last executing test programs: 5m20.420894943s ago: executing program 1 (id=472): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) clock_gettime(0x8, &(0x7f0000000280)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x0, 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, r2}, 0x14) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="5400000002060500000000000000000007000000050001001b0000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) 5m19.961873633s ago: executing program 1 (id=474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, 0x0, &(0x7f0000000580)=""/95}, 0x20) 5m19.686675409s ago: executing program 1 (id=477): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001c000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20004044) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001a00010029bd70000800000002200000000000000020000006001c004e23000008001d008c1e010189001c"], 0xb8}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x6, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = syz_open_procfs(0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)=""/37, 0xcf, 0x25, 0x0, 0x8001}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={r2, 0x20, &(0x7f0000000c40)={&(0x7f0000000b00)=""/14, 0xe, 0x0, &(0x7f0000000b40)=""/214, 0xd6}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r2, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)=r8}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d80)={r8, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x1f, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000008000000000000000080ff0118110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183a000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x50f, 0xde, &(0x7f0000000700)=""/222, 0x40f00, 0x47, '\x00', 0x0, @fallback=0x12, r9, 0x8, &(0x7f0000000a80)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0x4, 0x4c93}, 0x10, r10, 0xffffffffffffffff, 0x2, &(0x7f0000000dc0)=[r8, r2, r8, r11, r0, r12, r0, r0], &(0x7f0000000e00)=[{0x5, 0x5, 0x8, 0x2}, {0x4, 0x4, 0xa, 0x6}], 0x10, 0x3}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002cad7000010000000200000008000300", @ANYBLOB='\b\x00'], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 5m18.894114626s ago: executing program 1 (id=481): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x80) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=") r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x151) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0xc000) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6, @local}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1b, 0x2200, 0x0, 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@user_xattr}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0xf}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = open(&(0x7f0000000040)='./file1\x00', 0x8102, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x100, 0x101000) ioctl$LOOP_SET_FD(r9, 0x4c00, r0) fallocate(r8, 0x0, 0x0, 0x8ffff) sendfile(r7, r7, 0x0, 0x800000020) mkdir(&(0x7f0000000240)='./file1\x00', 0x31) 5m18.406532597s ago: executing program 1 (id=491): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e24, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000002900000004000000840200040040000004"], 0x30}, 0x0) (async) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e24, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000002900000004000000840200040040000004"], 0x30}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000061000018110000c209a28c430c036525fd6fc5d1f1837bae1ed47c4bdfc59e0323c3f8841d7cb15cdfc9e7370ced7e4a9b4ef33a4433f19f43f2cf8a0e853b4c8e298d00a980c58ee93b73a756d591edc05d9acbe40be124", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000061000018110000c209a28c430c036525fd6fc5d1f1837bae1ed47c4bdfc59e0323c3f8841d7cb15cdfc9e7370ced7e4a9b4ef33a4433f19f43f2cf8a0e853b4c8e298d00a980c58ee93b73a756d591edc05d9acbe40be124", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 5m17.597041655s ago: executing program 1 (id=496): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000440)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) io_setup(0x239f, &(0x7f0000000380)=0x0) r4 = eventfd2(0x5, 0x1) io_submit(r3, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r4, 0x0, 0x0, 0x800002, 0x0, 0x0, r4}, &(0x7f0000000100)={0x0, 0x0, 0x8000000, 0x1, 0x9841, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc0000000000000000000000000000002001000000000000000000009f8f29eb402ae152b68b7fb4c60e0000ede8924b919891b1000100", @ANYRES32, @ANYRES32], 0xd8}, 0x1, 0x0, 0x0, 0x40400c4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0xc7, @tick=0xa, 0x0, {}, 0xfc, 0x0, 0xc9}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYBLOB="0000000000000000b70200001400"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'gretap0\x00'}) r6 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x244a00, 0x0) fgetxattr(r6, &(0x7f0000000080)=@known='user.incfs.size\x00', 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x705383, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 5m17.524599787s ago: executing program 32 (id=496): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000440)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) io_setup(0x239f, &(0x7f0000000380)=0x0) r4 = eventfd2(0x5, 0x1) io_submit(r3, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r4, 0x0, 0x0, 0x800002, 0x0, 0x0, r4}, &(0x7f0000000100)={0x0, 0x0, 0x8000000, 0x1, 0x9841, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc0000000000000000000000000000002001000000000000000000009f8f29eb402ae152b68b7fb4c60e0000ede8924b919891b1000100", @ANYRES32, @ANYRES32], 0xd8}, 0x1, 0x0, 0x0, 0x40400c4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0xc7, @tick=0xa, 0x0, {}, 0xfc, 0x0, 0xc9}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYBLOB="0000000000000000b70200001400"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'gretap0\x00'}) r6 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x244a00, 0x0) fgetxattr(r6, &(0x7f0000000080)=@known='user.incfs.size\x00', 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x705383, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4m0.732121889s ago: executing program 2 (id=1055): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020852500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 4m0.657404991s ago: executing program 2 (id=1056): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000000)=0xe1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r3, 0x5}, &(0x7f00000001c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x59}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) 4m0.532507543s ago: executing program 2 (id=1057): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 4m0.439071635s ago: executing program 2 (id=1058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000140)={[{@init_itable}]}, 0x1, 0xbb5, &(0x7f0000002480)="$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") r1 = creat(&(0x7f0000000200)='./file1\x00', 0x1) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x14, 0x6400, 0xff01, 0x3) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB]) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000faffbfc6ae5c4f2318110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085000000110000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x8, '\x00', 0x0, r1, 0x2, 0x4, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x401, 0x709d2a, 0x0, {0x0, 0x0, 0x0, r7, 0x16a82, 0x80}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80000001, 0x7}}]}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2fcde}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc10}, 0x4c0c0) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") r9 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r9, 0x0, 0x0, 0x8800000) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0f00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000cab23594554391dab50524ae689c6c33a6fde46d52dc8b613a06eee4c4fb6fc3fda0812c9bfe82b18b8b59d923b598a17ae141067fc6c5abf4786707619a920a8e514324110c5ac872167d23311a7c7a820fcbbde8b539b55c919b2ef4cdfa6b43dc59bb3f665a3d5ff4a58b08386cea6bd1b570b1066a61cd106e1a7ac1a5000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001a40)='./file2\x00', 0x14045, &(0x7f0000000540)={[{@noload}, {@inlinecrypt}, {@data_journal}, {@sysvgroups}, {@acl}], [{@smackfsroot}, {@subj_user={'subj_user', 0x3d, 'bsddf'}}, {@measure}]}, 0x1, 0x44c, &(0x7f0000000640)="$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") creat(&(0x7f0000000200)='./file1\x00', 0x12e) 3m59.943206866s ago: executing program 2 (id=1064): mount$9p_fd(0x0, 0x0, 0x0, 0x8c, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xdc}, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x29, 0x1, 0x0, 0x5, 0x0, 0x7, 0x34328, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0xa4b4, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = fsopen(&(0x7f0000000000)='ubifs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x8, 0x740, 0xffffffff, 0xf, {{0x5, 0x4, 0x1, 0x14, 0x14, 0x68, 0x0, 0x0, 0x29, 0x0, @empty, @empty}}}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x1ff}}, './file1\x00'}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1e9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001970000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012"], 0x26}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x284, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8bb7}, {0x8, 0x15, 0x36}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xc}, {0x8, 0x15, 0xe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x128}, {0x8, 0x15, 0x400}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4a}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0xfffffff4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd45a}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0xf}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xda}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x81}, {0x8, 0x15, 0x7}}]}, 0x284}, 0x1, 0x0, 0x0, 0x2000c000}, 0x854) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x4000000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x58) 3m58.641335115s ago: executing program 2 (id=1075): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x4, 0x9, 0xa, 0x3, 0x0, 0x2, 0x600, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x4}, 0xea, 0x7, 0x6, 0x1, 0x8, 0xb2, 0xfffc, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000028000000030a01020000000000000000010000080900010073797a30000000"], 0xd4}}, 0x40000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x5, 0x8, 0x8, 0x4, 0x9, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x6, 0x1000, 0xfffffff7}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xa}, @TCA_NETEM_RATE={0x14, 0x6, {0x9, 0x9, 0x8, 0xbeb}}, @TCA_NETEM_DELAY_DIST={0x1b, 0x2, "fa5423df6fd4862fb5057bc6464de9cf390aada49c60f0"}]}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) close(r8) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xfff2, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c060}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m58.572705336s ago: executing program 33 (id=1075): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x4, 0x9, 0xa, 0x3, 0x0, 0x2, 0x600, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x4}, 0xea, 0x7, 0x6, 0x1, 0x8, 0xb2, 0xfffc, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000028000000030a01020000000000000000010000080900010073797a30000000"], 0xd4}}, 0x40000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x5, 0x8, 0x8, 0x4, 0x9, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x6, 0x1000, 0xfffffff7}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xa}, @TCA_NETEM_RATE={0x14, 0x6, {0x9, 0x9, 0x8, 0xbeb}}, @TCA_NETEM_DELAY_DIST={0x1b, 0x2, "fa5423df6fd4862fb5057bc6464de9cf390aada49c60f0"}]}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) close(r8) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xfff2, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c060}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m9.033386858s ago: executing program 5 (id=1464): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c80000c06f446a6d309f757ec80ba6fa0009060101000000000000000005000040090002007379000000a0000880180007801400170076657468310000000000000000001c0007801800018014000240ff0000000000000000000000000000011800078013001a0005ba7d6472733d636f6e74696e7565001800078014001700677265746170300000000000000000000c000780fdff15007f000000100007800a0011000180c200000200000c000780060005404e220000100007800c00"/200], 0xc8}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) syz_emit_ethernet(0x56, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a82b0081"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) syz_clone(0x24800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@nomblk_io_submit}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvTLulgNiK+AMEqaKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezM0NLutlu6ZQv7+SS7fW/mte99Z+btvJk33QA61kD2lkQ8EBF/RkRfnr29wED+48a1C2P/XrswlkS1+s4/Sa3c9WsXxsqi5e9tzTPVapHfVKfei+9HjE5NTZwt8kOzpz8amjl3/qXJ06MnJ05OnBk5evTQwT09R0YOtyTOLK7ruz6d3r3z2HuX3ho7fumDX5I08rhjURytMpBv3bqebXVlbbZtQTrpzt57i9ze3+bX1DsSaKeuiMh2V6XW//uiKzbfWtcXb3zR1sYB66parVaX+VSeqwL3sSTa3QKgPcoTfXb9W77u0tBjQ7j6an4BlMV9o3jla7ojzRN7K4uub1tpICKOz928nL1ine5DAAAs9EM2/nmx3vgvjUfzRE/29mAxh9IfEQ9FxPaIeDgidkTEIxG1so9FxOOrrH/xDMnS8U965Y6Da0I2/nulmNu6ffyXlkX6u4rctlr8leTE5NTEgWKb7I/KphOTycTwMnX8+PofXzVaVxv/lYPxuZuXs/rLsWDRjivdi27QjY/Ojq4l5oWufh6xq7te/EltXiCKeb2dEbHrDuuYfL674bqF49/jdeNfRuM/27TqNxHP5ft/LhbFX0oazk8Ov3xk5PBQb0xNHBgqj4qlfv394tuN6l9T/C2Q7f8tdY//W/H3J70RM+fOn6rN186svo6Lf33Z8Jpm5fhvO/6PbSuO/57k3dqCnmLFJ6Ozs2eHI3qSN5cuH5n/a2W+LJ/Fv39f/f6/Pea3xBMRsTsi9kTEk9lFYdH2pyLi6YjYt0z8P7/2zIerj7/+XfnKMvXciSz+8ZX2fyzc/6tPdJ366fuV4++NiEb7/1Attb9Y0sznX7MNXMu2AwAAgHtF/gx8kg7Op5PBwfwZ/h2xJZ2anpl94cT0x2fG82fl+6OSlne6+hbcDx0u7g2X+ZFF+YPFfeOvuzbX8oNj01Pj7Q4eOtzWJf0/TbP+n/m7q92tA9ZdC+bRgHuU/g+dS/+HzpSs2P9b/cgRsJE4/0Pnqtf/P2tYevC7dW0McFc5/0PnaqL/z+U/Go8KgHuT8z90Lv0fOlLD/41P1/Qv/y1N7Pk2b+tyZf4rvkJlo7T5/k9EuiGacf8nupv+MotGicrSvlzty/tUtmRT3d9q68cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAy/wfAAD//3gk5XA=") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() setns(0xffffffffffffffff, 0x24020000) r3 = socket(0x400000000010, 0x3, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)='key_or_keyring:\xd8Ou\xed\xd7\x92\x83\f\xb9\r\xa8N\v\xeayK>\xe4r\xd3H\xf7\xda_\xaf\xb6K\xa0\xb6j\xb0Pc\xfd\x04\xf0\xc1\xf2\xc5\xf6\xe7~:X\xbb65\xa0\xa8\xe7\x01\x15\xe9<8+\xcf\xadF~\xc3o\x04\xf6<6-A\x9a1\xa3le\xafuU\x96?\xee-\x89Oq\x131j\x8f\xa4\x982\t\xe8\xb4\xea\xe1\x84Fk\xa4\x86~&Q\xda\xf6\x04\x1b\f\x90+\xff\xcf\x05u&>/]o\x9e\x91S\x85Nq:\xbc\x16>M\xd2_r\xeenTf\xde\x98\xb5\xe9<\x8f;\t\xf9=\x91\x14\x95\x97\xcdmG%\xed\t\xa7N\xb4\x85@\xe9\xeb,\"\xd1R\xcb\x03\xc0\xbe\xe2\x14\xe3\x84\xf3\xa2>Z\xa6\xc4\xfb2\xd2\xaa\x89\x12\xc3)m\xc5j\xaf\xe5n|\xfcD\xfc\xb5R\x1d\x87\xcfW5\xc7!\\\x11\x88\xa5\a\x0f\xcf\xa2q\x8eC') ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x80100) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x5, 0x12, 0xc, 0x10, "7fb54d7ee1ddea21259f52029582a6cb5db40e8bc4ccae55c33e21137813caddc1391cfa52aa259dd6438328d709e7e9078c295a7f0f72f8deb8c3c59b01e275", "9d44116acc7632810a0900009b00ff00100000800000000000000d53a0520851", [0x1ff, 0x4]}) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cbd70002fdbdf255ef1b8c9d7e8d94233b6cadd85dc91d87f8262438c2b66f83aa352ffff687c000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000000701010000000000000000050000080900010073797a31000000000c000640000000000000000908000540000000020c00024000000000000000092063006139c08dc9d0cf6fe9f2529e0663dc7cf9f5330b90b799304c73fc32f9c989c7d22b3b303d0757bb5b697293ee45621b591ec611b4fb24acca8183db2f8a6630b4cfb1b6d2c927a349db1d8ba8d581a6cdba1cf384a845a9f709c4084fd5dd425a4d2c35ed6cf69baf8728799a228c98eab85295b3096fbc792052314882fda0d1f142e17650ad2882"], 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x400) socket(0x10, 0x3, 0x0) 3m8.354347063s ago: executing program 5 (id=1474): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x1a}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) pselect6(0x40, &(0x7f0000000000)={0x3, 0x8000000000000000, 0x10001, 0x7, 0x120d75ca, 0x600000000000000, 0x5, 0x3ff}, &(0x7f0000000040)={0x7, 0x7, 0x9, 0x6, 0x200, 0x2, 0x8, 0xc99}, &(0x7f0000000080)={0x8, 0x0, 0xfffffffffffffc00, 0x5, 0x200, 0x139, 0x6, 0x2}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) 3m8.233092195s ago: executing program 5 (id=1476): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000580)=[{0x80, 0x0, 0x0, 0x7fff0000}]}) gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x1, 0x4e15, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdffffffffffffffd, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x10, @local}, 0x10) r5 = fcntl$getown(r2, 0x9) r6 = perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$packet(0x11, 0x3, 0x300) socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x635, &(0x7f0000000000)="$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") fcntl$setown(r2, 0x8, r5) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x41200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x100000000001, 0x0, 0x2, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="039923a524b4dc3308e1c965ce81593aaf0d7fab17e51024623e24dc34e47988b2f8300233142ab5de2f029adff91677fe26fcad8fe726fc7272c7a9cb000000a2f27ad10f16fb30adf71cf387a82e48fa4480b467195d37f75a5bb1153cc17058c2f72183363bc622efa156281d78c2"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x204, 0x1002, 0x20da, 0x9, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fgetxattr(r6, &(0x7f0000000980)=@known='trusted.overlay.origin\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x63) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x912485, &(0x7f0000000b80)={[{@noblock_validity}, {@data_ordered}, {@block_validity}, {@data_journal}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@usrquota}, {@data_ordered}, {@data_writeback}, {@noauto_da_alloc}]}, 0xfe, 0x483, &(0x7f00000004c0)="$eJzs3MtvG0UYAPBvbSdN+iCllEdfECiIikfSpA964AICiQMIJDgUcQpOWpW6DWqCRKsKCocixAFV4o44IvEXcIILAk5IXOGOKiGUSwunRWuvU8e1g5M6cYh/P2mTmd11Zr7dnd3ZWW8C6Fuj2Y8kYntE/BYRIxFRal5htPbr5sLl8t8Ll8tJpOnrfyVL/k6ST5lttRlpmue3tCj36lsRU5XKzIU8Pz5/7t3xuYuXnj5zbur0zOmZ85MnThw9cmDw+OSxrsSZxXVj7wez+/e89Oa1V8onr7390zdZfbfny28sXC53paAGo7Wt29Jj3S6sx3Y0pJNSDyvCiuzI2/tAtf2P7CvG8OKykXjx455WDlhTaZqmra7PuSspsIkl0esaAL1Rv9Bn97/1aZ26HhvCn8/VboCyuG/mU21JKQr5OgNN97fdNBQRJ6/882U2xRqNQwAANPou6/881ar/V4j7Gta7K3+GsjMi7o6IXRFxT0Tsjoh7I6rr3h8RD6yw/OYnJLf3fwrXVxVYh7L+37P5s62l/b967y92FvPcjmr8A8mpM5WZw/k2ORQDW7L8xJKPLPX9C79+3jzvs3yYfbSh/5dNWfn1vmBej+ulpgG66an5qa4En8X/UcTeUqv4k8XngElE7ImIvass48wTX+9vt+y/419GF54zpV9FPF7b/1eiKf66pO3zyYlnjk8eGx+Kyszh8fpRcbuff7n6Wrvy7yj+Lsj2/9aWx38t/uweMRmKmLt46Wz1ee3cysu4+vsn5aTNst2rPP4Hkzeq6cF83vtT8/MXJiIGk5ez7PCS+ZO3PlvP19fP4j90sHX731W7PatuiX0RkR3EByLiwYh4KN93D0fEIxFxcJn4f3z+0XfaLWu//5cZle+iLP7pZfZ/dsrLUrf2fweJ7DzYMKd49odv25WfdrT/j1ZTh/I5nZz/OqzpKo5mAAAA+P8pVL8DnxTGFtOFwthY7Tv8u2NroTI7N//kqdn3zk/Xviu/MwYK9ZGukYbx0Il8bLien2zKH8nHjb8oDlfzY+XZynSvg4c+t61N+8/8Uex17YA1530t6F/aP/Qv7R/6V6v2P9SQTtP0w3WsDrCOXP+hTw22nu2CD/1h5df/oTWpB7D+9P+hf2n/0L9K0e71bGATa/tufGFlr/xvkkRpY1SjZWL4jj5e7HZ9orAxNkvXEq9+WmsSG6U+9USp439mscrElpaLen1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///9DeUb") 3m7.404826484s ago: executing program 5 (id=1486): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = getpid() openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x8080c61) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000000)={r1}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x6, 0x0, 0xeb, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x3830, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000380), &(0x7f00000000c0)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000380), &(0x7f00000000c0)=r4}, 0x20) r5 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x80, 0x0, 0x2, 0xf4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7fffffffe, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$eJzs3dFvW1cZAPDv3sSx02VLNvYACFgZg4KqOo27VdMeYDwhhCYh9ghSFxI3qmrXUe2MJfSh+x+QmMQL8MgfgOBtT7zzguCNl/GANKACNRNINbrX14mbxq1LnDjEv590dc851/Z3znXvPfbX1ieAqXU+Iu5GxFxEvBMRi0V7UmzxZm/LHnf/3p213Xt31pLodt/+e5Ifz9pi4DmZZ4rXrETE974V8cPk0bjt7Z2bq41G/XYv5Pxyp7m53N7euXSjubpR36jfqtWurly9/PqV12rjGehMxEvNuaLy+Y9+f/drP866tVC09MdxSFePpPd6pb04mdmI+M6Y40zKTDGeuf/t6eM+3TylNCJeiIiX8+t/MWbydxMAOMu63cXoLg7WAYCzLs1zYElaLXIBC5Gm1Wovh/dinEsbrXbn4vXW1q31Xq5sKUrp9RuN+uUiV7gUpSSrr+Tl/XrtQP1KRDwfET8pz+f16lqrsT7JDz4AMMWeOTD//6vcm/8BgDOu8nB1aVL9AABOTmXSHQAATpz5HwCmj/kfAKaP+R8Apo/5HwCmj/kfAKbKd996K9u6u8XvX6+/u711s/XupfV6+2a1ubVWXWvd3qxutFob+W/2NJ/0eo1Wa3Pl1dh6b+nrm+3Ocnt751qztXWrcy3/Xe9r9dKJjAoAeJznX/rwT0lE3H1jPsoxn7f113IwV8PZlk66A8DEzEy6A8DEWO0LptcRvuNLD8AZkS/E+qBYFOSQ45WIIjs4YMhjh/BRA06ZC5/Zz/9nW8j/w9QYyP/7V8AwZeT/YXr5Ug7Tq9tNRl3zP0Z9IABwusnxA8nhzS8U+18Vfznwg/WDj/jgOHsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1t//d9qlPO1wBciTavViGcjYilKyfUbjfrliHguIv5YLpWz+sqE+wwAHFX616RY/+vC4isLB4/OJZ+U831E/Ohnb//0vdVO5/YfsvZ/7LV3Pijaa08dfH48YwAAHqc/T+f7gS/y9+/dWetvJ9mfj78ZEZVe/N17c7G7F382ZvN9JUoRce6fSVHvSQZyF0dx9/2IuPKbIuKgfxcrJPdWPj0YP4v97Ljif/qw85/EQp6D6cdPH4qf5sd6++xcfGoMfYFp82F2/3nzsOsvjfP5vn/9xYO96+/nvbbZMcQv7n/ZS63t5vfA/fj9+9/MkPvf+VFjvPq7b/dKj37d+vj9iM/ORvRjZ1t/Leh+/GRI/FdGCX4+4s+f+8LLww53fxFxIR6Ovx9hv7TcaW4ut7d3Lt1orm7UN+q3arWrK1cvv37ltdpynqNeHj4b/O2Ni88NO5aN/9yQ+JUnjP/Lo4w/In75n3e+/8XHxP/qlw6Ln8aLj4mfzYlfGTH+6rlfV4Ydy+KvDxn/k97/iyPG/+gvO48sGw4ATE57e+fmaqNRv50VylEU9lqOp9D/IHESsU5XoRSnohv/R4X+n5VeS1Ya8em/jWPpT3noO/iNh1ruF/0+htMyF0/1rG53sCUZ9bQMu2OMI+sGnAZ7F31EfDLpzgAAAAAAAAAAAAAAAIc6vv+/le61THqMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF3/DQAA///Xj86C") fspick(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x0) (async) r6 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r5, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r8, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r8, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x6, &(0x7f0000000040)=[{0x9, 0x4, 0x3, 0x4}, {0x2, 0x7, 0x0, 0x4}, {0x891, 0xe7, 0xb2, 0xf2e5}, {0x9d, 0x6, 0xff, 0x9}, {0x200, 0x2, 0x2, 0xe478}, {0x0, 0x3, 0xc, 0x1}]}, 0x10) 3m6.987926503s ago: executing program 5 (id=1489): ioprio_set$uid(0x3, 0x0, 0x4000) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/43, 0x2b) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0xf}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) set_mempolicy(0x3, 0x0, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4800) clock_nanosleep(0x3634a7018bccb1d0, 0x0, &(0x7f0000002180), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x83) fchdir(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002b40)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1f8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x0, 0x2}}}, {{@arp={@remote, @multicast1, 0xffffffff, 0xffffff00, 0x5, 0x0, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x2, 0x4, 0x0, 0x6, 0x5, 0x1, 'veth0_macvtap\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x42}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @private=0xa010101, @private=0xa010102, 0xf}}}, {{@arp={@loopback, @multicast2, 0xff000000, 0xff000000, 0x1, 0xc, {@mac=@remote, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff]}}, 0x6, 0x2, 0x7fff, 0x8, 0x800, 0x7, 'vxcan1\x00', 'virt_wifi0\x00', {0xff}, {}, 0x0, 0x21}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x13, 0x3a, {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170", 0x12}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r4, &(0x7f0000005280), 0x4000000000001cd, 0x1008c811) 3m6.449368295s ago: executing program 5 (id=1497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x4e3, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x101}, 0x884) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x4, 0x0, 0x4, 0x0, 0x8, 0x30718, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x8, 0x20da, 0x2, 0x5, 0x80400001, 0xfff9, 0x0, 0x0, 0x0, 0xfffffffffffffa99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") (async) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x14, 0x6400, 0xff01, 0x3) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xdcd, 0x6}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 64) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 3m6.426409845s ago: executing program 34 (id=1497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x4e3, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x101}, 0x884) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x4, 0x0, 0x4, 0x0, 0x8, 0x30718, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x8, 0x20da, 0x2, 0x5, 0x80400001, 0xfff9, 0x0, 0x0, 0x0, 0xfffffffffffffa99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") (async) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x14, 0x6400, 0xff01, 0x3) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xdcd, 0x6}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 64) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 1m7.277072697s ago: executing program 7 (id=2558): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r1 = syz_io_uring_setup(0x189, &(0x7f0000000000)={0x0, 0x9956, 0x800, 0x3, 0x383}, &(0x7f00000000c0), &(0x7f0000000100), 0x0) mmap$IORING_OFF_PBUF_RING(0x0, 0x9, 0x2, 0x12, r1, 0x131a) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000300), 0x8c, 0x20402) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fcntl$getown(r2, 0x9) writev(r2, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff3000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r3}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m3.933387271s ago: executing program 7 (id=2567): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x24000000000}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0xffffffffffffffff, &(0x7f0000000140)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x194, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(camellia)\x00'}, 0x80, "1a000b000000366a6a849a7390450024"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}}, 0x44050) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8}]}}}}}}}, 0x0) 1m3.451659381s ago: executing program 7 (id=2576): socket$inet6(0xa, 0x80002, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10004, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x121) r0 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fc7bffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x123, &(0x7f0000000940)=ANY=[], 0x0) 1m3.303828444s ago: executing program 7 (id=2577): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000b80)={[{@resuid}, {@usrquota}, {@minixdf}, {@usrjquota_path={'usrjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@euid_gt={'euid>', r0}}, {@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, 'xt\x00'}}, {@uid_eq={'uid', 0x3d, r0}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x33, 0x38, 0x38, 0x66, 0x31, 0x38, 0x62], 0x2d, [0x37, 0x65, 0x62, 0x31], 0x2d, [0x34, 0x34, 0x32, 0x34], 0x2d, [0x30, 0x30, 0x37, 0x37], 0x2d, [0x63, 0x37, 0x39, 0x36, 0x65, 0x62, 0x34, 0x31]}}}]}, 0x1, 0x52a, &(0x7f0000000e80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=@deltaction={0x184, 0x31, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5f3}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x45}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4800000}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x880}, 0x12a4906436f36dbe) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fefffffc}, 0x0, 0x0, 0x0, 0x3, 0xffb, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x9) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, 0x0, 0x20008040) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1, 0x9f2, 0x2b7) socket$l2tp(0x2, 0x2, 0x73) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0xfd, 0x0, &(0x7f0000000140)) 59.287527353s ago: executing program 7 (id=2583): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) clock_settime(0x4, &(0x7f0000000000)={0x0, 0x989680}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYBLOB="010000000000000024001280090001"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x0, 0x0) 57.970559382s ago: executing program 7 (id=2588): prctl$PR_SET_TSC(0x1a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x804) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='trylock n'], 0xd) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@initdev, @in6=@local}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000000c0)={0x1, 0x5}) stat(0x0, 0x0) setresuid(0xee01, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x2, 0x0, 0x2}}, 0x26) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8880}, 0x10) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 42.865704575s ago: executing program 35 (id=2588): prctl$PR_SET_TSC(0x1a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x804) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='trylock n'], 0xd) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@initdev, @in6=@local}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000000c0)={0x1, 0x5}) stat(0x0, 0x0) setresuid(0xee01, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x2, 0x0, 0x2}}, 0x26) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8880}, 0x10) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 5.254784884s ago: executing program 0 (id=2930): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$key(0xf, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x88, 0x94, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x5, 0x84) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000280)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@arp={0x806, @generic={0x4d99d0b4842806e6, 0x88be, 0x6, 0xc, 0x9, @local, "0338a1d6b6e716fb377874b1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}}}}, 0x0) 5.094438787s ago: executing program 0 (id=2934): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@grpjquota_path={'grpjquota', 0x3d, './file1/file0'}}, {@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)="e4", 0x1, 0xc00) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 5.089664857s ago: executing program 3 (id=2935): prctl$PR_SET_TSC(0x1a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x804) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='trylock n'], 0xd) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@initdev, @in6=@local}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000000c0)={0x1, 0x5}) stat(0x0, 0x0) setresuid(0xee01, 0x0, 0x0) close(0xffffffffffffffff) mount$9p_rdma(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000600)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8880}, 0x10) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 4.919832441s ago: executing program 3 (id=2938): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x483) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendfile(r1, r0, 0x0, 0x3ffff) 3.14564737s ago: executing program 0 (id=2953): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x24000000000}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0xffffffffffffffff, &(0x7f0000000140)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 3.032730863s ago: executing program 0 (id=2954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c00)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xdb}, {0x0, 0x200000000000}, {0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xc}}, 0xf0}}, 0x82) 2.932420565s ago: executing program 0 (id=2955): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000b80)={[{@resuid}, {@usrquota}, {@minixdf}, {@usrjquota_path={'usrjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@euid_gt={'euid>', r0}}, {@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, 'xt\x00'}}, {@uid_eq={'uid', 0x3d, r0}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x33, 0x38, 0x38, 0x66, 0x31, 0x38, 0x62], 0x2d, [0x37, 0x65, 0x62, 0x31], 0x2d, [0x34, 0x34, 0x32, 0x34], 0x2d, [0x30, 0x30, 0x37, 0x37], 0x2d, [0x63, 0x37, 0x39, 0x36, 0x65, 0x62, 0x34, 0x31]}}}]}, 0x1, 0x52a, &(0x7f0000000e80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=@deltaction={0x184, 0x31, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5f3}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x45}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4800000}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x880}, 0x12a4906436f36dbe) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fefffffc}, 0x0, 0x0, 0x0, 0x3, 0xffb, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x9) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, 0x0, 0x20008040) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) preadv(r4, &(0x7f0000000080), 0x0, 0x9f2, 0x2b7) socket$l2tp(0x2, 0x2, 0x73) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0xfd, 0x0, &(0x7f0000000140)) 2.900730266s ago: executing program 3 (id=2956): prctl$PR_SET_TSC(0x1a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='trylock n'], 0xd) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@initdev, @in6=@local}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000000c0)={0x1, 0x5}) stat(0x0, 0x0) setresuid(0xee01, 0x0, 0x0) close(0xffffffffffffffff) mount$9p_rdma(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000600)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8880}, 0x10) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 2.6876579s ago: executing program 3 (id=2961): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x804) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='trylock '], 0xd) 2.652966321s ago: executing program 4 (id=2963): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x804) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='trylock '], 0xd) (fail_nth: 2) 2.277411909s ago: executing program 4 (id=2966): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x483) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendfile(r1, r0, 0x0, 0x3ffff) 1.604373694s ago: executing program 3 (id=2969): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x53f, &(0x7f0000000440)="$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") bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0x2003, 0x40, 0x2, 0x276}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000001080)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000400), &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xed, 0x5}, &(0x7f0000000100)=0x8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) close_range(r5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x88a8, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x4000000080000001, 0x0, 0x6, 0x0, 0xfffffffffffffffa, 0x100000001, 0x0, 0x7a8b, 0x0, 0x1, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x2, 0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) 1.274423871s ago: executing program 6 (id=2971): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/318], 0x1, 0x242, &(0x7f0000000300)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @func_proto]}, {0x0, [0x0, 0x30, 0x5f, 0x30, 0x2e, 0x4f]}}, 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 1.092334686s ago: executing program 6 (id=2974): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10004, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x121) r1 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fc7bffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r3, 0x1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x10, 0x11, 0x0, @private1, @empty, {[], {0x0, 0x4e1e, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xf, 0x0, @val=0x80}}}}}}}}, 0x0) 916.30621ms ago: executing program 8 (id=2976): socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0700000004000000180000008e0200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="173de022ffff"], 0x48) 821.890412ms ago: executing program 6 (id=2977): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c00)=@newsa={0x274, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xdb}, {0x0, 0x200000000000}, {0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xc}, [@migrate={0x134, 0x11, [{@in=@multicast2, @in6=@loopback, @in=@rand_addr=0x64010102, @in6=@mcast2, 0x3c, 0x1, 0x0, 0x3503, 0xa, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x33, 0x2, 0x0, 0x3501, 0xa, 0x2}, {@in=@multicast2, @in=@private=0xa010101, @in6=@mcast1, @in6=@local, 0x32, 0x4, 0x0, 0x3501, 0xa, 0x2}, {@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010101, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x32, 0x3, 0x0, 0x3506, 0xa, 0xa}]}, @XFRMA_SET_MARK={0x8}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x274}}, 0x82) 765.332853ms ago: executing program 8 (id=2978): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) openat$vsock(0xffffffffffffff9c, 0x0, 0x10300, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x90, 0x0, 0x0, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @random="7792d99bba25", @dev={0xac, 0x14, 0x14, 0x11}}}}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x2002, 0xa0, @local}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000130000103a00fc000000000000000000000000000000ff020000000000000000000000000001"], 0x0) 764.954323ms ago: executing program 6 (id=2979): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f0000000900)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000280)="0f", 0x1}, {&(0x7f0000000380)="ad", 0x1}, {&(0x7f00000003c0)="d0", 0x1}], 0x4, 0x6) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 749.089983ms ago: executing program 4 (id=2980): r0 = inotify_init() ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYRESDEC=r1], 0x88}}, 0x810) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x200000005}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="8ca1b127", 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x1fe}}], 0x18}}], 0x1, 0x84) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000000070101000000000000006e05000008090001"], 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x400) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7, 0x20, 0x0, 0x9, {{0x6, 0x4, 0x0, 0x1f, 0x18, 0x64, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@noop]}}}}}) r6 = open(&(0x7f0000000080)='./bus\x00', 0x6e842, 0x90) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x9, 0x9, 0xffff, 0x8, 0xffffffffffffffff, 0x100, '\x00', r5, r6, 0x1, 0x2, 0x3, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) sendmmsg$inet(r7, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4040000) close_range(r0, 0xffffffffffffffff, 0x0) 732.514704ms ago: executing program 8 (id=2981): syz_emit_ethernet(0x38d, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x357, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}]}}}}}}, 0x0) 667.938195ms ago: executing program 8 (id=2982): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb00143c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000123000008000000"]) r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14}}, 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0xf6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f"], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r5, &(0x7f0000001600), 0x0}, 0x20) syz_io_uring_setup(0x2afd, &(0x7f0000000380)={0x0, 0xfffffffd, 0x13098, 0x10010004, 0x125}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 570.240467ms ago: executing program 4 (id=2983): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x24000000000}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0xffffffffffffffff, &(0x7f0000000140)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 485.463259ms ago: executing program 6 (id=2984): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/318], 0x1, 0x242, &(0x7f0000000300)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @func_proto]}, {0x0, [0x0, 0x30, 0x5f, 0x30, 0x2e, 0x4f]}}, 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 485.023729ms ago: executing program 3 (id=2985): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x24000000000}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0xffffffffffffffff, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8}]}}}}}}}, 0x0) 480.923549ms ago: executing program 4 (id=2986): prctl$PR_SET_TSC(0x1a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='trylock n'], 0xd) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@initdev, @in6=@local}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000000c0)={0x1, 0x5}) stat(0x0, 0x0) setresuid(0xee01, 0x0, 0x0) close(0xffffffffffffffff) mount$9p_rdma(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000600)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8880}, 0x10) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 452.61616ms ago: executing program 6 (id=2987): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10004, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x121) r1 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fc7bffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r3, 0x1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x10, 0x11, 0x0, @private1, @empty, {[], {0x0, 0x4e1e, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xf, 0x0, @val=0x80}}}}}}}}, 0x0) 404.258801ms ago: executing program 4 (id=2988): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb00143c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x8}) r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc490}, 0x20004044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x2, 0x0, 0x0, 0x1f00, 0x21, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') close_range(r5, r5, 0x0) statx(r5, 0x0, 0x1000, 0x6000, 0x0) getpid() ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 333.340592ms ago: executing program 8 (id=2989): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @func_proto]}, {0x0, [0x0, 0x30, 0x5f, 0x30, 0x4f]}}, 0x0, 0x43}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 332.829292ms ago: executing program 8 (id=2990): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x483) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendfile(r1, r0, 0x0, 0x3ffff) 0s ago: executing program 0 (id=2991): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c00)=@newsa={0x274, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xdb}, {0x0, 0x200000000000}, {0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xc}, [@migrate={0x134, 0x11, [{@in=@multicast2, @in6=@loopback, @in=@rand_addr=0x64010102, @in6=@mcast2, 0x3c, 0x1, 0x0, 0x3503, 0xa, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x33, 0x2, 0x0, 0x3501, 0xa, 0x2}, {@in=@multicast2, @in=@private=0xa010101, @in6=@mcast1, @in6=@local, 0x32, 0x4, 0x0, 0x3501, 0xa, 0x2}, {@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010101, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x32, 0x3, 0x0, 0x3506, 0xa, 0xa}]}, @XFRMA_SET_MARK={0x8}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x274}}, 0x82) kernel console output (not intermixed with test programs): 26 [ 340.318205][T12766] Call Trace: [ 340.318212][T12766] [ 340.318221][T12766] __dump_stack+0x1d/0x30 [ 340.318248][T12766] dump_stack_lvl+0x95/0xd0 [ 340.318359][T12766] dump_stack+0x15/0x1b [ 340.318444][T12766] should_fail_ex+0x25e/0x270 [ 340.318528][T12766] should_fail+0xb/0x20 [ 340.318603][T12766] should_fail_usercopy+0x1a/0x20 [ 340.318685][T12766] _copy_from_user+0x1c/0xb0 [ 340.318741][T12766] ___sys_sendmsg+0xc1/0x1e0 [ 340.318774][T12766] ? terminate_walk+0x1d5/0x200 [ 340.318924][T12766] __sys_sendmmsg+0x185/0x320 [ 340.319041][T12766] __x64_sys_sendmmsg+0x57/0x70 [ 340.319138][T12766] x64_sys_call+0x27aa/0x3020 [ 340.319281][T12766] do_syscall_64+0x136/0x3c0 [ 340.319382][T12766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.319462][T12766] RIP: 0033:0x7f412808de59 [ 340.319512][T12766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.319572][T12766] RSP: 002b:00007f4126ae7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 340.319701][T12766] RAX: ffffffffffffffda RBX: 00007f4128315fa0 RCX: 00007f412808de59 [ 340.319765][T12766] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 340.319821][T12766] RBP: 00007f4126ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 340.319868][T12766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.319918][T12766] R13: 00007f4128316038 R14: 00007f4128315fa0 R15: 00007ffd71d19588 [ 340.319980][T12766] [ 340.674633][T12776] loop7: detected capacity change from 0 to 512 [ 340.695294][T12776] EXT4-fs: quotafile must be on filesystem root [ 340.713058][T12779] IPv6: addrconf: prefix option has invalid lifetime [ 341.685192][T12788] loop7: detected capacity change from 0 to 512 [ 341.733827][T12788] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.2510: corrupted inode contents [ 341.747001][T12788] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 341.752378][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 341.767965][ C0] EXT4-fs (loop7): initial error at time 1783314253: ext4_do_update_inode:5742: inode 16 [ 341.777815][ C0] EXT4-fs (loop7): last error at time 1783314253: ext4_do_update_inode:5742: inode 16 [ 341.821872][T12788] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #16: comm syz.7.2510: mark_inode_dirty error [ 341.834643][T12788] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 341.840564][T12788] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.2510: corrupted inode contents [ 341.863953][T12788] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 341.864197][T12788] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.2510: mark_inode_dirty error [ 341.888059][T12788] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.2510: corrupted inode contents [ 341.901493][T12788] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 341.911133][T12788] loop7: lost filesystem error report for type 5 error -117 [ 341.912110][T12788] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.2510: corrupted inode contents [ 341.935660][T12788] EXT4-fs error (device loop7): ext4_truncate:4691: inode #16: comm syz.7.2510: mark_inode_dirty error [ 341.951319][T12788] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 341.961344][T12788] loop7: lost filesystem error report for type 5 error -117 [ 341.962241][T12788] EXT4-fs (loop7): 1 truncate cleaned up [ 341.978183][T12788] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.991987][T12788] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.020816][ T28] audit: type=1400 audit(1783314253.432:1667): avc: denied { write } for pid=12775 comm="syz.7.2510" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 342.528732][T12801] loop6: detected capacity change from 0 to 256 [ 342.862051][ T28] audit: type=1400 audit(1783314254.272:1668): avc: denied { create } for pid=12800 comm="syz.6.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 343.668085][T12813] netlink: 'syz.4.2520': attribute type 32 has an invalid length. [ 343.679277][T12813] loop4: detected capacity change from 0 to 512 [ 343.749612][T12813] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 343.785004][ T9436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.830842][T12813] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 343.846525][T12813] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.2520: bad orphan inode 4 [ 343.859358][T12813] loop4: lost filesystem error report for type 5 error -117 [ 343.859998][T12813] EXT4-fs (loop4): 1 orphan inode deleted [ 343.867418][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 343.867440][ C0] EXT4-fs (loop4): initial error at time 1783314255: ext4_orphan_get:1425 [ 343.867469][ C0] EXT4-fs (loop4): last error at time 1783314255: ext4_orphan_get:1425 [ 343.911941][T12813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.018966][T12813] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 4: comm syz.4.2520: lblock 0 mapped to illegal pblock 4 (length 1) [ 344.034523][ T28] audit: type=1400 audit(1783314255.432:1669): avc: denied { write } for pid=12811 comm="syz.4.2520" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.250610][T12813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.328436][T12835] program syz.7.2529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.769646][T12835] FAULT_INJECTION: forcing a failure. [ 344.769646][T12835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.784213][T12835] CPU: 0 UID: 0 PID: 12835 Comm: syz.7.2529 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 344.784257][T12835] Tainted: [W]=WARN [ 344.784266][T12835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 344.784359][T12835] Call Trace: [ 344.784367][T12835] [ 344.784378][T12835] __dump_stack+0x1d/0x30 [ 344.784421][T12835] dump_stack_lvl+0x95/0xd0 [ 344.784512][T12835] dump_stack+0x15/0x1b [ 344.784544][T12835] should_fail_ex+0x25e/0x270 [ 344.784584][T12835] should_fail+0xb/0x20 [ 344.784618][T12835] should_fail_usercopy+0x1a/0x20 [ 344.784654][T12835] _copy_to_user+0x20/0xa0 [ 344.784704][T12835] simple_read_from_buffer+0xb5/0x130 [ 344.784739][T12835] proc_fail_nth_read+0x10e/0x150 [ 344.784768][T12835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.784797][T12835] vfs_read+0x18e/0x7c0 [ 344.784819][T12835] ? __rcu_read_unlock+0x4e/0x70 [ 344.784887][T12835] ? __fget_files+0x184/0x1c0 [ 344.784921][T12835] ? mutex_lock+0x57/0x90 [ 344.784955][T12835] ksys_read+0xdc/0x1a0 [ 344.784981][T12835] __x64_sys_read+0x40/0x50 [ 344.785069][T12835] x64_sys_call+0x2886/0x3020 [ 344.785180][T12835] do_syscall_64+0x136/0x3c0 [ 344.785244][T12835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.785274][T12835] RIP: 0033:0x7fab5002e68e [ 344.785328][T12835] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 344.785383][T12835] RSP: 002b:00007fab4eac6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.785415][T12835] RAX: ffffffffffffffda RBX: 00007fab4eac76c0 RCX: 00007fab5002e68e [ 344.785432][T12835] RDX: 000000000000000f RSI: 00007fab4eac70a0 RDI: 0000000000000005 [ 344.785446][T12835] RBP: 00007fab4eac7090 R08: 0000000000000000 R09: 0000000000000000 [ 344.785463][T12835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.785480][T12835] R13: 00007fab502f6038 R14: 00007fab502f5fa0 R15: 00007ffc26da8eb8 [ 344.785551][T12835] [ 345.507552][T12861] IPv6: addrconf: prefix option has invalid lifetime [ 345.676591][T12865] loop6: detected capacity change from 0 to 1024 [ 345.725034][T12865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.828277][ T28] audit: type=1400 audit(1783314257.242:1670): avc: denied { setopt } for pid=12864 comm="syz.6.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 345.853490][T12865] syzkaller1: entered promiscuous mode [ 345.861090][T12872] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2540'. [ 345.886294][T12865] syzkaller1: entered allmulticast mode [ 345.914735][ T28] audit: type=1400 audit(1783314257.332:1671): avc: denied { getopt } for pid=12864 comm="syz.6.2537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 345.981792][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2541'. [ 346.054389][ T7789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.133542][T12877] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2543'. [ 346.504687][T12882] IPv6: addrconf: prefix option has invalid lifetime [ 346.657028][T12886] program syz.7.2545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.734721][T12889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12889 comm=syz.6.2546 [ 346.840715][T12895] loop6: detected capacity change from 0 to 512 [ 346.927347][T12896] IPv6: addrconf: prefix option has invalid lifetime [ 346.982208][T12898] FAULT_INJECTION: forcing a failure. [ 346.982208][T12898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.015052][T12898] CPU: 0 UID: 0 PID: 12898 Comm: syz.6.2549 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 347.015092][T12898] Tainted: [W]=WARN [ 347.015101][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 347.015113][T12898] Call Trace: [ 347.015122][T12898] [ 347.015131][T12898] __dump_stack+0x1d/0x30 [ 347.015160][T12898] dump_stack_lvl+0x95/0xd0 [ 347.015178][T12898] dump_stack+0x15/0x1b [ 347.015200][T12898] should_fail_ex+0x25e/0x270 [ 347.015240][T12898] should_fail+0xb/0x20 [ 347.015351][T12898] should_fail_usercopy+0x1a/0x20 [ 347.015386][T12898] _copy_from_iter+0xcc/0xe70 [ 347.015426][T12898] ? __alloc_skb+0x511/0x6f0 [ 347.015455][T12898] ? __alloc_skb+0x205/0x6f0 [ 347.015533][T12898] netlink_sendmsg+0x4a4/0x6f0 [ 347.015558][T12898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.015657][T12898] ____sys_sendmsg+0x532/0x580 [ 347.015697][T12898] ___sys_sendmsg+0x195/0x1e0 [ 347.015727][T12898] ? terminate_walk+0x1d5/0x200 [ 347.015855][T12898] __sys_sendmmsg+0x185/0x320 [ 347.015896][T12898] __x64_sys_sendmmsg+0x57/0x70 [ 347.016080][T12898] x64_sys_call+0x27aa/0x3020 [ 347.016146][T12898] do_syscall_64+0x136/0x3c0 [ 347.016188][T12898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.016218][T12898] RIP: 0033:0x7f412808de59 [ 347.016245][T12898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.016323][T12898] RSP: 002b:00007f4126ae7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 347.016343][T12898] RAX: ffffffffffffffda RBX: 00007f4128315fa0 RCX: 00007f412808de59 [ 347.016356][T12898] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 347.016374][T12898] RBP: 00007f4126ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 347.016391][T12898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.016483][T12898] R13: 00007f4128316038 R14: 00007f4128315fa0 R15: 00007ffd71d19588 [ 347.016503][T12898] [ 347.596223][T12911] IPv6: addrconf: prefix option has invalid lifetime [ 347.625648][T12913] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2555'. [ 347.663682][T12915] loop6: detected capacity change from 0 to 512 [ 347.675476][T12915] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 347.708892][T12903] loop4: detected capacity change from 0 to 512 [ 347.716651][T12903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 347.751983][T12903] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 347.868432][T12903] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.2552: corrupted in-inode xattr: e_value size too large [ 347.884020][T12903] fserror_report: 4 callbacks suppressed [ 347.884042][T12903] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 347.892375][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 347.908005][ C0] EXT4-fs (loop4): initial error at time 1783314259: ext4_iget_extra_inode:5180: inode 15 [ 347.917968][ C0] EXT4-fs (loop4): last error at time 1783314259: ext4_iget_extra_inode:5180: inode 15 [ 347.929013][T12903] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2552: couldn't read orphan inode 15 (err -117) [ 347.944042][T12903] loop4: lost filesystem error report for type 5 error -117 [ 347.945010][T12903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.006418][T12927] netlink: 'syz.6.2560': attribute type 13 has an invalid length. [ 348.027967][T12927] netlink: 'syz.6.2560': attribute type 17 has an invalid length. [ 348.049799][T12927] netlink: 'syz.6.2560': attribute type 10 has an invalid length. [ 348.069825][T12927] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 348.079512][T12927] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 348.142050][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2561'. [ 348.238941][T12935] loop6: detected capacity change from 0 to 512 [ 348.254487][T12935] EXT4-fs: quotafile must be on filesystem root [ 349.079080][T12941] loop6: detected capacity change from 0 to 512 [ 349.233550][T12941] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.2563: corrupted inode contents [ 349.261351][T12941] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.262376][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 349.277957][ C0] EXT4-fs (loop6): initial error at time 1783314260: ext4_do_update_inode:5742: inode 16 [ 349.287821][ C0] EXT4-fs (loop6): last error at time 1783314260: ext4_do_update_inode:5742: inode 16 [ 349.304705][T12941] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #16: comm syz.6.2563: mark_inode_dirty error [ 349.355483][T12941] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.357406][T12941] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.2563: corrupted inode contents [ 349.414294][T12941] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.418689][T12941] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.2563: mark_inode_dirty error [ 349.478536][T12941] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.515517][T12941] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.2563: corrupted inode contents [ 349.590440][T12941] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.597211][T12941] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 349.770051][T12941] loop6: lost filesystem error report for type 5 error -117 [ 349.838351][T12941] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.2563: corrupted inode contents [ 349.933703][T12941] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.985786][T12941] EXT4-fs error (device loop6): ext4_truncate:4691: inode #16: comm syz.6.2563: mark_inode_dirty error [ 350.039997][T12941] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 350.057958][T12941] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 350.087104][T12941] loop6: lost filesystem error report for type 5 error -117 [ 350.094750][T12941] EXT4-fs (loop6): 1 truncate cleaned up [ 350.137846][T12941] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.161684][T12941] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.306847][ T28] audit: type=1400 audit(1783314261.672:1672): avc: denied { write } for pid=12934 comm="syz.6.2563" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 350.937695][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.014677][ T7789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.121847][T12948] IPv6: addrconf: prefix option has invalid lifetime [ 351.288007][T12952] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2569'. [ 351.355797][T12960] 8021q: adding VLAN 0 to HW filter on device bond6 [ 351.399902][T12960] bond6: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 351.473925][ T6140] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 351.629835][ T5613] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 351.694456][T12984] loop7: detected capacity change from 0 to 512 [ 351.724272][T12984] EXT4-fs: quotafile must be on filesystem root [ 351.939811][T12985] loop6: detected capacity change from 0 to 1024 [ 351.948512][T12985] EXT4-fs: quotafile must be on filesystem root [ 353.010861][T12987] loop7: detected capacity change from 0 to 512 [ 353.663052][T12990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=12990 comm=syz.0.2578 [ 354.536994][T12987] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.2577: corrupted inode contents [ 354.564373][T12987] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 354.564818][T12987] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #16: comm syz.7.2577: mark_inode_dirty error [ 354.574279][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 354.574308][ C0] EXT4-fs (loop7): initial error at time 1783314265: ext4_do_update_inode:5742: inode 16 [ 354.574512][ C0] EXT4-fs (loop7): last error at time 1783314265: ext4_do_update_inode:5742: inode 16 [ 354.724505][T12987] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 354.776037][T12987] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.2577: corrupted inode contents [ 354.870584][T12987] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 354.880232][T12987] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.2577: mark_inode_dirty error [ 354.935513][T12987] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 354.937793][T12987] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.2577: corrupted inode contents [ 355.017579][T12987] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 355.026905][T12987] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 355.071904][T12987] loop7: lost filesystem error report for type 5 error -117 [ 355.087400][T12987] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.2577: corrupted inode contents [ 355.141528][T12987] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 355.148544][T12987] EXT4-fs error (device loop7): ext4_truncate:4691: inode #16: comm syz.7.2577: mark_inode_dirty error [ 355.199875][T12987] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 355.200847][T12987] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 355.287764][T12987] loop7: lost filesystem error report for type 5 error -117 [ 355.308424][T12987] EXT4-fs (loop7): 1 truncate cleaned up [ 355.350614][T12987] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.372956][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'. [ 355.402053][T12987] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.583864][ T5613] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 355.595924][T13002] program syz.6.2581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.633521][ T5613] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 1 [ 355.685390][ T9436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.740641][ T3414] IPVS: starting estimator thread 0... [ 355.845272][T13011] IPVS: using max 2160 ests per chain, 108000 per kthread [ 357.827594][T13030] x_tables: duplicate underflow at hook 1 [ 357.905637][T13037] bridge_slave_1: left allmulticast mode [ 357.911452][T13037] bridge_slave_1: left promiscuous mode [ 357.957853][T13037] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.997318][T13040] loop4: detected capacity change from 0 to 512 [ 358.004420][T13037] bridge_slave_0: left allmulticast mode [ 358.010079][T13037] bridge_slave_0: left promiscuous mode [ 358.015712][T13037] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.026791][T13040] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 358.045830][T13040] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.2593: bad orphan inode 131083 [ 358.056227][T13040] loop4: lost filesystem error report for type 5 error -117 [ 358.056992][T13040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.086797][ T28] audit: type=1400 audit(1783314269.502:1673): avc: denied { write } for pid=13039 comm="syz.4.2593" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 358.178608][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.223756][T13018] lo speed is unknown, defaulting to 1000 [ 358.306075][ T5619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.362227][T13053] loop4: detected capacity change from 0 to 512 [ 358.389759][ T5619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.464072][T13059] x_tables: duplicate underflow at hook 1 [ 358.509826][ T5619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.597478][T13018] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.605106][T13018] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.612832][T13018] bridge_slave_0: entered allmulticast mode [ 358.620120][T13018] bridge_slave_0: entered promiscuous mode [ 358.628373][ T5619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.662551][T13018] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.695356][T13018] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.719380][T13018] bridge_slave_1: entered allmulticast mode [ 358.738679][T13018] bridge_slave_1: entered promiscuous mode [ 358.810646][T13018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.843081][T13018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.964518][T13018] team0: Port device team_slave_0 added [ 358.992671][T13018] team0: Port device team_slave_1 added [ 359.086068][T13018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.103157][T13018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.164913][T13018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.305367][ T5619] bond6 (unregistering): (slave ip6gretap0): Removing an active aggregator [ 359.344703][ T5619] bond6 (unregistering): (slave ip6gretap0): Releasing backup interface [ 359.383713][ T3414] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 359.396703][ T28] audit: type=1400 audit(1783314270.812:1674): avc: denied { write } for pid=13070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.472092][ T28] audit: type=1400 audit(1783314270.872:1675): avc: denied { write } for pid=13084 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.531064][ T5619] bond1 (unregistering): Released all slaves [ 359.550615][ T5619] bond2 (unregistering): Released all slaves [ 359.591950][ T5619] bond3 (unregistering): (slave veth3): Releasing active interface [ 359.618760][ T5619] bond3 (unregistering): (slave veth5): Releasing active interface [ 359.634576][ T5619] bond3 (unregistering): Released all slaves [ 359.638729][T13089] loop6: detected capacity change from 0 to 512 [ 359.651959][ T5619] bond0 (unregistering): Released all slaves [ 359.670768][ T5619] bond4 (unregistering): Released all slaves [ 359.695451][ T5619] bond5 (unregistering): Released all slaves [ 359.734054][ T5619] bond6 (unregistering): Released all slaves [ 359.753240][T13018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.768405][T13018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.840693][T13018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.893939][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 359.923228][ T5619] tipc: Left network mode [ 359.986038][T13018] hsr_slave_0: entered promiscuous mode [ 360.003047][T13018] hsr_slave_1: entered promiscuous mode [ 360.012805][T13018] debugfs: 'hsr0' already exists in 'hsr' [ 360.032485][T13018] Cannot create hsr debugfs directory [ 360.098615][T13092] lo speed is unknown, defaulting to 1000 [ 360.129896][ T5619] hsr_slave_0: left promiscuous mode [ 360.148228][ T5619] hsr_slave_1: left promiscuous mode [ 360.317669][ T28] audit: type=1400 audit(1783314271.722:1676): avc: denied { write } for pid=13104 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.372483][ T28] audit: type=1400 audit(1783314271.772:1677): avc: denied { write } for pid=13123 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.432314][ T30] smc: removing ib device sz1 [ 360.445547][ T9] lo speed is unknown, defaulting to 1000 [ 360.451374][ T9] sz1: Port: 1 Link DOWN [ 360.490146][T13093] loop6: detected capacity change from 0 to 512 [ 360.508836][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 360.535468][T13093] EXT4-fs (loop6): filesystem is read-only [ 360.560524][T13093] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 360.603972][T13093] EXT4-fs (loop6): failed to initialize system zone (-117) [ 360.615550][T13093] EXT4-fs (loop6): mount failed [ 360.733296][T13128] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2608'. [ 360.796173][T13130] x_tables: duplicate underflow at hook 1 [ 360.977719][ T5619] IPVS: stop unused estimator thread 0... [ 360.986213][T13142] IPv6: addrconf: prefix option has invalid lifetime [ 361.013175][ T28] audit: type=1400 audit(1783314272.432:1678): avc: denied { write } for pid=13132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.063760][ T28] audit: type=1400 audit(1783314272.462:1679): avc: denied { write } for pid=13146 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.224780][T13163] loop6: detected capacity change from 0 to 512 [ 361.242448][ T28] audit: type=1400 audit(1783314272.652:1680): avc: denied { write } for pid=13153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.340009][T13018] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 361.345349][ T28] audit: type=1400 audit(1783314272.742:1681): avc: denied { write } for pid=13167 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.371854][T13018] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.400246][T13018] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 361.435081][T13018] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.469749][T13018] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 361.504091][T13018] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.516371][T13178] loop6: detected capacity change from 0 to 512 [ 361.542653][T13018] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 361.556275][T13178] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 361.566336][T13018] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.607377][T13178] EXT4-fs (loop6): 1 truncate cleaned up [ 361.620227][T13178] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.641280][T13178] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.678346][ T28] audit: type=1400 audit(1783314273.092:1682): avc: denied { write } for pid=13173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.738900][T13018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.755827][T13018] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.761878][T13195] loop4: detected capacity change from 0 to 512 [ 361.776275][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.783387][ T5639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.824049][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.831247][ T5613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.838732][T13195] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 361.869285][ T28] audit: type=1400 audit(1783314273.282:1683): avc: denied { write } for pid=13196 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.921637][T13195] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.2616: bad orphan inode 131083 [ 361.932041][T13195] loop4: lost filesystem error report for type 5 error -117 [ 361.934411][T13195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.003743][ T28] audit: type=1400 audit(1783314273.422:1684): avc: denied { write } for pid=13193 comm="syz.4.2616" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 362.141678][ T28] audit: type=1326 audit(1783314273.552:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13208 comm="syz.6.2618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412808de59 code=0x7ffc0000 [ 362.188474][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.224385][ T28] audit: type=1326 audit(1783314273.552:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13208 comm="syz.6.2618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412808de59 code=0x7ffc0000 [ 362.277825][T13018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.300442][ T28] audit: type=1326 audit(1783314273.552:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13208 comm="syz.6.2618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412808de59 code=0x7ffc0000 [ 362.476606][T13236] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2620'. [ 362.546795][T13018] veth0_vlan: entered promiscuous mode [ 362.569565][T13018] veth1_vlan: entered promiscuous mode [ 362.595718][T13018] veth0_macvtap: entered promiscuous mode [ 362.611324][T13018] veth1_macvtap: entered promiscuous mode [ 362.632636][T13018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.651146][T13018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.702156][ T5639] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.711195][ T5639] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.729715][T13248] loop6: detected capacity change from 0 to 512 [ 362.801902][ T5639] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.831609][ T5639] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.225906][T13259] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2627'. [ 363.691942][T13321] program syz.6.2634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.702789][T13319] IPv6: addrconf: prefix option has invalid lifetime [ 364.246019][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2637'. [ 364.254982][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2637'. [ 365.263740][T13357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2641'. [ 365.612994][T13362] IPv6: addrconf: prefix option has invalid lifetime [ 366.153130][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2649'. [ 366.211487][T13384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2652'. [ 366.292466][T13386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.299720][T13386] IPv6: NLM_F_CREATE should be set when creating new route [ 366.307361][T13384] x_tables: duplicate underflow at hook 1 [ 366.706983][T13395] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 366.713563][T13395] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 366.770556][T13395] vhci_hcd vhci_hcd.0: Device attached [ 366.800613][T13399] loop6: detected capacity change from 0 to 512 [ 366.835547][T13399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.902554][T13399] ext4 filesystem being mounted at /357/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 366.947544][T13390] loop3: detected capacity change from 0 to 512 [ 366.974836][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 366.974851][ T28] audit: type=1400 audit(1783314278.392:1727): avc: denied { write } for pid=13394 comm="syz.6.2656" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 367.006915][T13390] EXT4-fs: Ignoring removed nomblk_io_submit option [ 367.013700][ T9] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 367.034593][T13396] vhci_hcd: connection closed [ 367.042654][ T6136] vhci_hcd vhci_hcd.6: stop threads [ 367.075388][T13390] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 367.095985][ T6136] vhci_hcd vhci_hcd.6: release socket [ 367.123294][ T6136] vhci_hcd vhci_hcd.6: disconnect device [ 367.130820][T13390] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.2654: corrupted in-inode xattr: e_value size too large [ 367.149373][ T28] audit: type=1400 audit(1783314278.392:1728): avc: denied { write } for pid=13394 comm="syz.6.2656" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 367.212751][T13390] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 367.215711][T13390] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2654: couldn't read orphan inode 15 (err -117) [ 367.224967][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 367.225006][ C0] EXT4-fs (loop3): initial error at time 1783314278: ext4_iget_extra_inode:5180: inode 15 [ 367.225030][ C0] EXT4-fs (loop3): last error at time 1783314278: ext4_iget_extra_inode:5180: inode 15 [ 367.273580][T13390] loop3: lost filesystem error report for type 5 error -117 [ 367.280477][T13390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.454983][T13018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.540015][ T3360] usb usb6-port1: attempt power cycle [ 367.555024][T13412] loop3: detected capacity change from 0 to 256 [ 367.567611][T13412] vfat: Unknown parameter './file2' [ 367.635811][ T7789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.857901][T13416] loop6: detected capacity change from 0 to 512 [ 367.882408][T13416] EXT4-fs: quotafile must be on filesystem root [ 368.059693][T13418] random: crng reseeded on system resumption [ 368.068501][ T28] audit: type=1400 audit(1783314279.472:1729): avc: denied { write } for pid=13411 comm="syz.3.2660" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 368.550530][T13422] loop6: detected capacity change from 0 to 512 [ 368.644416][T13422] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.2661: corrupted inode contents [ 368.658102][T13422] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 368.662358][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 368.677974][ C0] EXT4-fs (loop6): initial error at time 1783314280: ext4_do_update_inode:5742: inode 16 [ 368.687839][ C0] EXT4-fs (loop6): last error at time 1783314280: ext4_do_update_inode:5742: inode 16 [ 368.702247][T13422] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #16: comm syz.6.2661: mark_inode_dirty error [ 368.715639][T13422] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 368.828900][T13422] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.2661: corrupted inode contents [ 368.851076][T13422] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 368.855475][T13422] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.2661: mark_inode_dirty error [ 368.882289][T13422] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 368.907677][T13422] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.2661: corrupted inode contents [ 368.921582][ T28] audit: type=1400 audit(1783314279.472:1730): avc: denied { ioctl } for pid=13411 comm="syz.3.2660" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 368.933064][T13422] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 368.975653][T13422] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 368.994638][T13422] loop6: lost filesystem error report for type 5 error -117 [ 368.996423][T13422] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.2661: corrupted inode contents [ 369.016733][T13422] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 369.017538][T13422] EXT4-fs error (device loop6): ext4_truncate:4691: inode #16: comm syz.6.2661: mark_inode_dirty error [ 369.038573][T13422] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 369.039733][T13422] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 369.067569][T13422] loop6: lost filesystem error report for type 5 error -117 [ 369.081198][T13422] EXT4-fs (loop6): 1 truncate cleaned up [ 369.105900][T13422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.121410][T13422] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.174977][ T6136] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 369.265057][ T6136] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:26: Failed to release dquot type 1 [ 369.338643][T13429] netlink: 'syz.3.2662': attribute type 3 has an invalid length. [ 369.907685][ T28] audit: type=1400 audit(1783314280.762:1731): avc: denied { write } for pid=13415 comm="syz.6.2661" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 370.171650][ T28] audit: type=1400 audit(1783314281.582:1732): avc: denied { getopt } for pid=13432 comm="syz.3.2663" lport=41788 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 370.404169][ T28] audit: type=1400 audit(1783314281.822:1733): avc: denied { shutdown } for pid=13437 comm="syz.3.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.443781][T13442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2666'. [ 370.557287][ T7789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.653304][T13448] x_tables: duplicate underflow at hook 1 [ 370.843157][T13460] IPv6: addrconf: prefix option has invalid lifetime [ 370.986428][T13468] program syz.4.2677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.004315][T13471] IPv6: addrconf: prefix option has invalid lifetime [ 371.066581][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2677'. [ 371.109204][ T3360] usb usb6-port1: unable to enumerate USB device [ 371.843827][T13501] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2689'. [ 371.854177][T13502] netlink: 11 bytes leftover after parsing attributes in process `syz.6.2689'. [ 371.965883][T13507] loop6: detected capacity change from 0 to 512 [ 371.979344][T13507] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 371.997359][T13507] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.2692: bad orphan inode 131083 [ 372.021782][T13507] loop6: lost filesystem error report for type 5 error -117 [ 372.022376][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 372.036185][ C0] EXT4-fs (loop6): initial error at time 1783314283: ext4_orphan_get:1425 [ 372.044752][ C0] EXT4-fs (loop6): last error at time 1783314283: ext4_orphan_get:1425 [ 372.054075][T13507] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.067577][ T28] audit: type=1400 audit(1783314283.482:1734): avc: denied { write } for pid=13506 comm="syz.6.2692" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.153838][ T9] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 372.230374][ T7789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.303392][ T6134] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.344819][ T6134] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.405764][ T6134] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.427682][ T6134] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.506319][ T6134] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.522551][ T6134] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.573479][T13533] loop4: detected capacity change from 0 to 512 [ 372.620400][T13533] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2699: couldn't read orphan inode 26 (err -116) [ 372.637593][ T6134] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.662457][T13533] loop4: lost filesystem error report for type 5 error -116 [ 372.670613][ T6134] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.679957][T13533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.701910][T13533] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.774233][T13540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2701'. [ 372.827450][T13540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2701'. [ 372.905213][T13546] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.2699: deleted inode referenced: 16 [ 372.906864][ T28] audit: type=1400 audit(1783314284.322:1735): avc: denied { write } for pid=13532 comm="syz.4.2699" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 373.013740][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.023410][ T6134] bridge_slave_1: left allmulticast mode [ 373.029190][ T6134] bridge_slave_1: left promiscuous mode [ 373.035027][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.043257][ T6134] bridge_slave_0: left allmulticast mode [ 373.049127][ T6134] bridge_slave_0: left promiscuous mode [ 373.054919][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.128982][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.145645][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.155763][ T6134] bond0 (unregistering): Released all slaves [ 373.163907][ T6134] bond1 (unregistering): Released all slaves [ 373.211395][T13558] lo speed is unknown, defaulting to 1000 [ 373.217781][T13558] lo speed is unknown, defaulting to 1000 [ 373.223873][T13558] lo speed is unknown, defaulting to 1000 [ 373.264649][T13558] infiniband sz1: set active [ 373.269508][T13558] infiniband sz1: added lo [ 373.288020][T13558] RDS/IB: sz1: added [ 373.292099][T13558] smc: adding ib device sz1 with port count 1 [ 373.301623][T13558] smc: ib device sz1 port 1 has no pnetid [ 373.316462][ T3360] lo speed is unknown, defaulting to 1000 [ 373.332825][ T28] audit: type=1400 audit(1783314284.722:1736): avc: denied { write } for pid=13564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.366641][T13558] lo speed is unknown, defaulting to 1000 [ 373.406427][T13558] lo speed is unknown, defaulting to 1000 [ 373.441416][ T3376] lo speed is unknown, defaulting to 1000 [ 373.456645][T13514] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.464026][T13514] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.471358][T13514] bridge_slave_0: entered allmulticast mode [ 373.479091][T13514] bridge_slave_0: entered promiscuous mode [ 373.486650][T13584] tipc: Can't bind to reserved service type 0 [ 373.499341][T13514] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.513931][T13514] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.522655][ T28] audit: type=1400 audit(1783314284.922:1737): avc: denied { write } for pid=13585 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.545150][T13514] bridge_slave_1: entered allmulticast mode [ 373.551713][T13514] bridge_slave_1: entered promiscuous mode [ 373.579564][T13514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.589956][T13514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.610859][T13514] team0: Port device team_slave_0 added [ 373.617775][T13514] team0: Port device team_slave_1 added [ 373.634235][T13514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.641262][T13514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.657593][T13584] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2711'. [ 373.667781][T13514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.718008][T13592] IPv6: addrconf: prefix option has invalid lifetime [ 373.763279][T13558] lo speed is unknown, defaulting to 1000 [ 373.770527][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 373.782946][T13514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.795594][T13514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.867356][T13514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.897497][T13558] lo speed is unknown, defaulting to 1000 [ 373.931573][T13514] hsr_slave_0: entered promiscuous mode [ 373.943926][T13599] program syz.4.2715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.953840][T13514] hsr_slave_1: entered promiscuous mode [ 373.960029][T13514] debugfs: 'hsr0' already exists in 'hsr' [ 373.971852][T13514] Cannot create hsr debugfs directory [ 373.996743][T13558] lo speed is unknown, defaulting to 1000 [ 374.040781][T13558] lo speed is unknown, defaulting to 1000 [ 374.040806][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2715'. [ 374.118411][T13558] lo speed is unknown, defaulting to 1000 [ 374.160473][T13514] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 374.207915][ T28] audit: type=1400 audit(1783314285.612:1738): avc: denied { write } for pid=13600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.270395][T13514] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 374.277745][ T28] audit: type=1400 audit(1783314285.682:1739): avc: denied { write } for pid=13617 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.300797][T13514] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 374.356379][T13514] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 374.390097][T13558] lo speed is unknown, defaulting to 1000 [ 374.397273][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 374.421897][T13514] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 374.444318][T13514] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.454867][T13514] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 374.464581][T13514] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 374.544649][T13514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.580983][T13514] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.601294][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.608761][ T6132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.691138][ T6130] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.691246][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2721'. [ 374.699184][ T6130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.837982][T13514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 374.848418][T13514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.956921][ T28] audit: type=1400 audit(1783314286.372:1740): avc: denied { write } for pid=13632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.275467][ T6134] hsr_slave_0: left promiscuous mode [ 375.301646][ T28] audit: type=1400 audit(1783314286.672:1741): avc: denied { write } for pid=13656 comm="syz.3.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 375.350997][ T6134] hsr_slave_1: left promiscuous mode [ 375.370909][T13657] loop3: detected capacity change from 0 to 512 [ 375.401172][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.436161][T13657] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 375.633807][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.658699][ T28] audit: type=1400 audit(1783314287.062:1742): avc: denied { write } for pid=13667 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.684468][T13664] loop6: detected capacity change from 0 to 256 [ 375.699254][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.711949][T13657] EXT4-fs (loop3): 1 truncate cleaned up [ 375.733578][T13664] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 375.758017][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.767546][T13657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.808157][ T6134] veth1_macvtap: left promiscuous mode [ 375.823459][ T28] audit: type=1400 audit(1783314287.242:1743): avc: denied { write } for pid=13656 comm="syz.3.2723" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 375.861481][ T6134] veth0_macvtap: left promiscuous mode [ 375.896255][ T6134] veth1_vlan: left promiscuous mode [ 375.923687][ T6134] veth0_vlan: left promiscuous mode [ 375.950113][T13018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.258153][ T6134] team0 (unregistering): Port device team_slave_1 removed [ 376.298014][ T6134] team0 (unregistering): Port device team_slave_0 removed [ 376.430449][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 376.689736][T13671] loop4: detected capacity change from 0 to 512 [ 376.800061][T13671] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.2725: bad orphan inode 15 [ 376.831364][T13671] loop4: lost filesystem error report for type 5 error -117 [ 376.832423][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 376.846943][ C0] EXT4-fs (loop4): initial error at time 1783314288: ext4_orphan_get:1425 [ 376.856453][ C0] EXT4-fs (loop4): last error at time 1783314288: ext4_orphan_get:1425 [ 376.873912][T13671] ext4_test_bit(bit=14, block=18) = 1 [ 376.911705][T13671] is_bad_inode(inode)=0 [ 376.931594][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 376.939486][T13671] NEXT_ORPHAN(inode)=1023 [ 376.946747][T13671] max_ino=32 [ 376.963022][T13671] i_nlink=0 [ 377.017785][T13671] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz.4.2725: corrupted xattr block 19: invalid header [ 377.057334][T13671] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 377.062238][T13671] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 377.177297][T13671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 377.211681][T13671] ext4 filesystem being mounted at /489/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 377.259038][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 377.259054][ T28] audit: type=1400 audit(1783314288.672:1747): avc: denied { write } for pid=13670 comm="syz.4.2725" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.288055][T13671] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2725: bg 0: block 449: padding at end of block bitmap is not set [ 377.602240][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 377.734264][T13714] lo speed is unknown, defaulting to 1000 [ 377.882009][T13514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.892812][T13731] program syz.6.2734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.908889][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2735'. [ 377.954844][T13738] IPv6: addrconf: prefix option has invalid lifetime [ 377.972077][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2734'. [ 377.989436][T13744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2737'. [ 378.031511][ T28] audit: type=1400 audit(1783314289.442:1748): avc: denied { map } for pid=13730 comm="syz.6.2734" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 378.074481][ T28] audit: type=1400 audit(1783314289.442:1749): avc: denied { read write } for pid=13730 comm="syz.6.2734" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 378.165939][T13753] IPv6: addrconf: prefix option has invalid lifetime [ 378.248449][T13514] veth0_vlan: entered promiscuous mode [ 378.263904][T13514] veth1_vlan: entered promiscuous mode [ 378.285384][T13514] veth0_macvtap: entered promiscuous mode [ 378.294064][T13514] veth1_macvtap: entered promiscuous mode [ 378.305907][T13514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.319053][T13514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.343418][ T6132] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.353753][ T6132] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.363545][ T6132] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.372538][ T6132] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.520285][T13773] x_tables: duplicate underflow at hook 1 [ 378.607171][T13777] x_tables: duplicate underflow at hook 1 [ 378.746120][T13788] IPv6: addrconf: prefix option has invalid lifetime [ 378.815088][T13790] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2749'. [ 378.826179][T13790] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13790 comm=syz.8.2749 [ 378.839929][T13790] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2749'. [ 378.850542][ T28] audit: type=1400 audit(1783314290.262:1750): avc: denied { listen } for pid=13789 comm="syz.8.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 379.102120][T13799] loop8: detected capacity change from 0 to 512 [ 379.311661][T13799] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.324498][T13799] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.432531][ T28] audit: type=1400 audit(1783314290.752:1751): avc: denied { write } for pid=13792 comm="syz.8.2750" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 379.585969][T13815] FAULT_INJECTION: forcing a failure. [ 379.585969][T13815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.599087][T13815] CPU: 1 UID: 0 PID: 13815 Comm: syz.6.2758 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 379.599255][T13815] Tainted: [W]=WARN [ 379.599264][T13815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 379.599282][T13815] Call Trace: [ 379.599290][T13815] [ 379.599300][T13815] __dump_stack+0x1d/0x30 [ 379.599368][T13815] dump_stack_lvl+0x95/0xd0 [ 379.599395][T13815] dump_stack+0x15/0x1b [ 379.599420][T13815] should_fail_ex+0x25e/0x270 [ 379.599532][T13815] should_fail+0xb/0x20 [ 379.599565][T13815] should_fail_usercopy+0x1a/0x20 [ 379.599681][T13815] _copy_from_user+0x1c/0xb0 [ 379.599746][T13815] do_sock_getsockopt+0x122/0x570 [ 379.599776][T13815] ? vfs_write+0x848/0x990 [ 379.599826][T13815] __x64_sys_getsockopt+0x11d/0x1a0 [ 379.599933][T13815] x64_sys_call+0x2dcf/0x3020 [ 379.599966][T13815] do_syscall_64+0x136/0x3c0 [ 379.600016][T13815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.600100][T13815] RIP: 0033:0x7f412808de59 [ 379.600147][T13815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.600172][T13815] RSP: 002b:00007f4126ae7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 379.600197][T13815] RAX: ffffffffffffffda RBX: 00007f4128315fa0 RCX: 00007f412808de59 [ 379.600216][T13815] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000008 [ 379.600301][T13815] RBP: 00007f4126ae7090 R08: 0000200000000100 R09: 0000000000000000 [ 379.600328][T13815] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 379.600346][T13815] R13: 00007f4128316038 R14: 00007f4128315fa0 R15: 00007ffd71d19588 [ 379.600373][T13815] [ 379.849479][T13822] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2761'. [ 379.862055][T13514] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.867601][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2762'. [ 379.971097][T13832] program syz.8.2763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.051082][T13840] x_tables: duplicate underflow at hook 1 [ 380.082129][T13846] loop4: detected capacity change from 0 to 512 [ 380.090275][T13846] EXT4-fs: quotafile must be on filesystem root [ 380.215842][T13848] FAULT_INJECTION: forcing a failure. [ 380.215842][T13848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.235454][T13848] CPU: 0 UID: 0 PID: 13848 Comm: syz.6.2769 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 380.235554][T13848] Tainted: [W]=WARN [ 380.235561][T13848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 380.235646][T13848] Call Trace: [ 380.235653][T13848] [ 380.235661][T13848] __dump_stack+0x1d/0x30 [ 380.235697][T13848] dump_stack_lvl+0x95/0xd0 [ 380.235719][T13848] dump_stack+0x15/0x1b [ 380.235741][T13848] should_fail_ex+0x25e/0x270 [ 380.235816][T13848] should_fail+0xb/0x20 [ 380.235844][T13848] should_fail_usercopy+0x1a/0x20 [ 380.235874][T13848] _copy_from_user+0x1c/0xb0 [ 380.235892][T13848] ___sys_sendmsg+0xc1/0x1e0 [ 380.235928][T13848] ? terminate_walk+0x1d5/0x200 [ 380.236014][T13848] __sys_sendmmsg+0x185/0x320 [ 380.236078][T13848] __x64_sys_sendmmsg+0x57/0x70 [ 380.236114][T13848] x64_sys_call+0x27aa/0x3020 [ 380.236157][T13848] do_syscall_64+0x136/0x3c0 [ 380.236235][T13848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.236260][T13848] RIP: 0033:0x7f412808de59 [ 380.236280][T13848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.236303][T13848] RSP: 002b:00007f4126ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 380.236326][T13848] RAX: ffffffffffffffda RBX: 00007f4128316090 RCX: 00007f412808de59 [ 380.236356][T13848] RDX: 04000000000001cd RSI: 0000200000005280 RDI: 0000000000000008 [ 380.236373][T13848] RBP: 00007f4126ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 380.236387][T13848] R10: 000000001008c811 R11: 0000000000000246 R12: 0000000000000001 [ 380.236404][T13848] R13: 00007f4128316128 R14: 00007f4128316090 R15: 00007ffd71d19588 [ 380.236427][T13848] [ 380.729908][T13851] loop4: detected capacity change from 0 to 512 [ 380.918535][T13851] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.2771: corrupted inode contents [ 380.931218][T13851] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 380.932361][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 380.947934][ C0] EXT4-fs (loop4): initial error at time 1783314292: ext4_do_update_inode:5742: inode 16 [ 380.957814][ C0] EXT4-fs (loop4): last error at time 1783314292: ext4_do_update_inode:5742: inode 16 [ 380.969120][T13851] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #16: comm syz.4.2771: mark_inode_dirty error [ 380.981802][T13851] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 380.984033][T13851] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.2771: corrupted inode contents [ 381.007536][T13851] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 381.012750][T13851] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.2771: mark_inode_dirty error [ 381.034176][T13851] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 381.036346][T13851] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.2771: corrupted inode contents [ 381.059926][T13851] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 381.061420][T13851] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 381.080169][T13851] loop4: lost filesystem error report for type 5 error -117 [ 381.081462][T13851] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.2771: corrupted inode contents [ 381.101252][T13851] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 381.102397][T13851] EXT4-fs error (device loop4): ext4_truncate:4691: inode #16: comm syz.4.2771: mark_inode_dirty error [ 381.124949][T13851] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 381.130916][T13851] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 381.149856][T13851] loop4: lost filesystem error report for type 5 error -117 [ 381.156054][T13851] EXT4-fs (loop4): 1 truncate cleaned up [ 381.179329][T13851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.193251][T13851] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.332840][ T28] audit: type=1400 audit(1783314292.722:1752): avc: denied { write } for pid=13845 comm="syz.4.2771" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 381.553475][T13851] syz.4.2771 (13851) used greatest stack depth: 8704 bytes left [ 381.676692][T13868] loop6: detected capacity change from 0 to 512 [ 381.717799][T13868] EXT4-fs: Ignoring removed bh option [ 381.759171][T13868] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 381.818556][T13868] EXT4-fs (loop6): 1 truncate cleaned up [ 381.858800][T13868] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.907512][T13875] loop8: detected capacity change from 0 to 512 [ 381.933808][ T28] audit: type=1326 audit(1783314293.342:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13867 comm="syz.6.2777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412808de59 code=0x7ffc0000 [ 381.972510][T13875] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 382.013112][T13868] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2777'. [ 382.039852][T13875] EXT4-fs (loop8): 1 truncate cleaned up [ 382.067811][T13875] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.089763][ T28] audit: type=1326 audit(1783314293.342:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13867 comm="syz.6.2777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f412808de59 code=0x7ffc0000 [ 382.154180][ T7789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.209571][ T28] audit: type=1326 audit(1783314293.372:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13867 comm="syz.6.2777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412808de59 code=0x7ffc0000 [ 382.253887][T13514] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.267968][T13888] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2782'. [ 382.306826][T13876] lo speed is unknown, defaulting to 1000 [ 382.317583][ T28] audit: type=1326 audit(1783314293.382:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13867 comm="syz.6.2777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f412808de59 code=0x7ffc0000 [ 382.398094][ T28] audit: type=1326 audit(1783314293.402:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13867 comm="syz.6.2777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412808de59 code=0x7ffc0000 [ 382.425570][T13894] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2785'. [ 382.549127][ T28] audit: type=1326 audit(1783314293.422:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13867 comm="syz.6.2777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f412808de59 code=0x7ffc0000 [ 382.652319][ T28] audit: type=1326 audit(1783314293.502:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13867 comm="syz.6.2777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412808de59 code=0x7ffc0000 [ 382.775367][T13914] random: crng reseeded on system resumption [ 382.787293][ T28] audit: type=1400 audit(1783314293.582:1760): avc: denied { write } for pid=13874 comm="syz.8.2779" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 382.950949][T13918] __nla_validate_parse: 1 callbacks suppressed [ 382.950962][T13918] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2790'. [ 382.992030][T13876] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.001303][T13876] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.035853][T13876] bridge_slave_0: entered allmulticast mode [ 383.058058][T13876] bridge_slave_0: entered promiscuous mode [ 383.080497][T13876] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.103720][T13876] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.125638][T13876] bridge_slave_1: entered allmulticast mode [ 383.144978][T13876] bridge_slave_1: entered promiscuous mode [ 383.174295][T13876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.211829][ T28] audit: type=1400 audit(1783314294.622:1761): avc: denied { getattr } for pid=13931 comm="syz.8.2794" path="pid:[4026532371]" dev="nsfs" ino=4026532371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 383.327719][T13876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.391566][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.398935][ T28] audit: type=1400 audit(1783314294.662:1762): avc: denied { mounton } for pid=13931 comm="syz.8.2794" path="/13/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 383.405297][T13876] team0: Port device team_slave_0 added [ 383.432953][T13876] team0: Port device team_slave_1 added [ 383.467789][T13876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.474774][T13876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.500792][T13876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.686777][T13940] loop6: detected capacity change from 0 to 1024 [ 384.693521][T13940] EXT4-fs: inline encryption not supported [ 385.473594][T13876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.512960][T13940] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 385.522138][T13876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.553102][T13876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.602887][T13876] hsr_slave_0: entered promiscuous mode [ 385.609512][T13876] hsr_slave_1: entered promiscuous mode [ 385.616170][T13876] debugfs: 'hsr0' already exists in 'hsr' [ 385.622583][T13876] Cannot create hsr debugfs directory [ 385.659591][T13940] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003] [ 385.668270][T13940] System zones: 0-1, 3-36 [ 385.676464][T13951] loop3: detected capacity change from 0 to 512 [ 385.689649][T13940] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.720765][ T28] audit: type=1400 audit(1783314297.132:1763): avc: denied { write } for pid=13935 comm="syz.6.2796" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.805399][T13951] EXT4-fs: quotafile must be on filesystem root [ 385.961969][ T7789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.242439][T13876] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.252801][T13876] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.544305][ T28] audit: type=1400 audit(1783314297.932:1764): avc: denied { unmount } for pid=13514 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 386.606449][T13958] loop3: detected capacity change from 0 to 512 [ 386.615768][T13876] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.626312][T13876] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.759741][T13958] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.2798: corrupted inode contents [ 386.771729][T13958] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 386.772078][T13958] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.2798: mark_inode_dirty error [ 386.792699][T13958] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 386.793342][T13958] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.2798: corrupted inode contents [ 386.820228][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 386.820250][ C1] EXT4-fs (loop3): initial error at time 1783314298: ext4_do_update_inode:5742: inode 16 [ 386.820278][ C1] EXT4-fs (loop3): last error at time 1783314298: ext4_dirty_inode:6639: inode 16 [ 386.845886][T13958] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 386.849792][T13958] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.2798: mark_inode_dirty error [ 386.870231][T13958] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 386.871276][T13958] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.2798: corrupted inode contents [ 386.892358][T13958] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 386.895530][T13958] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 386.913258][T13958] loop3: lost filesystem error report for type 5 error -117 [ 386.914405][T13958] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.2798: corrupted inode contents [ 386.939252][T13958] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 386.940855][T13958] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.2798: mark_inode_dirty error [ 386.961109][T13958] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 386.962402][T13958] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 386.980415][T13958] loop3: lost filesystem error report for type 5 error -117 [ 386.983009][T13958] EXT4-fs (loop3): 1 truncate cleaned up [ 386.997048][T13958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.009705][T13958] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.073052][ T28] audit: type=1400 audit(1783314298.482:1765): avc: denied { write } for pid=13948 comm="syz.3.2798" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 387.097964][T13876] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.108502][T13876] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.529376][T13876] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.603890][T13876] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.665822][T13971] x_tables: duplicate underflow at hook 1 [ 387.814082][T13974] FAULT_INJECTION: forcing a failure. [ 387.814082][T13974] name failslab, interval 1, probability 0, space 0, times 0 [ 387.858219][T13974] CPU: 1 UID: 0 PID: 13974 Comm: syz.4.2804 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 387.858258][T13974] Tainted: [W]=WARN [ 387.858267][T13974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 387.858284][T13974] Call Trace: [ 387.858291][T13974] [ 387.858325][T13974] __dump_stack+0x1d/0x30 [ 387.858348][T13974] dump_stack_lvl+0x95/0xd0 [ 387.858368][T13974] dump_stack+0x15/0x1b [ 387.858393][T13974] should_fail_ex+0x25e/0x270 [ 387.858428][T13974] should_failslab+0x8c/0xb0 [ 387.858518][T13974] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 387.858545][T13974] ? __alloc_skb+0x2db/0x6f0 [ 387.858645][T13974] ? __alloc_skb+0x2db/0x6f0 [ 387.858718][T13974] __alloc_skb+0x2db/0x6f0 [ 387.858749][T13974] ? xas_load+0x413/0x430 [ 387.858808][T13974] tipc_msg_build+0xc1/0x950 [ 387.858876][T13974] ? tipc_node_xmit+0x1d5/0xa90 [ 387.858900][T13974] __tipc_sendstream+0x6c1/0xb70 [ 387.858979][T13974] ? __pfx_woken_wake_function+0x10/0x10 [ 387.859063][T13974] tipc_sendstream+0x3e/0x60 [ 387.859187][T13974] ? __pfx_tipc_sendstream+0x10/0x10 [ 387.859229][T13974] ____sys_sendmsg+0x532/0x580 [ 387.859271][T13974] ___sys_sendmsg+0x195/0x1e0 [ 387.859303][T13974] ? terminate_walk+0x1d5/0x200 [ 387.859373][T13974] __sys_sendmmsg+0x185/0x320 [ 387.859486][T13974] __x64_sys_sendmmsg+0x57/0x70 [ 387.859525][T13974] x64_sys_call+0x27aa/0x3020 [ 387.859557][T13974] do_syscall_64+0x136/0x3c0 [ 387.859595][T13974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.859688][T13974] RIP: 0033:0x7f3dcdaade59 [ 387.859719][T13974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.859736][T13974] RSP: 002b:00007f3dcc4e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 387.859754][T13974] RAX: ffffffffffffffda RBX: 00007f3dcdd36090 RCX: 00007f3dcdaade59 [ 387.859808][T13974] RDX: 04000000000001cd RSI: 0000200000005280 RDI: 0000000000000008 [ 387.859824][T13974] RBP: 00007f3dcc4e6090 R08: 0000000000000000 R09: 0000000000000000 [ 387.859838][T13974] R10: 000000001008c811 R11: 0000000000000246 R12: 0000000000000001 [ 387.859897][T13974] R13: 00007f3dcdd36128 R14: 00007f3dcdd36090 R15: 00007ffeefcff548 [ 387.859970][T13974] [ 388.103344][T13876] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 388.120920][T13876] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.128982][T13876] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 388.138422][T13876] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.148569][T13876] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 388.157843][T13876] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.165626][T13876] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 388.174594][T13876] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.266361][T13876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.284303][T13876] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.298765][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.306306][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.323050][ T6134] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.330578][ T6134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.369177][T13876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 388.381434][T13876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.449834][T13018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.515956][ T28] audit: type=1400 audit(1783314299.932:1766): avc: denied { write } for pid=13976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.600800][ T28] audit: type=1400 audit(1783314300.012:1767): avc: denied { write } for pid=14006 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.626235][T14013] program syz.6.2810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.678027][T13876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.746434][T14031] netlink: 'syz.6.2810': attribute type 30 has an invalid length. [ 388.766507][ T28] audit: type=1400 audit(1783314300.182:1768): avc: denied { connect } for pid=14015 comm="syz.4.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 388.799740][T14031] bond6: option arp_missed_max: invalid value (0) [ 388.806658][T14031] bond6: option arp_missed_max: allowed values 1 - 255 [ 388.834143][T14031] bond6 (unregistering): Released all slaves [ 388.843571][ T28] audit: type=1400 audit(1783314300.252:1769): avc: denied { write } for pid=14019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.937267][ T28] audit: type=1400 audit(1783314300.352:1770): avc: denied { write } for pid=14045 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.097440][T14057] IPv6: addrconf: prefix option has invalid lifetime [ 389.104424][T13876] veth0_vlan: entered promiscuous mode [ 389.110929][T13876] veth1_vlan: entered promiscuous mode [ 389.136897][T13876] veth0_macvtap: entered promiscuous mode [ 389.144629][T13876] veth1_macvtap: entered promiscuous mode [ 389.155827][T13876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.167618][T13876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.187354][ T6130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.210946][ T28] audit: type=1400 audit(1783314300.622:1771): avc: denied { setattr } for pid=14063 comm="syz.8.2820" name="KEY" dev="sockfs" ino=38419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 389.225573][ T6130] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.244628][ T5639] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.253358][ T5639] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.281274][T14068] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2821'. [ 389.294528][T14068] loop8: detected capacity change from 0 to 512 [ 389.345530][T14068] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.371863][T14068] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.390726][T14068] ext4: Unknown parameter 'shortname' [ 389.431692][T14079] x_tables: duplicate underflow at hook 1 [ 389.766278][ T28] audit: type=1400 audit(1783314301.182:1772): avc: denied { write } for pid=14095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.798471][ T28] audit: type=1400 audit(1783314301.212:1773): avc: denied { write } for pid=14106 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.090776][T14116] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2832'. [ 390.135077][T13514] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.151126][ T28] audit: type=1400 audit(1783314301.562:1774): avc: denied { recv } for pid=3283 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.167 dest=39918 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 390.189530][ T28] audit: type=1400 audit(1783314301.602:1775): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.220681][T14114] loop6: detected capacity change from 0 to 1024 [ 390.227626][T14114] EXT4-fs: Invalid want_extra_isize 2 [ 390.249682][T14125] syzkaller0: entered promiscuous mode [ 390.255225][T14125] syzkaller0: entered allmulticast mode [ 390.287467][T14124] loop3: detected capacity change from 0 to 1024 [ 390.311269][T14131] x_tables: duplicate underflow at hook 1 [ 390.317615][T14132] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2831'. [ 390.344537][T14124] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 390.358820][T14124] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2836: Invalid block bitmap block 0 in block_group 0 [ 390.372656][T14124] loop3: lost filesystem error report for type 5 error -117 [ 390.372822][T14124] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.2836: Failed to acquire dquot type 0 [ 390.391390][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 390.391408][ C0] EXT4-fs (loop3): initial error at time 1783314301: ext4_read_block_bitmap_nowait:483 [ 390.391452][ C0] EXT4-fs (loop3): last error at time 1783314301: ext4_read_block_bitmap_nowait:483 [ 390.418331][T14135] FAULT_INJECTION: forcing a failure. [ 390.418331][T14135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.436727][T14135] CPU: 0 UID: 0 PID: 14135 Comm: syz.0.2838 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 390.436764][T14135] Tainted: [W]=WARN [ 390.436771][T14135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 390.436787][T14135] Call Trace: [ 390.436795][T14135] [ 390.436806][T14135] __dump_stack+0x1d/0x30 [ 390.436837][T14135] dump_stack_lvl+0x95/0xd0 [ 390.436907][T14135] dump_stack+0x15/0x1b [ 390.436933][T14135] should_fail_ex+0x25e/0x270 [ 390.436970][T14135] should_fail+0xb/0x20 [ 390.436996][T14135] should_fail_usercopy+0x1a/0x20 [ 390.437073][T14135] _copy_from_user+0x1c/0xb0 [ 390.437098][T14135] ___sys_sendmsg+0xc1/0x1e0 [ 390.437206][T14135] ? terminate_walk+0x1d5/0x200 [ 390.437273][T14135] __sys_sendmmsg+0x185/0x320 [ 390.437364][T14135] __x64_sys_sendmmsg+0x57/0x70 [ 390.437392][T14135] x64_sys_call+0x27aa/0x3020 [ 390.437414][T14135] do_syscall_64+0x136/0x3c0 [ 390.437471][T14135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.437493][T14135] RIP: 0033:0x7ff3e2d2de59 [ 390.437508][T14135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.437526][T14135] RSP: 002b:00007ff3e1766028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 390.437561][T14135] RAX: ffffffffffffffda RBX: 00007ff3e2fb6090 RCX: 00007ff3e2d2de59 [ 390.437639][T14135] RDX: 04000000000001cd RSI: 0000200000005280 RDI: 0000000000000008 [ 390.437654][T14135] RBP: 00007ff3e1766090 R08: 0000000000000000 R09: 0000000000000000 [ 390.437665][T14135] R10: 000000001008c811 R11: 0000000000000246 R12: 0000000000000001 [ 390.437677][T14135] R13: 00007ff3e2fb6128 R14: 00007ff3e2fb6090 R15: 00007fffab5fc238 [ 390.437698][T14135] [ 390.437871][T14124] loop3: lost filesystem error report for type 5 error -117 [ 390.687652][T14124] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.2836: Freeing blocks not in datazone - block = 0, count = 4096 [ 390.710353][T14124] loop3: lost filesystem error report for type 5 error -117 [ 390.710777][T14124] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.2836: Invalid inode bitmap blk 0 in block_group 0 [ 390.736353][ T6130] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:23: Failed to release dquot type 0 [ 390.752665][T14124] loop3: lost filesystem error report for type 5 error -117 [ 390.753791][T14124] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 390.772141][ T6130] loop3: lost filesystem error report for type 5 error -117 [ 390.855269][T14124] loop3: lost filesystem error report for type 5 error -117 [ 390.864824][T14124] EXT4-fs (loop3): 1 orphan inode deleted [ 390.881096][T14124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.922608][T14124] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 390.966572][T13018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.069976][T14145] loop4: detected capacity change from 0 to 8192 [ 391.104992][T14156] loop6: detected capacity change from 0 to 512 [ 391.147746][T14145] loop4: detected capacity change from 0 to 4096 [ 391.166784][T14156] EXT4-fs: quotafile must be on filesystem root [ 391.707581][T14174] loop6: detected capacity change from 0 to 512 [ 393.361203][T14172] loop8: detected capacity change from 0 to 256 [ 394.463492][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 394.463508][ T28] audit: type=1400 audit(1783314305.882:1848): avc: denied { setopt } for pid=14171 comm="syz.8.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 394.563631][T14174] EXT4-fs warning (device loop6): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop6. [ 395.304046][T14188] loop0: detected capacity change from 0 to 256 [ 395.441162][ T28] audit: type=1400 audit(1783314306.362:1849): avc: denied { write } for pid=14179 comm="syz.0.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 396.489720][T14198] program syz.4.2853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.499103][ T28] audit: type=1400 audit(1783314307.902:1850): avc: denied { write } for pid=14197 comm="syz.4.2853" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 396.764389][T14188] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 397.632437][ T28] audit: type=1400 audit(1783314309.042:1851): avc: denied { unmount } for pid=13514 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 397.751912][ T28] audit: type=1400 audit(1783314309.072:1852): avc: denied { read } for pid=14200 comm="syz.6.2854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 397.838806][ T28] audit: type=1400 audit(1783314309.102:1853): avc: denied { lock } for pid=14205 comm="syz.8.2855" path="socket:[37824]" dev="sockfs" ino=37824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 397.900353][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2859'. [ 397.928503][ T28] audit: type=1400 audit(1783314309.312:1854): avc: denied { nlmsg_write } for pid=14215 comm="syz.6.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 397.949279][ T28] audit: type=1400 audit(1783314309.352:1855): avc: denied { create } for pid=14214 comm="syz.0.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 397.986814][ T28] audit: type=1400 audit(1783314309.352:1856): avc: denied { create } for pid=14214 comm="syz.0.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 398.033805][T14227] loop0: detected capacity change from 0 to 512 [ 398.092953][ T28] audit: type=1400 audit(1783314309.502:1857): avc: denied { create } for pid=14228 comm="syz.8.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 398.191951][T14232] loop0: detected capacity change from 0 to 512 [ 398.260028][T14235] program syz.4.2866 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.289993][T14237] loop0: detected capacity change from 0 to 512 [ 398.324114][T14237] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 398.333827][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2866'. [ 398.354655][T14237] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.2867: bad orphan inode 131083 [ 398.366346][T14237] loop0: lost filesystem error report for type 5 error -117 [ 398.382344][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 398.396920][ C1] EXT4-fs (loop0): initial error at time 1783314309: ext4_orphan_get:1425 [ 398.405953][ C1] EXT4-fs (loop0): last error at time 1783314309: ext4_orphan_get:1425 [ 398.437828][T14245] loop8: detected capacity change from 0 to 512 [ 398.490115][T14237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.533302][T14245] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.546018][T14245] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.042312][T14251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2869'. [ 399.056088][T14225] x_tables: duplicate underflow at hook 1 [ 399.126981][T14254] IPv6: addrconf: prefix option has invalid lifetime [ 399.144586][T13876] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.235954][T13514] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.302865][T14262] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 399.384678][T14262] loop8: detected capacity change from 0 to 512 [ 399.440452][T14262] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 399.448413][T14262] System zones: 1-12 [ 399.481685][T14262] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.2874: error while reading EA inode 32 err=-116 [ 399.493961][T14262] loop8: lost filesystem error report for type 5 error -117 [ 399.515446][T14262] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.2874: error while reading EA inode 32 err=-116 [ 399.539485][T14262] loop8: lost filesystem error report for type 5 error -117 [ 399.541606][T14262] EXT4-fs (loop8): 1 orphan inode deleted [ 399.554381][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 399.554409][ T28] audit: type=1400 audit(1783314310.962:1873): avc: denied { connect } for pid=14274 comm="syz.6.2881" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 399.588660][T14262] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.629622][T14262] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2874'. [ 399.650116][ T28] audit: type=1400 audit(1783314311.032:1874): avc: denied { setopt } for pid=14274 comm="syz.6.2881" laddr=19bb:aa8a:29c:ee00:a8aa:aaff:feaa:aaaa lport=58 faddr=ff03::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 399.676229][T14273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=14273 comm=syz.3.2879 [ 399.689632][T14277] loop0: detected capacity change from 0 to 512 [ 399.690753][T14273] 9pnet_fd: Insufficient options for proto=fd [ 399.700845][ T28] audit: type=1400 audit(1783314311.102:1875): avc: denied { mounton } for pid=14272 comm="syz.3.2879" path="/56/file1" dev="tmpfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 399.746856][T14277] EXT4-fs: Ignoring removed nobh option [ 399.752514][T14277] EXT4-fs: Ignoring removed oldalloc option [ 399.760611][T14277] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 399.829543][T14282] vlan3: entered allmulticast mode [ 399.860392][T14277] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2880: invalid indirect mapped block 256 (level 1) [ 399.874988][T13514] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.884317][T14282] veth0_to_bond: entered allmulticast mode [ 399.896950][T14277] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 399.899022][T14277] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2880: invalid indirect mapped block 2683928664 (level 1) [ 399.923132][T14279] loop3: detected capacity change from 0 to 2048 [ 399.923136][T14277] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 399.943749][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 399.960365][ C1] EXT4-fs (loop0): initial error at time 1783314311: ext4_free_branches:1023: inode 13 [ 399.970786][ C1] EXT4-fs (loop0): last error at time 1783314311: ext4_free_branches:1023: inode 13 [ 399.987373][T14277] EXT4-fs (loop0): 1 truncate cleaned up [ 400.036714][T14279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 400.092345][T14277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.110363][T14289] IPv6: addrconf: prefix option has invalid lifetime [ 400.113253][T14291] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2884'. [ 400.317246][T14243] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 400.458165][ T28] audit: type=1400 audit(1783314311.872:1876): avc: denied { write } for pid=14272 comm="syz.3.2879" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 400.526106][T14303] loop4: detected capacity change from 0 to 512 [ 400.577893][T14303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.591508][T14303] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.737962][ T28] audit: type=1400 audit(1783314311.912:1877): avc: denied { read append open } for pid=14272 comm="syz.3.2879" path="/56/file2/blkio.bfq.io_queued" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 400.876474][ T28] audit: type=1400 audit(1783314312.022:1878): avc: denied { write } for pid=14296 comm="syz.4.2888" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 400.993229][ T28] audit: type=1400 audit(1783314312.082:1879): avc: denied { write } for pid=14272 comm="syz.3.2879" path="socket:[39082]" dev="sockfs" ino=39082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 401.113441][ T28] audit: type=1400 audit(1783314312.142:1880): avc: denied { sqpoll } for pid=14272 comm="syz.3.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 401.276268][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.303108][T13876] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.363688][T14294] x_tables: duplicate underflow at hook 1 [ 401.398222][T14315] loop6: detected capacity change from 0 to 512 [ 401.408359][T14315] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 401.424913][T14315] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.2891: bad orphan inode 131083 [ 401.437809][T14315] loop6: lost filesystem error report for type 5 error -117 [ 401.438938][T14315] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.486759][ T28] audit: type=1400 audit(1783314312.892:1881): avc: denied { write } for pid=14314 comm="syz.6.2891" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 401.642213][T14321] loop0: detected capacity change from 0 to 512 [ 401.705213][T14321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.718915][T14321] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.879366][ T28] audit: type=1400 audit(1783314313.152:1882): avc: denied { write } for pid=14316 comm="syz.0.2901" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 401.988119][ T7789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.300075][T13876] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.343805][T14334] program syz.6.2893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.489675][T14345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2893'. [ 402.535551][T14279] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 402.558846][T14346] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2898'. [ 402.580686][T14348] loop4: detected capacity change from 0 to 1024 [ 402.585951][T14279] EXT4-fs (loop3): This should not happen!! Data will be lost [ 402.585951][T14279] [ 402.587993][T14348] EXT4-fs: Ignoring removed orlov option [ 402.646460][T14279] EXT4-fs (loop3): Total free blocks count 0 [ 402.668460][T14279] EXT4-fs (loop3): Free/Dirty block details [ 402.687656][T14279] EXT4-fs (loop3): free_blocks=2415919104 [ 402.701298][T14348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.714938][T14279] EXT4-fs (loop3): dirty_blocks=4336 [ 402.738888][T14279] EXT4-fs (loop3): Block reservation details [ 402.758973][T14279] EXT4-fs (loop3): i_reserved_data_blocks=271 [ 402.770211][T14348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2896'. [ 402.825966][T14352] program syz.0.2900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.935900][ T5647] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 402.984960][T14354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2900'. [ 402.985311][T13018] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 403.243511][T14359] loop6: detected capacity change from 0 to 512 [ 403.250133][T14359] EXT4-fs: Ignoring removed nobh option [ 403.255786][T14359] EXT4-fs: Ignoring removed oldalloc option [ 403.347846][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.348067][T14359] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 403.392671][T14359] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2903: invalid indirect mapped block 256 (level 1) [ 403.425927][T14363] x_tables: duplicate underflow at hook 1 [ 403.437078][T14359] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 403.438368][T14359] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2903: invalid indirect mapped block 2683928664 (level 1) [ 403.448217][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 403.448268][ C0] EXT4-fs (loop6): initial error at time 1783314314: ext4_free_branches:1023: inode 13 [ 403.448398][ C0] EXT4-fs (loop6): last error at time 1783314314: ext4_free_branches:1023: inode 13 [ 403.489529][T14359] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 403.491108][T14359] EXT4-fs (loop6): 1 truncate cleaned up [ 403.509207][T14359] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.523575][T14366] FAULT_INJECTION: forcing a failure. [ 403.523575][T14366] name failslab, interval 1, probability 0, space 0, times 0 [ 403.537121][T14366] CPU: 0 UID: 0 PID: 14366 Comm: syz.3.2905 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 403.537165][T14366] Tainted: [W]=WARN [ 403.537172][T14366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 403.537185][T14366] Call Trace: [ 403.537191][T14366] [ 403.537279][T14366] __dump_stack+0x1d/0x30 [ 403.537310][T14366] dump_stack_lvl+0x95/0xd0 [ 403.537385][T14366] dump_stack+0x15/0x1b [ 403.537408][T14366] should_fail_ex+0x25e/0x270 [ 403.537482][T14366] should_failslab+0x8c/0xb0 [ 403.537505][T14366] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 403.537537][T14366] ? __alloc_skb+0x2db/0x6f0 [ 403.537568][T14366] ? __alloc_skb+0x2db/0x6f0 [ 403.537644][T14366] __alloc_skb+0x2db/0x6f0 [ 403.537674][T14366] ? xas_load+0x413/0x430 [ 403.537721][T14366] tipc_msg_build+0xc1/0x950 [ 403.537818][T14366] ? tipc_node_xmit+0x1d5/0xa90 [ 403.537847][T14366] __tipc_sendstream+0x6c1/0xb70 [ 403.537880][T14366] ? __pfx_woken_wake_function+0x10/0x10 [ 403.537913][T14366] tipc_sendstream+0x3e/0x60 [ 403.537963][T14366] ? __pfx_tipc_sendstream+0x10/0x10 [ 403.538023][T14366] ____sys_sendmsg+0x532/0x580 [ 403.538065][T14366] ___sys_sendmsg+0x195/0x1e0 [ 403.538146][T14366] ? terminate_walk+0x1d5/0x200 [ 403.538229][T14366] __sys_sendmmsg+0x185/0x320 [ 403.538261][T14366] __x64_sys_sendmmsg+0x57/0x70 [ 403.538316][T14366] x64_sys_call+0x27aa/0x3020 [ 403.538388][T14366] do_syscall_64+0x136/0x3c0 [ 403.538416][T14366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.538434][T14366] RIP: 0033:0x7f01f012de59 [ 403.538448][T14366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.538467][T14366] RSP: 002b:00007f01eeb66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 403.538556][T14366] RAX: ffffffffffffffda RBX: 00007f01f03b6090 RCX: 00007f01f012de59 [ 403.538568][T14366] RDX: 04000000000001cd RSI: 0000200000005280 RDI: 0000000000000008 [ 403.538579][T14366] RBP: 00007f01eeb66090 R08: 0000000000000000 R09: 0000000000000000 [ 403.538636][T14366] R10: 000000001008c811 R11: 0000000000000246 R12: 0000000000000002 [ 403.538647][T14366] R13: 00007f01f03b6128 R14: 00007f01f03b6090 R15: 00007ffc3b0a4388 [ 403.538663][T14366] [ 403.908320][T14370] loop4: detected capacity change from 0 to 256 [ 404.242411][T14243] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 404.469438][T14369] x_tables: duplicate underflow at hook 1 [ 404.516739][T14243] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 404.532389][T14370] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 404.605230][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 404.605243][ T28] audit: type=1400 audit(1783314315.962:1893): avc: denied { mmap_zero } for pid=14364 comm="syz.4.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 405.065221][ T28] audit: type=1400 audit(1783314316.482:1894): avc: denied { write } for pid=14376 comm="syz.3.2909" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 405.089316][ T3360] kernel read not supported for file /mdstat (pid: 3360 comm: kworker/1:2) [ 405.441655][T14387] x_tables: duplicate underflow at hook 1 [ 405.623267][ T7789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.770335][ T28] audit: type=1400 audit(1783314317.172:1895): avc: denied { watch watch_reads } for pid=14395 comm="syz.4.2916" path="/524/control" dev="tmpfs" ino=2836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 405.860723][T14399] IPv6: addrconf: prefix option has invalid lifetime [ 406.410411][T14401] loop3: detected capacity change from 0 to 512 [ 406.457548][T14401] EXT4-fs: journaled quota format not specified [ 406.554952][T14404] IPv6: addrconf: prefix option has invalid lifetime [ 406.855773][ T28] audit: type=1400 audit(1783314317.272:1896): avc: denied { read write } for pid=14398 comm="syz.6.2914" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 406.882290][ T28] audit: type=1400 audit(1783314317.272:1897): avc: denied { open } for pid=14398 comm="syz.6.2914" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 407.091270][ T28] audit: type=1400 audit(1783314317.272:1898): avc: denied { ioctl } for pid=14398 comm="syz.6.2914" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x942a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 407.150915][ T28] audit: type=1400 audit(1783314317.692:1899): avc: denied { create } for pid=14393 comm="syz.3.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 407.506782][T14413] loop4: detected capacity change from 0 to 1024 [ 407.513713][T14413] EXT4-fs: quotafile must be on filesystem root [ 408.271949][T14410] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2919'. [ 409.187502][T14392] program syz.8.2913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.197228][T14417] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2923'. [ 409.231444][ T28] audit: type=1400 audit(1783314320.642:1900): avc: denied { mounton } for pid=14416 comm="syz.4.2923" path="/527/file0" dev="tmpfs" ino=2853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 409.495255][ T28] audit: type=1400 audit(1783314320.912:1901): avc: denied { read } for pid=14430 comm="syz.3.2926" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 409.537623][ T28] audit: type=1400 audit(1783314320.912:1902): avc: denied { open } for pid=14430 comm="syz.3.2926" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 409.618544][T14435] IPv6: addrconf: prefix option has invalid lifetime [ 409.634012][T14421] loop6: detected capacity change from 0 to 512 [ 409.652835][T14421] EXT4-fs: Ignoring removed nomblk_io_submit option [ 409.713098][T14421] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 409.740416][T14421] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.2921: corrupted in-inode xattr: e_value size too large [ 409.754442][T14421] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 409.800751][T14451] loop3: detected capacity change from 0 to 512 [ 409.816951][T14421] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2921: couldn't read orphan inode 15 (err -117) [ 409.828799][T14421] loop6: lost filesystem error report for type 5 error -117 [ 409.831154][T14421] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.831494][T14449] loop4: detected capacity change from 0 to 512 [ 409.971915][T14455] IPv6: addrconf: prefix option has invalid lifetime [ 410.031646][ T7789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.149051][T14461] loop0: detected capacity change from 0 to 1024 [ 410.157773][T14461] EXT4-fs: quotafile must be on filesystem root [ 410.570817][T14473] IPv6: addrconf: prefix option has invalid lifetime [ 411.014999][T14480] loop8: detected capacity change from 0 to 512 [ 411.449784][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 411.449798][ T28] audit: type=1400 audit(1783314322.792:1906): avc: denied { create } for pid=14496 comm="syz.6.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 411.544585][ T28] audit: type=1400 audit(1783314322.792:1907): avc: denied { connect } for pid=14496 comm="syz.6.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 411.587714][ T28] audit: type=1400 audit(1783314322.792:1908): avc: denied { bind } for pid=14496 comm="syz.6.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 411.745016][ T28] audit: type=1400 audit(1783314322.792:1909): avc: denied { write } for pid=14496 comm="syz.6.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 411.764509][ T28] audit: type=1400 audit(1783314322.852:1910): avc: denied { getopt } for pid=14496 comm="syz.6.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 411.833337][T14491] loop8: detected capacity change from 0 to 512 [ 411.874854][T14491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 411.902008][T14491] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 411.919377][T14491] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.2948: corrupted in-inode xattr: e_value size too large [ 411.944622][T14491] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 411.944788][T14491] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2948: couldn't read orphan inode 15 (err -117) [ 411.953989][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 411.954008][ C0] EXT4-fs (loop8): initial error at time 1783314323: ext4_iget_extra_inode:5180: inode 15 [ 411.954045][ C0] EXT4-fs (loop8): last error at time 1783314323: ext4_iget_extra_inode:5180: inode 15 [ 411.995804][T14491] loop8: lost filesystem error report for type 5 error -117 [ 411.996365][T14491] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.100939][T14513] loop0: detected capacity change from 0 to 512 [ 412.121121][T14516] loop6: detected capacity change from 0 to 512 [ 412.124545][T14513] EXT4-fs: quotafile must be on filesystem root [ 412.140525][T13514] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.190217][T14517] IPv6: addrconf: prefix option has invalid lifetime [ 412.325456][T14527] FAULT_INJECTION: forcing a failure. [ 412.325456][T14527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.350631][T14527] CPU: 0 UID: 0 PID: 14527 Comm: syz.4.2963 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 412.350665][T14527] Tainted: [W]=WARN [ 412.350675][T14527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.350690][T14527] Call Trace: [ 412.350697][T14527] [ 412.350777][T14527] __dump_stack+0x1d/0x30 [ 412.350826][T14527] dump_stack_lvl+0x95/0xd0 [ 412.350851][T14527] dump_stack+0x15/0x1b [ 412.350871][T14527] should_fail_ex+0x25e/0x270 [ 412.350966][T14527] should_fail+0xb/0x20 [ 412.350994][T14527] should_fail_usercopy+0x1a/0x20 [ 412.351026][T14527] _copy_to_user+0x20/0xa0 [ 412.351074][T14527] simple_read_from_buffer+0xb5/0x130 [ 412.351098][T14527] proc_fail_nth_read+0x10e/0x150 [ 412.351123][T14527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 412.351146][T14527] vfs_read+0x18e/0x7c0 [ 412.351208][T14527] ? irqentry_exit+0x58f/0x610 [ 412.351234][T14527] ? __rcu_read_unlock+0x4e/0x70 [ 412.351339][T14527] ? __fget_files+0x184/0x1c0 [ 412.351368][T14527] ? mutex_lock+0x57/0x90 [ 412.351400][T14527] ksys_read+0xdc/0x1a0 [ 412.351416][T14527] __x64_sys_read+0x40/0x50 [ 412.351431][T14527] x64_sys_call+0x2886/0x3020 [ 412.351501][T14527] do_syscall_64+0x136/0x3c0 [ 412.351712][T14527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.351814][T14527] RIP: 0033:0x7f3dcda6e68e [ 412.351829][T14527] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 412.351849][T14527] RSP: 002b:00007f3dcc506fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 412.351872][T14527] RAX: ffffffffffffffda RBX: 00007f3dcc5076c0 RCX: 00007f3dcda6e68e [ 412.351888][T14527] RDX: 000000000000000f RSI: 00007f3dcc5070a0 RDI: 0000000000000005 [ 412.351904][T14527] RBP: 00007f3dcc507090 R08: 0000000000000000 R09: 0000000000000000 [ 412.351954][T14527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.351967][T14527] R13: 00007f3dcdd36038 R14: 00007f3dcdd35fa0 R15: 00007ffeefcff548 [ 412.351990][T14527] [ 412.575514][T14534] loop0: detected capacity change from 0 to 512 [ 412.807751][T14534] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.2955: corrupted inode contents [ 412.821392][T14534] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 412.822614][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 412.838996][ C0] EXT4-fs (loop0): initial error at time 1783314324: ext4_do_update_inode:5742: inode 16 [ 412.850217][ C0] EXT4-fs (loop0): last error at time 1783314324: ext4_do_update_inode:5742: inode 16 [ 412.866338][T14534] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #16: comm syz.0.2955: mark_inode_dirty error [ 412.878550][T14534] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 412.880031][T14534] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.2955: corrupted inode contents [ 412.903022][T14534] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 412.904582][T14534] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.2955: mark_inode_dirty error [ 412.926195][T14534] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 412.928639][T14534] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.2955: corrupted inode contents [ 412.950875][T14534] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 412.951982][T14534] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 412.971342][T14534] loop0: lost filesystem error report for type 5 error -117 [ 412.976707][T14534] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.2955: corrupted inode contents [ 412.997349][T14534] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 412.998792][T14534] EXT4-fs error (device loop0): ext4_truncate:4691: inode #16: comm syz.0.2955: mark_inode_dirty error [ 413.020023][T14534] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 413.021307][T14534] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 413.041108][T14534] loop0: lost filesystem error report for type 5 error -117 [ 413.047883][T14534] EXT4-fs (loop0): 1 truncate cleaned up [ 413.082171][T14534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.100755][T14534] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.294969][ T28] audit: type=1400 audit(1783314324.612:1911): avc: denied { write } for pid=14512 comm="syz.0.2955" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 413.519589][ T28] audit: type=1400 audit(1783314324.612:1912): avc: denied { create } for pid=14512 comm="syz.0.2955" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 413.577154][T14551] loop3: detected capacity change from 0 to 512 [ 413.660603][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2970'. [ 413.703289][T14551] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 413.711482][T14551] System zones: 0-2, 18-18, 34-34 [ 413.737609][T14551] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2969: bg 0: block 248: padding at end of block bitmap is not set [ 413.773985][T14561] IPv6: addrconf: prefix option has invalid lifetime [ 413.794577][T14551] loop3: lost filesystem error report for type 5 error -117 [ 413.794771][T14551] Quota error (device loop3): write_blk: dquota write failed [ 413.809697][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 413.809711][ C0] EXT4-fs (loop3): last error at time 1783314325: ext4_validate_block_bitmap:441 [ 413.829293][T14558] loop6: detected capacity change from 0 to 512 [ 413.893921][T14563] loop8: detected capacity change from 0 to 512 [ 413.912187][T14551] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 413.965048][T14551] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.2969: Failed to acquire dquot type 1 [ 414.000917][T14568] loop8: detected capacity change from 0 to 512 [ 414.012177][T14551] loop3: lost filesystem error report for type 5 error -117 [ 414.055296][T14551] EXT4-fs (loop3): 1 truncate cleaned up [ 414.062917][T14551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.103690][ T28] audit: type=1400 audit(1783314325.512:1913): avc: denied { setopt } for pid=14569 comm="syz.8.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 414.133574][T14551] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.282385][T14579] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2980'. [ 414.310653][T14585] program syz.8.2982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.397180][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2982'. [ 414.470913][T14593] loop6: detected capacity change from 0 to 512 [ 414.520138][T14595] IPv6: addrconf: prefix option has invalid lifetime [ 414.570820][T13018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.590613][T14597] program syz.4.2988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.959651][ T2980] ================================================================== [ 414.967811][ T2980] BUG: KCSAN: data-race in __lookup_mnt / __umount_mnt [ 414.974713][ T2980] [ 414.977062][ T2980] write to 0xffff888104f6aa90 of 8 bytes by task 13876 on cpu 0: [ 414.984811][ T2980] __umount_mnt+0x4e/0x2c0 [ 414.989255][ T2980] umount_tree+0x5ff/0x8a0 [ 414.993693][ T2980] path_umount+0x799/0x7f0 [ 414.998116][ T2980] __x64_sys_umount+0xb6/0xe0 [ 415.002810][ T2980] x64_sys_call+0x103b/0x3020 [ 415.007517][ T2980] do_syscall_64+0x136/0x3c0 [ 415.012133][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.018047][ T2980] [ 415.020396][ T2980] read to 0xffff888104f6aa90 of 8 bytes by task 2980 on cpu 1: [ 415.027944][ T2980] __lookup_mnt+0x84/0xf0 [ 415.032303][ T2980] __follow_mount_rcu+0xbc/0x2a0 [ 415.037266][ T2980] step_into_slowpath+0x30c/0x4c0 [ 415.042303][ T2980] link_path_walk+0x947/0xdd0 [ 415.046994][ T2980] path_lookupat+0x53/0x4c0 [ 415.051548][ T2980] filename_lookup+0x18f/0x390 [ 415.056332][ T2980] do_readlinkat+0x74/0x2f0 [ 415.060864][ T2980] __x64_sys_readlink+0x47/0x60 [ 415.065728][ T2980] x64_sys_call+0x2b51/0x3020 [ 415.070418][ T2980] do_syscall_64+0x136/0x3c0 [ 415.075056][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.080984][ T2980] [ 415.083320][ T2980] value changed: 0xffff888119982780 -> 0xffff888104f6aa80 [ 415.090428][ T2980] [ 415.092765][ T2980] Reported by Kernel Concurrency Sanitizer on: [ 415.098950][ T2980] CPU: 1 UID: 0 PID: 2980 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 415.109416][ T2980] Tainted: [W]=WARN [ 415.113231][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 415.123295][ T2980] ================================================================== [ 415.244400][T13876] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.