.183322][T23807] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 391.617178][T23807] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 391.723631][T23807] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 391.735985][T23807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 391.841864][ T28] audit: type=1400 audit(1785840533.069:3557): avc: denied { write } for pid=23828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.872113][T15648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.942734][ T28] audit: type=1400 audit(1785840533.149:3558): avc: denied { write } for pid=23844 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.976366][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 392.411098][T23880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5440'. [ 392.497764][T23884] loop0: detected capacity change from 0 to 512 [ 392.533312][T23884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.818571][T23898] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 394.110120][ T28] kauditd_printk_skb: 373 callbacks suppressed [ 394.110138][ T28] audit: type=1326 audit(1785840535.329:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.0.5442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb684b2de99 code=0x50000 [ 394.146542][ T28] audit: type=1326 audit(1785840535.349:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.0.5442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb684b2de99 code=0x50000 [ 394.174430][ T28] audit: type=1326 audit(1785840535.349:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.0.5442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb684b2de99 code=0x50000 [ 394.210182][ T28] audit: type=1326 audit(1785840535.349:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.0.5442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb684b2de99 code=0x50000 [ 394.236984][ T28] audit: type=1326 audit(1785840535.349:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.0.5442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb684b2de99 code=0x50000 [ 394.311469][ T28] audit: type=1326 audit(1785840535.349:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.0.5442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb684b2de99 code=0x50000 [ 394.338793][ T28] audit: type=1326 audit(1785840535.349:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.0.5442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb684b2de99 code=0x50000 [ 394.369767][ T28] audit: type=1326 audit(1785840535.349:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.0.5442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb684b2de99 code=0x50000 [ 394.395840][ T28] audit: type=1326 audit(1785840535.349:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.0.5442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb684b2de99 code=0x50000 [ 394.422142][ T28] audit: type=1326 audit(1785840535.349:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.0.5442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb684b2de99 code=0x50000 [ 394.653570][T23932] ffs_data_put(): freeing [ 395.345640][T23943] ================================================================== [ 395.353803][T23943] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 395.362427][T23943] [ 395.364794][T23943] write to 0xffff88811e706460 of 8 bytes by task 23936 on cpu 0: [ 395.372532][T23943] shmem_file_splice_read+0x401/0x590 [ 395.377932][T23943] splice_direct_to_actor+0x261/0x680 [ 395.383342][T23943] do_splice_direct+0x119/0x1a0 [ 395.388238][T23943] do_sendfile+0x37d/0x640 [ 395.392691][T23943] __x64_sys_sendfile64+0x105/0x150 [ 395.397912][T23943] x64_sys_call+0x2dc4/0x3020 [ 395.402651][T23943] do_syscall_64+0x136/0x3c0 [ 395.407265][T23943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.413386][T23943] [ 395.415730][T23943] write to 0xffff88811e706460 of 8 bytes by task 23943 on cpu 1: [ 395.423455][T23943] shmem_file_splice_read+0x401/0x590 [ 395.428888][T23943] splice_direct_to_actor+0x261/0x680 [ 395.434311][T23943] do_splice_direct+0x119/0x1a0 [ 395.439191][T23943] do_sendfile+0x37d/0x640 [ 395.443620][T23943] __x64_sys_sendfile64+0x105/0x150 [ 395.448846][T23943] x64_sys_call+0x2dc4/0x3020 [ 395.453539][T23943] do_syscall_64+0x136/0x3c0 [ 395.458159][T23943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.464102][T23943] [ 395.466441][T23943] value changed: 0x00000000000049b4 -> 0x00000000000049b7 [ 395.473558][T23943] [ 395.475891][T23943] Reported by Kernel Concurrency Sanitizer on: [ 395.482052][T23943] CPU: 1 UID: 0 PID: 23943 Comm: syz.6.5460 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 395.493023][T23943] Tainted: [W]=WARN [ 395.496845][T23943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 395.506928][T23943] ================================================================== [ 395.555411][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.015389][ T28] kauditd_printk_skb: 391 callbacks suppressed [ 402.015406][ T28] audit: type=1400 audit(1785840543.239:4333): avc: denied { write } for pid=23963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.051158][ T28] audit: type=1400 audit(1785840543.279:4334): avc: denied { write } for pid=23974 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.693695][ T28] audit: type=1400 audit(1785840543.919:4335): avc: denied { write } for pid=23977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.727282][ T28] audit: type=1400 audit(1785840543.959:4336): avc: denied { write } for pid=23988 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.515546][ T28] audit: type=1400 audit(1785840544.739:4337): avc: denied { write } for pid=23991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.546939][ T28] audit: type=1400 audit(1785840544.779:4338): avc: denied { write } for pid=24002 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.389794][ T28] audit: type=1400 audit(1785840545.619:4339): avc: denied { write } for pid=24005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.421008][ T28] audit: type=1400 audit(1785840545.649:4340): avc: denied { write } for pid=24016 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1