last executing test programs: 5m40.793743103s ago: executing program 32 (id=502): connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x5d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) write$tun(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x22052, r0, 0x0) futex(&(0x7f0000000000)=0x1, 0x1, 0x2, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000100)=0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) 3m47.442009086s ago: executing program 33 (id=1053): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000080)=0x1c) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 3m1.970818312s ago: executing program 4 (id=1582): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = socket(0x2, 0x3, 0xff) close(0x3) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x2, @private0, 0xa}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}], 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x404, @multicast2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0xfe3e, 0x8, @local, @loopback, 0x7, 0x700, 0x9, 0x3}}) connect(r1, &(0x7f0000000140)=@xdp={0x2c, 0x7, r4, 0x9}, 0x80) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1], 0xb2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getrule={0x14, 0x22, 0x8, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040881}, 0x24040085) 3m1.886109134s ago: executing program 4 (id=1583): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='bond0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000001c0)='wlan0\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) poll(&(0x7f0000000080)=[{r0, 0x2012}], 0x1, 0xff7fffe4) splice(r10, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) 3m1.021269895s ago: executing program 4 (id=1595): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PRIORITY={0x6, 0x2, 0xfffe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044800}, 0x4040) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x4}, 0x10008, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r1, &(0x7f0000000340)=""/19, 0x13, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000100000000000000000000000000000102000000000000000200010000000000000007160000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'team0\x00', 0x4}) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) 3m0.804934001s ago: executing program 4 (id=1599): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0x20, 0x40000}, 0x4000) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4010, &(0x7f0000000280)={[{@nodelalloc}]}, 0x2, 0xbd8, &(0x7f00000083c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x80201, 0x88) 3m0.305085693s ago: executing program 4 (id=1604): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00800018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc}, 0x94) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0xda8d) bind$xdp(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb700000000605e7ce00300000000000085000000b000000018110000f1c9c878c680e9fb9dd4a9a81b6c55318471b87c05d446", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095c2af8f1b639c59da03d0f3d60ff902bebfd91c8bfbb736032b0de0998181e3fc9e971b675e385458a6413ea9f3e2e57a553841c470c6dd0005b8f2dd7d52f50e6934a20582d193ba774f79115c7ae1ad525fa7ecfddaeb9ab6c63752da20e8bb91b92cedc7531cf0cf4671514f8a5c2bd585323e5ea1007fbd5aa9ecf4d62079b1d1bb095ce55d1d592fea9c1acbfc22e01ebb7ac766242757d3e26bb624a28f41321b299f74"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/sl811-hcd/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='pcspkr', 0x6) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x2, 0x32}, 0x2, @in6=@local, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m59.566035042s ago: executing program 2 (id=1609): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(0xffffffffffffffff, &(0x7f0000003480)=[{&(0x7f0000000500)="a2e3d126b790b16dde051bd3c259c3f921cd911270fa6ac4a91b5396011a9154d88be7062e53c1665255638a5e5e9844c77549ce1eb90eba10480bf545169640a3f08d", 0x43}, {&(0x7f0000000780)}, {&(0x7f0000000880)="a4da13394acf72dbb5cdffb1db308efd289e1716d933ee6c6404968df4859e6505a32b64333ea6823b59e8a0e881503dcfbe943101228c17871366029918fbb935bc992c3f83114acd9644270c1b4bf6bfb228c42334cd438b14b923e0492137560d39f02033968ec5504fca695e5143", 0x70}, {&(0x7f0000003380)}], 0x4, 0x8) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000033240)=""/102398, 0x18ffe, 0x7ffffffffffffffa) write$selinux_load(r0, &(0x7f0000000340)=ANY=[], 0x2000) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000400", 0x20) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0, @in6={{0xa, 0x4e24, 0x8, @remote, 0x80000000}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000001500)={0x5, 0x6, 0x2, 0xffff, 0x6, 0x93, 0x2, 0x9, r7}, &(0x7f0000001540)=0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030040000b12d25a80648c2594f90124fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) 2m58.941507357s ago: executing program 34 (id=1617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000140)={r0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0xfea9}, {&(0x7f0000002e40)="d4"}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40), 0x3}}, {{0x0, 0x57, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0xffffffb6}], 0x1}}], 0x4, 0x4000084) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000ac0)={&(0x7f0000000500)={0xa, 0x4e23, 0x1, @mcast1, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dontfrag={{0x18, 0x29, 0x3e, 0x1}}], 0x30}, 0x4004801) r6 = socket(0x18, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x2, 0x15a, &(0x7f0000000780)="$eJzs2z+r01AYB+C33l6NutxZHAIuTkX9BIpUEAOK0kEnherSSsEu0cV+FL+gIJ26HdFoS/9JK/QGkudZ8sLvHDgnkLycQN7e/jgaTqYfJi/mkXU60X0YeSw6cRFX4iwqswAAmmSRUvxIKaVrs7j+LVJKW0O+1rIwAOBkDuj/AEDD6P8A0D76PwC0z6vXb549Kor+yzzPIr7PykE5qK5V/uRp0b+X/3axmjUvy8HZMr9f5fl6fh43/uQPduZX4+6dKv+VPX5ebOQ3Y3j67QMAAEAr9PKl9fP937y3J9/+PrBxfu/Gre4lbQIAOMr085fRu/H4/aejioj/mdWI4jwidkdZtPi2KJpW1P1mAk5t9dDXvRIAAAAAAAAAAAAAAGCfg/8Hyv49eJH2T697jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDpZwAAAP//iBFNOg==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000040)='.\x00', 0x18820f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./bus/file0\x00') connect$inet6(r6, &(0x7f0000000000)={0x1c, 0x18, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x8, @remote, 0x80000000}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000001500)={0x5, 0x6, 0x2, 0xffff, 0x6, 0x93, 0x2, 0x9, r7}, &(0x7f0000001540)=0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030040000b12d25a80648c2594f90124fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) 2m57.829948934s ago: executing program 2 (id=1629): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020600) listen(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0xbb, 0xc40, 0x2, 0x20, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRES8=0x0, @ANYRES32=r0, @ANYRESHEX=r5, @ANYBLOB="460fc5461c189e4ede35f79ea5831df1784a0d966999c5fffbe12d47b69ac4925e5b15bdb74a6f02fcfa65531ce62069ec3f865f96ddbb03e2971df27f72e3b8048d1afdc85d2fd0e184a1ee41e098d359ff89f0d135fff76a2063bb7e50a30c3669701fc8936e8eb0f8a3ae7062b54807a3fe1d1515f223d7351c27d34f967c487403c839776fe1b5b63cfaf03b115710109b91c31015c96449eeaa705d1941d505bc3fdde4b1908b57902132b98b3c8aeb6da7e382c6fdd738fe37a74b82adac621d21493d8fb4757b371625e5a96646c4", @ANYBLOB="8f54d3d14328e14d9b155107878320348320fbbde990a6317a7c7f204317507353c734f303f06ffcc841e76b24bbf9b75e6b7073d3e34ab75fc109784c5783dd8ac46350fd42f9bce672b415a760674d1479"], 0x48}}, 0x0) socketpair(0x22, 0x2, 0xc, &(0x7f0000000000)) 2m57.407338534s ago: executing program 2 (id=1631): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c, 0x80000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000440)=0xc) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r5) r6 = socket$kcm(0x10, 0x2, 0x0) eventfd(0x80000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x60184, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x2, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ptrace(0x420e, r5) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800010001000000082daa3519b7395e"], 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000500)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000a3c6f362c2fcc3f220395511ce98628977c247fea664ca814174eea7d58bf9c1a76419ac96caf1c9d5609ee8ba4c128337779bb932afcbe5ba4e656f05ba95fc75cc04d35076d298a5c0688336a9473c3ae62638e6", @ANYRES16=r3, @ANYBLOB="01000000000000000000030000000800010001000000"], 0x1c}}, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) munmap(&(0x7f0000b31000/0x4000)=nil, 0x4000) madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="a00076003263b790e77b965fc73a93df5ca913a3087c0ac0d7ed42fd88419296414fa10c2d9b8074d39b225898c7ca1ff5ec6b7fc14eea9d3fbb510dd29278dbe5cc5bd978f01854103accfab23de8e8cb25424a6fd359ce3b50c30000347e92fe4e5912d8726dbcb3b7fe73285ed0c6ceae40e7f3fe32a4b020d97110fc68fa6abab419246163e0bdd60b9039ab8aa1a0c84bd34daa5c2f6f53ccecedad4a0133e060ef166fdff9f8e9a39a9bd28d80a153"], 0x7e) munlockall() ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1/file0\x00'}) 2m56.484216837s ago: executing program 2 (id=1637): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00800018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc}, 0x94) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0xda8d) bind$xdp(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb700000000605e7ce00300000000000085000000b000000018110000f1c9c878c680e9fb9dd4a9a81b6c55318471b87c05d446", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095c2af8f1b639c59da03d0f3d60ff902bebfd91c8bfbb736032b0de0998181e3fc9e971b675e385458a6413ea9f3e2e57a553841c470c6dd0005b8f2dd7d52f50e6934a20582d193ba774f79115c7ae1ad525fa7ecfddaeb9ab6c63752da20e8bb91b92cedc7531cf0cf4671514f8a5c2bd585323e5ea1007fbd5aa9ecf4d62079b1d1bb095ce55d1d592fea9c1acbfc22e01ebb7ac766242757d3e26bb624a28f41321b299f74"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/sl811-hcd/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='pcspkr', 0x6) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x2, 0x32}, 0x2, @in6=@local, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m53.282000026s ago: executing program 2 (id=1649): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x11e0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setresuid(0xee01, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7ffb, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x5c, 0x48, 0x932, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e22, @multicast2}, 0x200, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1ff, 0x80000001, 0x1000}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r0, 0x0, 0x0) 2m53.281807766s ago: executing program 35 (id=1649): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x11e0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setresuid(0xee01, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7ffb, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x5c, 0x48, 0x932, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={0x0, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e22, @multicast2}, 0x200, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1ff, 0x80000001, 0x1000}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r0, 0x0, 0x0) 2m43.629571493s ago: executing program 6 (id=1776): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/udp\x00') (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08001a00", @ANYRES32=r2, @ANYBLOB="08001b"], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) write(r3, &(0x7f0000000540)="5493a62dcbb09742691d92b2801849bd8507aa76d6470ab7a464dd1d777423570daab7207018b0a0bd083655bd987f3329517eeb8878d8968ff70c5d8130ef5afb4016fe8c3253a8ed95287036329fc9872c5ea8b88aba1a0145266e9a0a1308465d7c086a8e4c43a240e758ba3599bfdb120f98c924e86098f873666163b8eeff6e4dc3894e17e68a245bca18a794f1fe3f5feee93a8104c57a01ae35c4725ee09d86ed8b6c323c1d074b0ede7b968379", 0xb1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setuid(0xee01) (async) fchmod(r4, 0x34) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="b76b6e00000000e64f001100fc000000000000000000000000000001e0000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a000a000c001c00", @ANYRES32=0x0, @ANYBLOB="040000000a0010", @ANYRES32=r3, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRES8=r5], 0xb8}, 0x1, 0x0, 0x0, 0xc024}, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x200000, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x0, 0xff, {{0x8, 0x4, 0x1, 0x1, 0x20, 0x68, 0x0, 0x5, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @lsrr={0x83, 0xb, 0x92, [@multicast2, @loopback]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000001000007000059000800000b130600", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="0500000002000000010000000b00"/28], 0x50) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r8, 0x0) (async) mbind(&(0x7f000072d000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x1) (async) mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x440, 0x0) (async) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703010000001f00000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2m43.511948786s ago: executing program 6 (id=1779): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x6, @time={0x7fffffff, 0xd6a}, 0x5, {}, 0x0, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000001100), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000010c0)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000002380)) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) 2m43.426493108s ago: executing program 6 (id=1780): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) getegid() (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x10b040, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) (rerun: 64) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8080, 0x80) (async) statx(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x4000, 0x400, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r0, &(0x7f0000000500)={0x5b, 0x7d, 0x1, {{0x0, 0x3e, 0x100, 0x0, {0x0, 0x3, 0x1}, 0x40000, 0x8, 0x8, 0x1, 0x1, '\x00', 0x2, '\x1a^', 0x4, 'GPL\x00', 0x4, '$\xbaN.'}, 0x8, '+]!\\\x84\x1e,/', r1, 0xee01, r3}}, 0x5b) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x16, 0x9, 0x803, 0x25dfdbfb, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xca1de99cf558760b}, 0x45000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000006b117a00000000008510000002000000850000000500000095003300000000009500a5050000000040ce0da08bb6ad6ea091c0f30edb6d8fd8acd287804aea741b1a4972c7d818d54b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 2m43.378061449s ago: executing program 6 (id=1781): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000500)={0x4009, 0x400008, 0x3, 0x797a, 0x3, "00a6400d00000000000000f8ffffff00"}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000340)={0x2b}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)=0x4) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x7, @local, 0x400}], 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000140)) socket$key(0xf, 0x3, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') pread64(r5, &(0x7f0000000140)=""/245, 0xf5, 0xffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$XFS_IOC_BULKSTAT(r7, 0x8040587f, &(0x7f0000000300)={{0x5, 0x0, 0x80cfaf, 0xe058, 0x11}, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x388}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x8004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4c040}, 0x40000040) ioctl$PIO_UNIMAP(r6, 0x4b67, 0x0) 2m42.169922629s ago: executing program 6 (id=1789): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) capget(&(0x7f00000003c0)={0x20080522}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x208, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x84, 0x2, 0x2}, 0x0, 0xe8, 0x110, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x1, 0x5, [0x4e20, 0x4e21, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e20, 0x4e21], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x81, 0x1, 0x0, 0x1, 0x0, 0x1], 0x1}}, @common=@unspec=@addrtype1={{0x28}, {0x8, 0x40, 0xd}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'wg1\x00', 'macvlan0\x00', {0xff}, {}, 0x29, 0x0, 0x4}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x11}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xffff72ec, 0x8, 0x1000, 0x2}}}, {{@ip={@private=0xa0100fd, @loopback, 0x0, 0xff000000, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x2}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) fcntl$notify(r3, 0x402, 0x22) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0xeb, &(0x7f00000002c0)=ANY=[@ANYBLOB='inode32,nr_inodel=0,\x00']) move_pages(r4, 0x9, &(0x7f0000000240)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f00006c8000/0x1000)=nil, &(0x7f000012f000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000946000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00004a8000/0x2000)=nil, &(0x7f0000aca000/0x3000)=nil], &(0x7f0000000180)=[0xffffff8e, 0x2, 0x768, 0x80000000, 0xe, 0x3, 0x3], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x6) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) semop(0x0, &(0x7f0000000000), 0x0) r6 = timerfd_create(0x0, 0x0) read(r6, &(0x7f0000002180)=""/262, 0x106) prctl$PR_SET_IO_FLUSHER(0x4a, 0x2) timerfd_settime(r6, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m41.137560474s ago: executing program 6 (id=1802): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x48000) accept(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'ovf\x00', 0x30, 0x660f537e, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) syz_ublk_setup_io_uring(0x4a31, &(0x7f0000000400)={0x0, 0x1d35, 0x20, 0x1, 0x8002f9}, &(0x7f0000000000), &(0x7f0000000500), 0x0) io_uring_setup(0x6996, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x1, 0x206, &(0x7f00000013c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x181341, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003, 0x1000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10010, 0xffffffffffffffff, 0x20cc2000) 2m26.059488314s ago: executing program 36 (id=1802): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x48000) accept(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'ovf\x00', 0x30, 0x660f537e, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) syz_ublk_setup_io_uring(0x4a31, &(0x7f0000000400)={0x0, 0x1d35, 0x20, 0x1, 0x8002f9}, &(0x7f0000000000), &(0x7f0000000500), 0x0) io_uring_setup(0x6996, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x1, 0x206, &(0x7f00000013c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x181341, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003, 0x1000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10010, 0xffffffffffffffff, 0x20cc2000) 1m28.115964687s ago: executing program 5 (id=2448): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newqdisc={0x100, 0x24, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x0, 0x1e, 0x7, 0x1, 0x0, 0x7f, 0x3}}, {0xa, 0x2, [0x80, 0x5, 0x7]}}, {{0x1c, 0x1, {0x9, 0x9, 0x2, 0x65, 0x0, 0xfffffffe, 0xd77e}}, {0x4}}, {{0x1c, 0x1, {0x56, 0x7, 0x4, 0x61, 0x0, 0x9, 0x7fff}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x43, 0x4dd, 0x6, 0x0, 0x2000000, 0xf}}, {0x4}}]}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xd1b, 0x2e4c7b7ff92e0ee2, 0x2}}}}, @TCA_RATE={0x6, 0x5, {0xd1}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfd, 0x1, 0x9, 0x7, 0x2, 0xe9e5, 0x7e7}}, {0x4}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000007000000010086060000000314000000000000000000000007000000940401000000000014000000000000000000000001"], 0x48}, 0x840) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$tun(r2, &(0x7f0000000000)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x2e, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x40}, {[], @payload_mcast={{{{{{0x2e, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x1004e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}, [0x0, 0x0]}}}}}, 0x56) 1m27.886966593s ago: executing program 5 (id=2454): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6c, 0x800, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x20000000, 0x7, 0xc, 0x0, 0x1, 0x0, 0xffffffffffffffb}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x4010) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000129bd7000fe6a58b6509c6f087cbe8e76cbc5c41444dbdf250400000008000900000500060081000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14800}, 0x400a8c0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000005080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x400c044) mprotect(&(0x7f00002e1000/0x1000)=nil, 0x1000, 0x2000009) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGSOFTCAR(r8, 0x560f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r7, 0x4c466994d56c53cd, 0x70bd27}, 0x47}}, 0xc4901407a6483a34) pipe2$9p(&(0x7f0000000480), 0x80) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r7, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3c0}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3b}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300), 0x0, 0x20000000ebff}}, 0x40) mmap(&(0x7f00002d1000/0x14000)=nil, 0x14000, 0x0, 0x3032, r1, 0x6bd67000) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r10, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffb, 0x0, @loopback, 0x10080bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0x8, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0x110, 0xfa00, {r10, 0x8, 0x1c, 0x0, 0x0, @in6={0xa, 0x4e23, 0x1ff, @remote, 0x4}, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x46}}}, 0x118) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) r11 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r11, 0x111, 0x5, 0x2, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x1010051, &(0x7f0000000680)={[{@nodioread_nolock}, {@orlov}, {@usrjquota_path={'usrjquota', 0x3d, './file2'}}, {@quota}]}, 0x0, 0x567, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000040)='./file2\x00', 0x8) 1m27.686079407s ago: executing program 5 (id=2457): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x4ca1, 0x400, 0x2, 0x259, 0x0, r0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000800002a00000000400000020a"], 0xb8}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000300)=0x1c, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x1, 0x4e22, 0x1000, 0x2, 0x80, 0x80, 0x2b, r4, r5}, {0xffffffffa5636e26, 0x2, 0x7, 0x3, 0x0, 0x4, 0x200, 0x9}, {0x0, 0x5, 0x3, 0x130b8067}, 0xfffffffc, 0x6e6bb9, 0x1, 0x0, 0x2, 0x1}, {{@in6=@private2, 0x4d4, 0x2b}, 0xa, @in6=@empty, 0x3502, 0x4, 0x1, 0x81, 0x9, 0x4, 0xe}}, 0xe8) open(0x0, 0x148640, 0x78e22799f4a46f8a) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r7 = getpgid(0x0) prlimit64(r7, 0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000001c0)={0x800000, 0x6, 0xfffffffb, 0x8000104, 0x3ffd, 0x7}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/disk', 0x42, 0x90) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f0000000680)=[{0x1, 0x0, {0x1, 0x1}, {}, 0xff, 0xfe}, {0x0, 0x0, {0x0, 0xf0, 0x1}, {0x2, 0xff, 0x3}, 0xfd, 0xfe}, {0x1, 0x1, {0x0, 0x0, 0x5}, {0x0, 0x1}, 0xfd, 0xfe}, {0x0, 0x0, {0x2, 0x0, 0x2}, {0x2, 0x1, 0x3}, 0x1, 0xff}], 0x80) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0) 1m27.672104988s ago: executing program 5 (id=2459): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x141481, 0x8, 0x21}, 0x18) openat(r0, &(0x7f0000000100)='./file0/../file0\x00', 0x10080, 0x20) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m27.607040649s ago: executing program 5 (id=2460): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x250, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6f04a9a35dde38", @ANYRES32=r0, @ANYRES8=r0], 0xff, 0x692, &(0x7f00000011c0)="$eJzs3U9v2/Ydx/EPZdmWPSAotqEIgjT+NVkBB8sUSW5cGNlhGkXZ7CRRIOXBPhVZY3dB5HRLsmHxpfWl27DtCezWSw/bcxiwc897AjsOKLbbgF008J/+Upbt2E62vl9Gy5/JL8kv/5Tf0hJ/FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkGXXSqWypYbb2t4x09k132seMz1e2rxux43bM9crWeE/KhR0NR519duDyW+G/7qp6/Fv11UIBwUdfuPNN+5/K59L5z8mobPQaRf47MXh4wfd7t7Ts62tZ51lvgsxkYlyJ5hr02m5gec2q5uOcQPPbKyvl+5u1QNTdxtOsBt0nKaxfSfX8Xyzat825Y2NNeMUd73t1mat2nDSke99r1IqrZv3F5PDf/f9YmBvuY2G29qMYsLJYcxi/wxxqk1j9h9199ZmJRkGlU8SVJkVVClVKuVypVJev7dx771SKT8xojRGExGDk/b1Ofi4TOd05QZeXi6s/3+3pIYKamlbOzKZP7Zq8uWpOWV6Iq3/79x1jl3vcP1Pq/zVweRriur/jfi3G9Pq/+9+OSUbE82QNcX6afb4s/080wsd6rEeqKuu9vT0fJa7cn4ZXuzPppSXXAXy5KqpqjblyCRjjDa0rnWV9IG2VFcgo7pcNeQo0K4CdeSoGR5M+XJUVUeefBmtytZtGZW1oQ2tychRUbvytK2WNlVTVf/u9Xr7ehTt97VjclQaVJ4ZtDx8ik4GTav/P/kknuN09R//f/rnjjH5QTM7Bnjlesn9/3RzWSNXLi4jAAAAAABw3qzor+9W9Nn9W5J6qrsNp/Sq0wIAAAAAAOco+uT/ejiYD1tvyZpy/9+7/NwAAAAAAMD5sKJn7CxJy9GX+q3B41In+RJA5sMBAAAAAADg9RJ9/n9jQepFXautyDrV/T8AAAAAAPgf8JuhPvbzaR+7vfRj/ZykoL1o/eWfi/LnraP2znesg2o4pXqQxEx8A6BTv2blFXXU+9mfw8GC9EbUba/tXLeS/oGTTjCtuGNf6av9WX39W/5YAgtz6Z8vMhK4kswdDdbzyW/6vd6OY95O1vvwMKdoSryW5brbcIq217hfVrV6Jddxdjq/ePLoV5Lf3879R9294ocfdx9GuRyFo44Owjw+GUknNyuX51F/C9EzF1lbvKR6usrftprLVrTeUrr9c6oe5IZXdLLt/0w345ibSU+3y4fpEZD1adIoF8NDpsHWR71DWIMsyuNbnnUgpmRRiLK4FcfcWr0VD9L84qNQ+O6cVClOHgN/OIvKcBaz94X1r4l9MSOL8FxYC7P4a7igKVmsnS6LiSMCAK/K/qAKRZ2YT/axP153M65yS8lw6lVudnX/wehanv+xFz9wOCfl1VtMyktvel1ReEVfjcMWFF1Y89cyruilpK4UNOWKXjpbdZtPJ/1p8A6k5G01SVy+n8V/er3e/XK03j+MVdXPwxk+n7reoFGZC3fh3ecHP4s6wA99tPfR3pNKZW299G6pdK+i+WgzkgG1BwCQYfY7dkYjCoN61q/d7/bvqh/+4524NVJ3v9n/SkFRH+pjdfVQd9JXCKxkr3d56GsIdybvWsPY6P86RmPLujP1ri6qpUOxlX5sWrrH7wAHsWsXfRgAALhUN2fU4fH6n3Xvfie97169lnnfPVrLx98QPC22fMl7AgCArw/H/8pa7vza8n23/UF5Y6Nc7Ww5xvfsHxnfrW06xm11HN/eqrY2HdP2vY5new3T9rXo1pzABNvttud3TN3zTdsL3J3oze8mefV74DSrrY5rB+2GUw0cY3utTtXumJob2Ka9/cOGG2w5fjRz0HZst+7a1Y7rtUzgLcl2isYEjjMU6NacVsetu2GzZdq+26z6u+bHXmO76ZiaE9i+2+548QLTdbmtuuc3o8UW1TvuRYcAAHxtPHtx+PhBt7v3dKixkExLxxwpbqTfR0uCvxydK2osZC3wFW4eAADIQJUGAAAAAAAAAAAAAAAAAAAAAOD1l/X836ka6UOB6Zh5ZQRL/TE/v3KiJVsajPniby+V4RkaufExSU+7vdmzfxk38lkxS2FjQVI33f3DMUczE5vLmGtaY+VEW6q4kT//fbgkZZ0JZ2x8OjPm+/uj5+FETDgxc9Jif6/mX/4/h6zGky+mTJp2RhX6W7E4ug8XjtvA0UZe0tOFlzgE41eK5Qu/FgG4XP8NAAD//w3ZNWg=") add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x0, 0xdde0e440e894aaa1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xffb, &(0x7f0000001cc0)=""/4091, 0x41100, 0x5}, 0x94) read(0xffffffffffffffff, &(0x7f0000000080)=""/221, 0xdd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x10000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1b9) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x400c4d00, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 1m27.114663712s ago: executing program 5 (id=2463): r0 = syz_io_uring_setup(0x74f9, &(0x7f0000000340)={0x0, 0xff6a, 0x13911, 0x1, 0x200187}, &(0x7f0000003400), &(0x7f0000000240), &(0x7f0000000000)) syz_io_uring_setup(0x7fb5, &(0x7f00000003c0)={0x0, 0x91ed, 0x40, 0x1, 0x2fa}, &(0x7f00000009c0), 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x7974, 0x10, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f0000000180), &(0x7f0000000000)) r1 = eventfd2(0x800, 0x80800) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ea079b6a4fd281a0000100000000000002000600fdfffd7f9f01000038008000c5ea990570ee7b3a60793a512b6913020000ffffff7f0d002000010003000c006d0f0000000051e574640500000001000100010000000010000000000000000100000c000000"], 0x58) close(r2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8804, 0xff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0xdc535d56607cd5ae, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100)=r1, 0x1) io_uring_enter(r0, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) 1m27.061959203s ago: executing program 37 (id=2463): r0 = syz_io_uring_setup(0x74f9, &(0x7f0000000340)={0x0, 0xff6a, 0x13911, 0x1, 0x200187}, &(0x7f0000003400), &(0x7f0000000240), &(0x7f0000000000)) syz_io_uring_setup(0x7fb5, &(0x7f00000003c0)={0x0, 0x91ed, 0x40, 0x1, 0x2fa}, &(0x7f00000009c0), 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x7974, 0x10, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f0000000180), &(0x7f0000000000)) r1 = eventfd2(0x800, 0x80800) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ea079b6a4fd281a0000100000000000002000600fdfffd7f9f01000038008000c5ea990570ee7b3a60793a512b6913020000ffffff7f0d002000010003000c006d0f0000000051e574640500000001000100010000000010000000000000000100000c000000"], 0x58) close(r2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8804, 0xff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0xdc535d56607cd5ae, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100)=r1, 0x1) io_uring_enter(r0, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) 53.062848397s ago: executing program 7 (id=2880): r0 = socket$nl_route(0x10, 0x3, 0x0) ftruncate(r0, 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000019020100000000000000000d1c1400001000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bridge_slave_0/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r1, &(0x7f00000005c0)='1', 0x1) write$tun(r1, &(0x7f0000000180)={@val={0x0, 0xfbfb}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @remote, @random="b3fba839df37", @mcast1}}, 0x38) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x4000006, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000031c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x4b01103}, 0xc) r5 = io_uring_setup(0x2178d, &(0x7f0000000280)={0x0, 0x2e5f, 0x20, 0x3, 0xc}) syz_open_dev$usbmon(&(0x7f0000000900), 0x8, 0xaa42) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x21, 0x7b, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098ed6ed8951ff86c092399a8d11b76c5e00"/133, &(0x7f00000008c0)=""/206, 0xff7, 0x0, 0x41, 0x64, 0xfffffffffffffffe, &(0x7f0000004600)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff23006000000", 0x0, 0x8000}, 0x48) 52.861904762s ago: executing program 7 (id=2882): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2000}}, {{0xa, 0xfffe, 0x3, @empty, 0x4}}}, 0x108) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e60, 0x0, @mcast2, 0x7}}, {{0xa, 0x461e, 0xa4fffffb, @mcast1}}}, 0x13a) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000480)='attr/exec\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) writev(r1, &(0x7f00000007c0)=[{&(0x7f00000004c0)="22a71fa897bfaf802cd77be031297d35f6c04a08b3ced5a37ee4ed1407385b64cdaaf9825c68dfeed4b8510d4a24d237ec51ec867ef28ddca92a77f0ebd7bde1d4be85b62ded2eb96751d5f3b65f6b6cb435251950492aa766424876ddd8072ffcd275699689c82731ac77f4e36e51edbc9984c8583da7e71fadf812094a6deb43859d4edf45a08b2a11918ad334cdc96b9e27d4b8d073751836", 0x9a}, {&(0x7f0000000580)="51171bef3874d387cabf4304ecb018ac44114e884c1cf34603a1140aa19708ba1c217d008cd5d30a2ecc96f64938ec4fd2c65d384d525faf20fdd121cafe572b944cd83350c3f1d3bc1119d06a", 0x4d}, {&(0x7f0000000680)="3a120c4904771e4985e50b49687d1492f1f870ad333486b09a1a4bbbd029f1af71dd32e7b7028536dcc06561e4d95a77c9789ec91be5f83e22b5d47814ba80bb6093e77ff86a500a33ff5ff0d8f4273346cf3eca05a568e8a6cdb947a79437e89c90da0a0074904d14fbfdc9c21814d4d97f21bda9601c79f4c6428d4ac2c3a9dae685c7a38ce68aa0ea77dc0b36e1d4eef7582cbdd262666f37cd8d6a464e2ef5995f5884a51b5d0f1a74c0e1004e14750699ca0b061b2b6707e6ee694b7e80de2eeb755b736eb7a48beff681a153289d449ee758d9", 0xd6}, {&(0x7f0000000780)="381f52456c0d5263e79766de74e995fa316bece8fd968f8cae98fad52b0fa3da4a6c3d0153755b176438a359dff5", 0x2e}], 0x4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 52.771649135s ago: executing program 7 (id=2884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0xb0c, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004070}, 0x20008888) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b00), 0x1, 0x4ca, &(0x7f0000000540)="$eJzs3c9vVFsdAPDv3P6kr++1T0n8ERVEFA1hph2gIaxwozGExEhcuYDaDk3TmU7TmSKtLMr/YCKJK/0TXJi4MGHl3p3ujAkuTFCJhpq4mJc7cwttmSkNlLmk8/kkJ3PPvXPv9xzoPef223ZOAAPrbERsR8RoRNyNiKlsfyErcaNT0ve9eP5wYef5w4VCjMbtfxXax9N9seec1EfZNccj4kffj/hp4fW4jc2tlflqtbKe1UvN2lqpsbn1t+Xa/FJlqbJaLs/Nzs1cu3y1fGx9PVP77bPvLd/88R9+/9Wnf9r+zs/TZk1mx/b2Y6/pd4zZ6frIyzip4Yi4+Y7X/VAMZf0ZzbshvJUkIj4XEefS+7+Vd2sAgH5otaaiNbW3DgCcdEk7B1ZIilkuYDKSpFjs5PBOx0RSrTeaF+/VN1YXO7my6RhJ7i1XKzNZrnA6RgppfTbLle3WywfqlyPi04j4xdipdr24UK8u5vngAwAD7KMD8/9/xzrzPwBwwo3n3QAAoO/M/wAweMz/ADB4zP8AMHjM/wAweMz/ADB4zP8AMFB+eOtWWlo72edfL97f3Fip37+0WGmsFGsbC8WF+vpacaleX2p/Zk/tTder1utrs1di40GpWWk0S43NrTu1+sZq8077c73vVEb60isA4DCfnnnyl0JEbF8/1S6xZy0HczWcbEneDQByM5R3A4DcDOfdACA3vscHuizRu0/PXxF63PMUQwt84C58Sf4fBpX8Pwwu+X8YXPL/MLharYI1/wFgwMjxA+/h5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw4k22SyEpZmuBT0aSFIsRH0fEdIwU7i1XKzMR8UlE/HlsZCytz6YnjubdcgDg7SX/KGTrf12YOj958Oho4X9jkU33P/vV7V8+mG8212fT/f8eO5W9p/k4218+NJClBgEgJ7vz9O48vuvF84cLu6Wf7Xn23c7iomncnax0jgzHcPt1vP3gMPGfQlbvSJ9Xho4h/vajiPhit/4X2rmR6Wzl04Px09gf9zV+si9+0j7WeU3/LT5/DG2BQfMkHX9udLv/kjjbfu1+/4+3R6h3tzv+7bw2/iUvx7+hHuPf2aPGuPLHH/Q89ijiy8Pd4hey4XW8Hatb/PNHjP/Xr3zt3P4zX2n9OuJCdI2/74xSs7ZWamxuXVquzS9Vliqr5fLc7NzMtctXy6V2jrq0m6l+3T+vX/zksP5P9Ig//ob+f/OI/f/N/+/+5OuHxP/2N7r//58+JH46J37riPHnJ37Xc/nuNP5i9/5n5/Tu/8Ujxn/6963FI74VAOiDxubWyny1Wlm30beN9NntA2iGjdw20q+A47jOF95jU/MemYD37dVNn3dLAAAAAAAAAAAAAACAXvrxB0959xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICT67MAAAD//x4p1Yw=") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc897, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0xd400a376c795e996, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) r2 = socket(0x40000000015, 0x5, 0x0) socket(0x2000000015, 0x80005, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080), 0x16) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) ftruncate(r3, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mremap(&(0x7f0000a26000/0x5000)=nil, 0x5000, 0x1000, 0x3, &(0x7f0000067000/0x1000)=nil) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r4 = socket$kcm(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r4, 0x0, 0x60) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 52.262060417s ago: executing program 7 (id=2888): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getdents64(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0x90, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x148, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x0, &(0x7f0000000040)}) sysinfo(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read(r3, &(0x7f0000000400)=""/1000, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000000000000040000000700000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000ff0700"/27], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) 51.442005957s ago: executing program 7 (id=2894): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='pvfs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1a1280, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000e00)={0x6, 0xcc, 0x101, 0x6, 0x2, 0xad, 0xf, 0x1}, 0x0, &(0x7f0000000280)={0x9, 0x7fffffff, 0xc, 0x20000018c, 0x5834, 0xcbc, 0x40000000000003}, &(0x7f0000000340), 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) setns(0xc9, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000290c776b733a1711000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a4}, 0x94) r3 = socket(0x8, 0x5, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400461f1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002e680000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000003c000380380000800800034000000002280001"], 0xec}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x28}}, 0x816) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) close(r6) epoll_create1(0x0) 51.025669108s ago: executing program 7 (id=2901): syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x2, 0x3, 0x87, 0x4, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x96, 0x2, @perf_config_ext={0xffffffff8e339a50, 0x4}, 0x11018, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x3, 0xc, 0x0, 0x80000000, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x3b7e, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x20002f7}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000600) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x25, 0x4) 51.025546728s ago: executing program 38 (id=2901): syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x2, 0x3, 0x87, 0x4, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x96, 0x2, @perf_config_ext={0xffffffff8e339a50, 0x4}, 0x11018, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x3, 0xc, 0x0, 0x80000000, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x3b7e, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x20002f7}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000600) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x25, 0x4) 5.460763697s ago: executing program 0 (id=3352): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10fcc8, 0x1224, 0xffffffff, 0x0, 0x0, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x481}, 0x0, 0xe, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000440)=""/147, &(0x7f0000000500)=0x93) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x81000, 0xfffffffd, 0x1020, 0xfffffffd, 0x7ff, 0xf84, 0x3}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x1, 0x8, {{0xc, 0x4, 0x0, 0xb, 0x30, 0x68, 0x0, 0x0, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0xf8, [@loopback, @loopback]}, @generic={0x94, 0xe, "00000000000000eeff000000"}]}}}}}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x24}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) unshare(0x4020400) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x9801) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x44) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.045862727s ago: executing program 0 (id=3359): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES64=r0], 0x48}}, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x41) (async, rerun: 32) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) (rerun: 32) fcntl$notify(r2, 0x402, 0x40000029) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async, rerun: 32) sendmmsg$inet(r4, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004000) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000020601030000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3100000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014002000060005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 4.213378127s ago: executing program 0 (id=3363): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc08c, 0x7, @perf_bp={0x0, 0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x1000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r1], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) 3.606323382s ago: executing program 0 (id=3370): r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x60786, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x70, r0, &(0x7f0000000180)="41971de1e3faf0bb8e3b", 0xa, 0x40000000000000, 0x4000000}]) 2.592910167s ago: executing program 1 (id=3381): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10fcc8, 0x1224, 0xffffffff, 0x0, 0x0, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x481}, 0x0, 0xe, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000440)=""/147, &(0x7f0000000500)=0x93) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x81000, 0xfffffffd, 0x1020, 0xfffffffd, 0x7ff, 0xf84, 0x3}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x1, 0x8, {{0xc, 0x4, 0x0, 0xb, 0x30, 0x68, 0x0, 0x0, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0xf8, [@loopback, @loopback]}, @generic={0x94, 0xe, "00000000000000eeff000000"}]}}}}}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x24}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) unshare(0x4020400) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x9801) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x44) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.413948851s ago: executing program 3 (id=3382): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") setxattr$incfs_metadata(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f00000002c0)={0x0, 0x24, 0x4, @tid=r0}, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$rds(0x15, 0x5, 0x0) epoll_create1(0x80000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x9}, 0x5010, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@deltaction={0xb8, 0x31, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x20) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000200)=0x452da, 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000100)=""/87, &(0x7f0000000580)=0x57) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$loop(0x0, 0x2, 0x40400) ioctl$BLKGETDISKSEQ(r4, 0x80081280, 0x0) 2.405861302s ago: executing program 0 (id=3383): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x542, &(0x7f0000000cc0)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='\\x0', 0x3) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x2, {0x2, 0x0, 0x2}}, 0x18) socket(0x1d, 0x2, 0x6) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x202, 0x169) write$UHID_INPUT2(r6, &(0x7f0000000ac0), 0x6) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) r7 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r8, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1}, 0x9}, {{&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f00000001c0), 0x10, &(0x7f00000004c0)=""/121, 0x79}, 0x65}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=""/112, 0x70}, 0x7f}], 0x3, 0x10002, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r7, 0x0, 0xe) openat$cgroup_subtree(r9, &(0x7f0000000200), 0x2, 0x0) 2.391260312s ago: executing program 1 (id=3384): unlink(0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x4a23, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x8800, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x3, 0x6) waitid(0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') write$P9_RVERSION(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000d00), 0x0, 0x4000000) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x0, &(0x7f0000000480)={[], [{@subj_type={'subj_type', 0x3d, '\x00\x00~\x86\xaf5)\x88\xc4\x00'/19}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_lt}, {@dont_hash}], 0x3d}, 0x65, 0x52e, &(0x7f0000000d00)="$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") setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x594}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000001}, 0x1c) sendmmsg$inet6(r1, &(0x7f000000b140)=[{{0x0, 0x0, &(0x7f0000009dc0)=[{&(0x7f0000007b00)="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", 0x4f0}, {0x0}], 0x2}}], 0x1, 0x4000001) r4 = dup(r1) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[], 0x1, 0x27d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) recvmmsg(r4, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1}, 0xfffffff5}], 0x1, 0x20, 0x0) 1.940994793s ago: executing program 9 (id=3386): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000600)='./tracing/dynamic_events\x00', 0x118) 1.748680368s ago: executing program 9 (id=3389): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000a80)='ip6erspan0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/udp\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000070000000900010073797a300000000054000000090a010400080000000000000700000308000a40000000030900020073797a31000000000900010073797a300000f7f20800054000000008080003400000000808000740000000290800064000000000400000000c0a0101000000070040041400038010000080080003400002046fb0f30a8cbcfe8923007a31000000000900010073797a3000000000140000001000010000000000000000000084000a0000000000"], 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4b, 0x4b, 0x6, [@const={0xf, 0x0, 0x0, 0xa, 0x1}, @datasec={0xf, 0x3, 0x0, 0xf, 0x3, [{0x4, 0x7, 0x10}, {0x2, 0x10, 0xf}, {0x3, 0x0, 0xfff}], "0dc6fa"}, @ptr={0x4, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x5f]}}, &(0x7f00000006c0)=""/106, 0x6a, 0x6a, 0x1, 0x6}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'syzkaller0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x10888) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, &(0x7f0000000600), 0x41000, 0x3, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000780)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x6, 0xff, 0xffff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000800)=[r1, r1], &(0x7f0000000840)=[{0x0, 0x4, 0x8, 0x7}, {0x2, 0x2, 0xd, 0x6}, {0x1, 0x5, 0x4, 0xa}, {0x4, 0x1, 0x6, 0x6}, {0x3, 0x4, 0x9, 0x2}, {0x3, 0x2, 0x0, 0x9}], 0x10, 0x5}, 0x94) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211002000300000008001b000000000014002b8008000100", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x20000805}, 0x4000000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r8, 0x29, 0x10, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000004c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000580)=@ccm_128={{0x303}, "b89ecab1fdfeb7f5", "6d89cd00b3649d75a6bef6e93f745a7b", "4f86f8e2", "1acaffda36bab1b3"}, 0x1) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x200000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000980)={@in6={{0xa, 0x4e24, 0xffffff94, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, 0x0, 0x0, 0x41, 0x0, "294588d6670cba21eea342ca22092fcc96816e4347f53878cd96007508350791791ef207208f568660c7a2a79997c67da4b2ffe57ee1776f5fa1b061abf5f44f56ada01ccb3c98669a9346365df7f272"}, 0xd8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x238, 0x0, 0xffffffff, 0x238, 0x2e0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@ip={@empty, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x160, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x1a, 0x2, {0x1}}}, @common=@addrtype={{0x30}, {0xf4, 0x2, 0x8001}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'veth0_vlan\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x20}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @gre_key=0x4, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @private=0xa010101, @icmp_id, @gre_key=0xfff7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 1.634680791s ago: executing program 3 (id=3390): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x100000000000000, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 1.63351222s ago: executing program 1 (id=3391): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x0, 0x5, 0xa, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x2000001020000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002900)=ANY=[@ANYBLOB="14efff001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}}, 0x0) 1.553774953s ago: executing program 9 (id=3392): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) pipe(0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x440000, 0x0) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000240)=0x3) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x82f9}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xfffffffa, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x18}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x401, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xaa0f}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000140)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@errors_continue}, {@jqfmt_vfsv1}, {@grpid}]}, 0x2, 0x472, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlinkat(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = semget$private(0x0, 0x6, 0x0) semop(r4, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000140)="c1ffb061cdee7a1ff8a7fe4b3fc8", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000001340)={0x1d4, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x451}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x57, 0x3, "337a51367044a4a2117e9fffbe04f46e5878d86550754dcd7495433123ff6d44105e0457bb2802ef7e7d977e81f23a0d0077385c1f5ac8813a0e95225558b02e1a1dc75a949a61aacc5d6d86fabb3f505c260f"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "78d9e032aa7b20528efe3369a27103fc2c90f92e9c6f67b34c71de1c6d4247dc1c"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "a3962dc2f851fbc460e35d0612c5f49b6c74363ea1"}}, @TIPC_NLA_NODE_ID={0xc6, 0x3, "423cddabe622dc0fdeb24c345a632075cd1fcaf85c4f77516c8550ebc24b06303d69f647d3c2ceab18d598f9f1998a78aa6fd282b9c3a2811ac20e2f234440a38ee2dcef7b957befefce3d3b92f2c5b6c1052af6faae4af38368e30255abce2249b9769f3427ea95601c3c4e72534fce802f7381041afca29d678f7eb0775e3ac37d71fdbcb1c7cb0e2b7ddee71ee86266fa857fdb417fbe3aa41e30c5bd98ea660cfdb02f867cdfe9b6fff0aeaed6d831e3dfd8bbb39fbbc6dfbebf7a9eba61da0a"}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x1}, 0x20046080) setxattr$trusted_overlay_redirect(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f0000000a00)='./file0\x00', 0x8, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r5) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01000000000000000ab403000000"], 0x14}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0xffffffffffffff85, 0x1, {{0x4, 0x7, 0x4, 0x6, 0xfffffff9}, 0x64}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90010000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x14, r6, 0x20, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004000) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0) 1.526576383s ago: executing program 3 (id=3393): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) 1.511844643s ago: executing program 1 (id=3394): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10fcc8, 0x1224, 0xffffffff, 0x0, 0x0, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x481}, 0x0, 0xe, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000440)=""/147, &(0x7f0000000500)=0x93) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x81000, 0xfffffffd, 0x1020, 0xfffffffd, 0x7ff, 0xf84, 0x3}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x1, 0x8, {{0xc, 0x4, 0x0, 0xb, 0x30, 0x68, 0x0, 0x0, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0xf8, [@loopback, @loopback]}, @generic={0x94, 0xe, "00000000000000eeff000000"}]}}}}}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x24}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) unshare(0x4020400) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x9801) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x44) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.23853082s ago: executing program 8 (id=3395): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xf6103, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400007, 0x0, @perf_bp={0x0, 0x4}, 0x4404, 0x7, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x1000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r1], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) 1.200358561s ago: executing program 8 (id=3396): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) (fail_nth: 1) 1.141808443s ago: executing program 1 (id=3397): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xa033) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$eJzs3EtvVFUcAPD/nXaKFUoLPnkoo0hsRFtaUFmYGI0mbExMdKHLWipBChioiRAiaAwujZ9AXZr4CVzpxqgrjVvdGxNi2IguzJj7KlM6rdPpTKcyv18y7Tn3dc7/nnt6H+dOA+hbtfRHErEtIn6JiNE8u3SBWv7rxvVLs39dvzSbRL3+yh9Jttyf1y/NlotuK35vLbY5XomofJjEniblnr9w8dTM/PzcuSI/uXD67cnzFy4+cfL0zIm5E3Nnpo8ePXJ46umnpp/sSJwjaV13v3d2765jr3/y0mw93vj+y7T+A8X8xjhyY+susxa1GI56vbJk6lD288C6t765jDSkk8EeVoQ1SY//tLmqWf8fjYG42Xij8eIHPa0c0FX1er2+Y9nU/KxYOZBk84HblT4O/ao846f3v+VnY69Aeuvac/kNUBr3jeKTzxmM9L49Gcvv2Ae6VP62iHjtyt+fpp9o+hwCAKCzvk6vfx5vdv1XiXsblttejA2NRcTBiNgZEXdFxN0RcU9Etux9EXH/Gsuv3ZLPy682TPlpuN3YWpFe/z1TjG0tvf5bHLUZGyhyI1n81eTNk/Nzh4p9Mh7VLWl+apUyvnnh54+zRJNIag3Xf+knLb+8Fizq8fvglqXrHJ9ZmFlv3KVr70fsHny2SfzJ4khAEhG7ImJ3G9tP99nJx77Ym6a3b10+/7/jX0UHxpnqn0c8mrf/lbgl/lKSl7TS+OTkHTE/d2iyPCqW++HHqy835huP7loWRpvxd0Da/nc2Pf6L+MtuUI7Xnl97GVd//WjFe5p2j/+h5NUsPVRMe3dmYeHcVMRQMWHJ9Omb65b5cvk0/vH9zfv/zoh/PivW2xMR6UH8QEQ8GBH7iro/FBEPR8T+VeL/7vlH3lp9D/W2/Y+v1v4RY0kRf+rc4sB964mBU99+tVL5rbX/kSw1Xkxp5e9fqxVsd78BAADA/0klG4NOKhOL6UplYiJ/h7987HKwFu+cOZ6PVY9FtVI+6RpteB46VTwbLvPTt+QPR8SO7E2j4Sw/MXt2fqTHsUO/27pC/0/91q2XXoDNY03jaEn36gFsPN/XhP7VvP939b0rYJNw/of+pf9D/2rW/y9H3OhBVYAN5vwP/av1/u+NALjdOP9D/9L/oS8t/0r8cPGvE9r5pv/NxM5j61p9rYnqBpbV4cRAl7Ycjf+0owuJqPR817WfqGyGauwrElsiotW1Lje0aXna7kYNq/M9/KMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQQf8GAAD//4F+194=") socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa4305400f"], 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6(0xa, 0x3, 0x2c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="96", 0x1}], 0x1}, 0x4004800) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], 0x0, [], 0x0, 0x0, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.077855564s ago: executing program 3 (id=3398): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000008680), 0x40, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0b0325bd7000fbdbdf250500"], 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000026c0)={'macvtap0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000002700)=r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140020304000e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a7cee4090000001fb791643a5ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f", 0x7a}], 0x1}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$kcm(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000027c0)="05043ab7f2cd2a672a36384c34851201bcbdb9f2a601762a1ad3a600524c1ce3079231d04f0250b87da98b2a3dfe54da5da1a1bcd998fb9e7381782d103c119f53839aa470fcb52a2a78f32194ddbc29444c7ab92d931d913c0bfe3d54be56e51922fbeeb8342743c67d103e860d04d5c882c874e9e7d2b98a7a66effc8854c40e5734b16e2984c7064283c814368b3325fee0edcd0585b9bb8c137a1bdff8ea9b76a29946944ceaa9a538ef364126fddf13ca", 0xb3}, {&(0x7f0000002740)="c51a11913fc979077d15481b709b9b0b27bc70488425911b5d6174d536a07f52ec2b089270e92e5fd589d46044904bb4d5af94073da96f8af11a8eefaeae70373ba4dee6f1f1f925d73a463a3f974d4ea29a0ec4", 0x54}, {&(0x7f00000025c0)="9ed6988499e8b5cd0bde69f0f5c9185736ce40e078342c2d8bf66e15ff90984574f5baf3d895f7291c334ea4967e7bbd579a778abc10a6c175765a3b76da6bfa5f53f606e13308cbc0d4a72a1fdd3323a23241cb42d0d10333ab1a55374cc86411e4c4d5258ba3a442a93d9a7cb49044c8dc10b5508e1c5e029e338f18e244828dc30a8d6d6751ccf8e0fbd523abfdd1e16d7818bc2041846e93a7fd13f1537d973e5784ea805becafa4ee51a04ecf1b4d796af83ef80460", 0xb8}, {&(0x7f0000000180)="44f24e0275ce4b59e39a5ebb9a6d79702775a997dd776bd5493f9e286cd0b4665be1cad244ae3e024bdea1fc19d8f3450afd8404a8ce87f53ab8606086f161cf2686cf99ced895efd0ea7f3772123bb6ace1ed5664b2c277380cab0def67cdbfd9efab9fd69982381ad10ff7c41fe232ab1c5e00891f481a1953b5e022d9d0e08f81bb93", 0x84}, {&(0x7f0000002bc0)="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", 0x81}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="6641a85362cdc3ce892904428694749af1a2ded03d3cb5ee2817a310ef818b28b13e0e283356e097a72dbb80c06d6a2e869da9b4a39150a2d576203eb0b384ed051115ceaaad92e98c3e95b2fded15ea28575c6757271c46041d21f7125f47e42e32e011d44ee2509ad3283c34d6410d6dc7cb2762673b6697cad196c95ded687f457f33095ae020b4489e39f89a5f16e9116135c5666b2fc9b3eb1c569eb9809869ad06de", 0xa5}, {&(0x7f0000000080)="af8fb52fa275d94e258113053c1ff502e812d6104f543f0c4b0457fa55101265e54b68300656fa768d00456e9f4d521c9bc56a58255bb6cd1f758ade6e97e6131ae7d7a726b854f271fa49eb5b70e950de01130c89a7a397ae8844a9e512492dfe3b7b70d9198e8c8362e0c19d94657c0a0da132dc9305f4f609ed6cb2142143a4639eaa09ff67bb19285f51b5554b08a1578165698a0a5a89820e07eafa1379109846a6cddcdbc9fef850327b524587472ec2259987c8fdcf1dbbe4a463b5850da5754d1a63309a48216237aa6a63af7d75fcaf615f3bb24e690ec76eb3c11f42581dc5a8ec491cf6f926", 0xeb}, {&(0x7f00000023c0)="21bf23941952c3", 0x7}], 0xa, &(0x7f0000002a00)=[{0xffffffffffffff99, 0x0, 0x5, "8b9de7061eeaef52df07022e485e975961c3d45a062ff5a449c0f1fbab995248e278b422e8a788b7d9ea3318cbaa25e9bd85497829faa4e38451df1417bc3977eee573a2ae5bd9f50c547be7860f14b20e6f5817a7f9e451bb22472ab73eae1c69facf9eab2f3a64c0b1d0c1bc67b4f9718dfb7d7ec613004f551e218f4f1bb7f68bd9b9ffe3b7ad603536c5dd4cab186454ec81cbe7875a"}, {0x88, 0x10d, 0x1, "3c947c2d9b822947c838cce83c7175694ef32379fe41225e1f84d400109d8848d3d932232e4d0722e8eff2b2befcdf021c2d813dfacfa909d17f9ec023e8dbfe0ea61cbef72ca8c915a1fa89395420aabf94e9ca05dc7e130ac81aa3af14acf15e507a9de5e88afc3a4ec982d9bc82f293ddeeb2"}, {0x60, 0x103, 0x2, "b94c395fd5196e5263fea8550806426618db6181c88131c265a90ccf6793cbebc3601691d565dcada798d0f37f927ff0afe819d1a9d7bad34149f0d1f3e28e52fa2ce7e0505fc0072335"}, {0x20, 0x113, 0x6, "4d47d34d2843dad5b5fb89"}], 0x1b0}, 0x80000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 838.78908ms ago: executing program 8 (id=3399): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc0400000c0000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 838.15054ms ago: executing program 3 (id=3400): r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010002400000000000000100000008000100060000002c0004800500030002000000050003000300000005000300050000000500030005000000050003010100000008"], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb000008000500"], 0xd0}}, 0x571f68543cec8180) 679.806344ms ago: executing program 9 (id=3401): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) sendmmsg$inet6(r3, &(0x7f00000054c0), 0x0, 0x20004010) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x6, 0x10, 0x0, 0xfffffffd, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xfffc, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x7338, 0x34000, @in=@rand_addr=0x64010101, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 533.908667ms ago: executing program 8 (id=3402): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x8000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2f80ada3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x90) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa80194a0}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xbe7, 0x56}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x64}, 0x1, 0x0, 0x0, 0x15}, 0x4044890) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x72, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x14a48, 0x100a8}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40090}, 0x40080) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 454.253829ms ago: executing program 3 (id=3403): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8084000, &(0x7f0000000280)="d341d71a32b333ad9d5292cb1a1161701de28a1ac840f8889c7cb093a09051b7106adbdb757f99718d53972b6de3f47ba29cf777b4b33146080b30e6c3b0f2e8602c6058b518f7439b352add64ce81053b36799a6176a5c989a53696bc06f85567bfb6eaf54adc879e80b8", 0x6b, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="1e0316db14922aa41c35cd6033412e6a90b851ed51aef46dfb17e21fca1a12c25f7ed872798fc3c3090f1aef4153a8202871e505e0918618e0760714dca7c44e950682e9f69d2bacc996c7098dc1db0e88ec9c73500216ea8c655d0c87dcb27e4746d84118ffff240e") perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xc}, 0x10040, 0x1, 0x0, 0x9, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r1, &(0x7f0000001480)=""/265, 0x109, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') openat$cgroup_int(r2, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x4, 0x12) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000140)) mount$cgroup(0x0, 0x0, 0x0, 0x4800, &(0x7f0000000080)={[{@subsystem='memory'}, {@cpuset_v2_mode}]}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000001c0)=0x2) r3 = gettid() ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000180)={0xee, 0x2}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x3, 0x4, 0x5, 0x5, 0x0, 0x7, 0x44021, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100, 0x1, @perf_config_ext={0x2, 0x800000000000000}, 0x9406, 0x6, 0xe008, 0x4, 0x8, 0x0, 0x6, 0x0, 0xc4, 0x0, 0x1}, r3, 0x9, r1, 0x3) msync(&(0x7f0000aa8000/0xb000)=nil, 0xb000, 0x3) munlockall() 294.004773ms ago: executing program 8 (id=3404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xba}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x1d, 0xc, 0x200, &(0x7f0000000180)="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"}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000060000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000005c0)={@private2, 0x33, r5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010011a801000f4800400058008000900000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a108417df341b9dc3d8008a2fe5bdaad140004009c7e472c916120fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000040500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c", @ANYRES8=0x0, @ANYRES32=r2], 0x270}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a5c0000000617010400000000000000000200ffff300004802c0001800b00010065787468647200001c5b3a9d3b9908ffbf0766b400028008000140000000080800064000040f0108000740000000030900010073797a30000000000900020073797a3200000000140000001100010000"], 0x84}, 0x1, 0x0, 0x0, 0x20004821}, 0x0) 252.711174ms ago: executing program 1 (id=3405): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000000c0), 0xfdef) splice(r0, 0x0, r1, 0x0, 0x80, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, &(0x7f0000000100), 0x48) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x3, 0x4, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000180)={r9, 0x6, 0x6, 0x8}, &(0x7f0000000240)=0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0xa, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x200000) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40844}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x2, 0x25dfdbfe, {0x2}, [@NHA_ID={0x8, 0x6, 0xf7ffffff}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd1, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x2, 0x0, 0x6}, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x3, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_EXP_DELETE(r10, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4) kexec_load(0x4, 0x8, &(0x7f0000000780)=[{&(0x7f0000000000)="3d0a6b90c74f34aa9694091dee22320b8bcc68c05be9c513a6a04b4c8fa6d2bc4f526548594dafdcc08f7500cf1f6d0724bc7e9877f51b384b0a8e00550d1228", 0x40}, {&(0x7f0000000040)="81d4a7058550f9397dc84c8cbe5813cc04f013262ead36f82f310a12a670285df2aa0fb78bd762fd21ff23a664c6e2b02c67d2076d1d3920d7895b83c6ac9f42369aac7a4964a45fc7ed9da4c3de529ea5f2a5165d4f26fdb565da05a4b021", 0x5f, 0x9, 0x8000000000000001}, {&(0x7f00000000c0)="a7b6ad6d3006ce97", 0x8, 0x3, 0x35f}, {&(0x7f0000000140)="754bb51d1dc1df58ce7896c8f4a84dbe2ae68673affc1ac717d493858512d97134a55c70b7bf4180421db358b1d331413b35701a6f83a52727eeb0e33b4ed1d3e3659a874c87796c4564c90cfed9c08bd0632a0997ad7b0309291e9d7527c1e447cb2caea62536696e7581e8333ac4a7b1271c9bffcf1f7172a01d6cc71c7c9f3d8dc699ac28b6b30f7d4b2612ca1fc0573757dbec6a381ab1e104dac8aca8027289a5455582f67ac0d3aed672e5df69ca3a1daa023d9f9d1e56555ffec43ad6d642cad58932", 0xc6, 0x7ff}, {&(0x7f0000000440)="2c5ce36bd0bb420092a382ca8e6000fc45103d08b646bea9f954582d2fc2b95385f8ef7944f9d3f05144c4f62af38a4e70c1c1d3d6c295bf3b8eb6cbf1700c76ec6833005f51160793364e09eafa43fee7dda2ed62947ab2d6f9f0c0ed20bd536dcac2c1e88fcc62125c7f500bd011c598854b73287c48aca844066d1936ef897cbb870daa8897c544ab5150b3e74c0660de93ca80ec5d672d2c35abed98a6a948c082dc102c4ab32c4f2628156a4f06a8c91829dcd6c73be1169ebcdd48f95660fc5d604aa386691535fd2b4b24a01736d62f4bc1512d50696e7f6551c4eeee9ea231d33a5048afa59252e78d87b9b621f859d7e929", 0xf6, 0x2, 0x3}, {&(0x7f0000000540)="fb9e72b0e841e8cf4050935b65bf78e9a2c3e38847f0a5cab177c5582f2d4f23e478dfa3b053080be30491c0db52a89e533f26aaff58234b3214631461d8cc4488807604cc59e808002f95d0d4648a0df6dfb1f0bbfa384cac5911f7f963c2e3469e8380fecad4ff0e8b82caafe91fd2697796fcfd68e0f4217b996d6e706c68289f01a7459d980b7bb9ce540c4a5b14568541518c6e92697c363a5bfb037aa5aa9e1371e379069e69514a095e688940c4f9c485fb875d90615e8584be894ef040188cb9038ab3e9812277cf45ddda69a2c514af8542d5c1cd8e762e37c5b2da3974dfefa3782b53c6307d729414d40c9f48", 0xf2, 0x1000000000000000, 0x81}, {&(0x7f0000000640)="780795ac7231ab15f070a77aef29990178ea98c3b360a92777a86e48cff8939a83c8bd50f499a83c3a1d0baeb123cae3b727b616953371d61e223bc219f146bdaa9486a8c492fa2274df399e93fd4962d9e7e2469514e8a222178cfc3048f5ddb122b1825f7d03db0d590d3d0aa1ca998d5c2c795222012ed145d64fa7d99817634b874d412dd71e1505e7dd2f31403feb34c1e3d35464fcecc54541757d5c73a89b49e5c2bd9c53767a3842d8a567073e18c648dc69c78b8a0e9e76292a4b2954c626985806ae9c32704b", 0xcb, 0x3, 0xd200000000}, {&(0x7f0000000740)="014b0065e8142b5ddaf430942574b4db7d", 0x11, 0x9, 0x5}], 0x280000) 102.959888ms ago: executing program 9 (id=3406): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xf6103, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400007, 0x0, @perf_bp={0x0, 0x4}, 0x4404, 0x7, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x1000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r1], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) 52.879889ms ago: executing program 8 (id=3407): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10fcc8, 0x1224, 0xffffffff, 0x0, 0x0, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x481}, 0x0, 0xe, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000440)=""/147, &(0x7f0000000500)=0x93) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x81000, 0xfffffffd, 0x1020, 0xfffffffd, 0x7ff, 0xf84, 0x3}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x1, 0x8, {{0xc, 0x4, 0x0, 0xb, 0x30, 0x68, 0x0, 0x0, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0xf8, [@loopback, @loopback]}, @generic={0x94, 0xe, "00000000000000eeff000000"}]}}}}}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x24}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) unshare(0x4020400) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x9801) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x44) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 38.97839ms ago: executing program 9 (id=3408): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) pipe(0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x18}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x401, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000140)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@errors_continue}, {@jqfmt_vfsv1}, {@grpid}]}, 0x2, 0x472, &(0x7f0000000540)="$eJzs3M9vFFUcAPDvzLZFfrbiTxC1SoyNP1paUDl40WjiAaOJHvBmbQshFGpoTYQQqcbgxcSQ6Fk9mvgXePNi1JOJV70bEqJcQE81MztTdpfutoVlt7CfTzLsezNv9r1v59ebebME0LOGs3+SiG0R8UdEDFaz9QWGqx9XL5+d+vfy2akklpbe+jvJy125fHaqLFqut7XIjKQR6adJUUm9+dNnjk/Ozs6cKvJjCyfeH5s/febZYycmj84cnTk5cfDggf3jLzw/8Vxb4sziurL7o7k9u15758LrU4cvvPfL91l7txXLa+NosKnhc82Gs8D/Wcotz0yrH0+sO4KNbXtNOunrYkNYl0pEZJurPz/+B6MS1zbeYLz6SVcbB9xS2bWpxYVtcQm4gyXR7RYA3VFe6LP733LqUNdjQ7j0UvUGKIv7ajFVl/SVt+r5vdH2W1T/cEQcXvzv62yK1s8hAADa4vOprw7FMyv1/9K4v6bcjmIMZSgi7o6InRFxTzEocl9EXvaBiHhw9SrT2kzj0ND1/Z/04g0HtwZZ/+/FYmyrvv+33MyhSpHbnsffnxw5Njuzr/ibjET/piw/3qKOH1/5/Ytmy2r7f9mU1V/2BYt2XOxreEA3PbkwmXdK2+DSxxG7+1aKP1keCUgiYldE7F7fV+8oE8ee+m5Ps0Krx99CG8aZlr6NeLK6/RejIf5S0np8cuyumJ3ZN1buFdf79bfzbzar/6bib4Ns+2+p3/8biwwlteO18+uv4/yfnzW9p7nR/X8geTtfd6CY9+HkwsKp8YiB5FCer5s/cW3dMl+Wz+If2bvy8b+zWCeL/6GIyHbihyPikYh4tGj7YxHxeETsbRH/zy83X1Yf/+Zt3dj+0w3nv835kuX9v2H7rz9ROf7TDyvX/s27a9v+B/LUSDEnP/+tYq0NvMk/HwAAANwW0vwd+CQdXU6n6eho9R3+e2NLOjs3v/D0kbkPTk5X35Ufiv60fNI1WPM8dDxZLL6xmp8onhWXy/cXz42/rGzO86NTc7PTXY4det3WJsd/5q9Kt1sH3HIrjaNNDHShIUDHNR7/aX323BudbAzQUU3fo9nS2XYAnbfKe3Rpp9oBdJ7/rwV610rH/7mGvLEAuDO5/kPvcvxD7+oLJwHoVQ596Emr/Ui+cpO//Ze47RLJ2gpH2v2mboxEf0S05QsHNkQ4RaLbZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2+D8AAP//sYTqKA==") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlinkat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000140)="c1ffb061cdee7a1ff8a7fe4b3fc8", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000001340)={0x1d4, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x451}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x57, 0x3, "337a51367044a4a2117e9fffbe04f46e5878d86550754dcd7495433123ff6d44105e0457bb2802ef7e7d977e81f23a0d0077385c1f5ac8813a0e95225558b02e1a1dc75a949a61aacc5d6d86fabb3f505c260f"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "78d9e032aa7b20528efe3369a27103fc2c90f92e9c6f67b34c71de1c6d4247dc1c"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "a3962dc2f851fbc460e35d0612c5f49b6c74363ea1"}}, @TIPC_NLA_NODE_ID={0xc6, 0x3, "423cddabe622dc0fdeb24c345a632075cd1fcaf85c4f77516c8550ebc24b06303d69f647d3c2ceab18d598f9f1998a78aa6fd282b9c3a2811ac20e2f234440a38ee2dcef7b957befefce3d3b92f2c5b6c1052af6faae4af38368e30255abce2249b9769f3427ea95601c3c4e72534fce802f7381041afca29d678f7eb0775e3ac37d71fdbcb1c7cb0e2b7ddee71ee86266fa857fdb417fbe3aa41e30c5bd98ea660cfdb02f867cdfe9b6fff0aeaed6d831e3dfd8bbb39fbbc6dfbebf7a9eba61da0a"}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x1}, 0x20046080) setxattr$trusted_overlay_redirect(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f0000000a00)='./file0\x00', 0x8, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01000000000000000ab403000000"], 0x14}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90010000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x14, r4, 0x20, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004000) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0) 0s ago: executing program 0 (id=3409): sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000280)="894c2bf0071e751c6ab430c56ca95746f56de1e03a8d9b67b591734127719e8e804d0dd4633bbd86615e26fc66f6177d36089381776a35df72f34a5f986ea6d896b7299b44", 0x45}, {&(0x7f0000001000)="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", 0x10f}, {&(0x7f0000000d40)="9085e7be95dbb573d7822aaf3365c2efdc15d42c91b660b2f92bf2fe71f00436658cd1b878242d", 0x27}, {0x0}, {0x0}, {&(0x7f0000000f00)="f01612483b90b2a341", 0x9}, {0x0}], 0x7, &(0x7f0000001140)=[@cred={{0x1c}}], 0x20, 0x40000}}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000001200)}, {&(0x7f0000002a80)="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", 0xb54}, {0x0}], 0x3, 0x0, 0x0, 0x41}}], 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') readv(r1, &(0x7f0000001700), 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}, @common=@inet=@ecn={{0x28}, {0x1, 0x11, 0x8, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r3 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) kernel console output (not intermixed with test programs): 1' '/dev/disk/by-diskseq/1066.tmp-b7:1' failed: Read-only file system [ 367.384663][T13652] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.412121][T12212] udevd[12212]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 367.431576][ T5708] udevd[5708]: symlink '../../loop9' '/dev/disk/by-diskseq/1060.tmp-b7:9' failed: Read-only file system [ 367.483667][T13662] loop3: detected capacity change from 0 to 512 [ 367.499586][T12212] udevd[12212]: symlink '../../loop1' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:1' failed: Read-only file system [ 367.546297][ T5721] udevd[5721]: symlink '../../loop3' '/dev/disk/by-diskseq/1069.tmp-b7:3' failed: Read-only file system [ 367.580242][ T5708] udevd[5708]: symlink '../../loop8' '/dev/disk/by-diskseq/1065.tmp-b7:8' failed: Read-only file system [ 367.634783][T13653] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2857'. [ 367.723810][T13662] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 367.732087][T13662] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 367.758398][T13662] System zones: 0-1, 15-15, 18-18, 34-34 [ 367.765913][T13666] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 367.777470][T13662] EXT4-fs (loop3): orphan cleanup on readonly fs [ 367.788195][T13662] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 367.805158][T13662] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 367.851881][T13662] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.2863: bad orphan inode 16 [ 367.862474][T13662] loop3: lost filesystem error report for type 5 error -117 [ 367.868120][T13670] lo speed is unknown, defaulting to 1000 [ 367.934984][T13666] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.2864'. [ 367.944937][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 367.944960][ C0] EXT4-fs (loop3): initial error at time 1786083814: ext4_orphan_get:1425 [ 367.944982][ C0] EXT4-fs (loop3): last error at time 1786083814: ext4_orphan_get:1425 [ 367.968555][T13662] ext4_test_bit(bit=15, block=18) = 1 [ 367.982375][T13662] is_bad_inode(inode)=0 [ 367.999575][T13662] NEXT_ORPHAN(inode)=0 [ 368.012608][T13662] max_ino=32 [ 368.022446][T13662] i_nlink=2 [ 368.050526][T13662] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 368.057370][T13659] loop9: detected capacity change from 0 to 1024 [ 368.065562][T13659] EXT4-fs: Ignoring removed orlov option [ 368.079057][T13662] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 368.119452][T13682] validate_nla: 2 callbacks suppressed [ 368.119468][T13682] netlink: 'syz.7.2868': attribute type 16 has an invalid length. [ 368.133063][T13682] netlink: 'syz.7.2868': attribute type 17 has an invalid length. [ 368.217105][T13682] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 368.282027][ T28] kauditd_printk_skb: 129 callbacks suppressed [ 368.282045][ T28] audit: type=1400 audit(1786083815.090:3354): avc: denied { mount } for pid=13661 comm="syz.3.2863" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 368.366805][T13703] loop1: detected capacity change from 0 to 256 [ 368.383203][ T28] audit: type=1400 audit(1786083815.190:3355): avc: denied { bind } for pid=13700 comm="syz.7.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 368.409607][T13703] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 368.443626][ T28] audit: type=1326 audit(1786083815.190:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13702 comm="syz.9.2877" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd2653e0d9 code=0x0 [ 368.449950][T13703] FAT-fs (loop1): Filesystem has been set read-only [ 368.509018][ T28] audit: type=1400 audit(1786083815.230:3357): avc: denied { read } for pid=13700 comm="syz.7.2874" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 368.536215][T13703] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 368.575537][ T28] audit: type=1400 audit(1786083815.230:3358): avc: denied { open } for pid=13700 comm="syz.7.2874" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 368.616155][ T28] audit: type=1400 audit(1786083815.290:3359): avc: denied { block_suspend } for pid=13700 comm="syz.7.2874" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 368.641329][ T28] audit: type=1400 audit(1786083815.360:3360): avc: denied { create } for pid=13702 comm="syz.9.2877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 368.689330][ T28] audit: type=1400 audit(1786083815.380:3361): avc: denied { ioctl } for pid=13702 comm="syz.9.2877" path="socket:[39164]" dev="sockfs" ino=39164 ioctlcmd=0x6183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 368.717705][T13712] loop3: detected capacity change from 0 to 128 [ 368.864314][T13712] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 368.978447][T13716] xt_CT: No such helper "netbios-ns" [ 368.985949][T13719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pid=13719 comm=syz.7.2880 [ 369.179704][T13725] loop1: detected capacity change from 0 to 1024 [ 369.188679][ T28] audit: type=1400 audit(1786083815.990:3362): avc: denied { read } for pid=13723 comm="syz.7.2882" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 369.260783][T13725] EXT4-fs: Ignoring removed orlov option [ 369.305176][T13731] loop7: detected capacity change from 0 to 512 [ 369.317614][ T28] audit: type=1400 audit(1786083815.990:3363): avc: denied { open } for pid=13723 comm="syz.7.2882" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 369.621553][T13731] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.694308][T13741] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 369.719509][T13742] netlink: 'syz.3.2885': attribute type 16 has an invalid length. [ 369.727595][T13742] netlink: 'syz.3.2885': attribute type 17 has an invalid length. [ 369.738022][T13742] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 369.890215][T13748] __nla_validate_parse: 3 callbacks suppressed [ 369.890234][T13748] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2891'. [ 369.920065][T13748] netlink: 'syz.8.2891': attribute type 10 has an invalid length. [ 369.930215][T13748] team0: Port device dummy0 added [ 369.939772][T13753] x_tables: duplicate underflow at hook 3 [ 369.962231][T13759] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 370.007688][T13761] netdevsim netdevsim7: Firmware load for '../file0/../file0/../file0' refused, path contains '..' component [ 370.122114][T13757] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 370.162675][T13757] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 370.204542][T13757] System zones: 0-1, 15-15, 18-18, 34-34 [ 370.230376][T13757] EXT4-fs (loop1): orphan cleanup on readonly fs [ 370.256453][T13757] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 370.302590][T13757] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 370.347289][T13757] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.2892: bad orphan inode 16 [ 370.376071][T13757] loop1: lost filesystem error report for type 5 error -117 [ 370.377268][T13757] ext4_test_bit(bit=15, block=18) = 1 [ 370.390208][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 370.390228][ C1] EXT4-fs (loop1): initial error at time 1786083817: ext4_orphan_get:1425 [ 370.390251][ C1] EXT4-fs (loop1): last error at time 1786083817: ext4_orphan_get:1425 [ 370.501596][T13757] is_bad_inode(inode)=0 [ 370.515907][T13757] NEXT_ORPHAN(inode)=0 [ 370.522755][T13759] bridge0: entered promiscuous mode [ 370.528832][T13757] max_ino=32 [ 370.528844][T13757] i_nlink=2 [ 370.547368][T13759] bridge0: entered allmulticast mode [ 370.561233][T13757] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 370.586536][T13757] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 370.613293][T13767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2892'. [ 370.635428][ T9521] bridge0: port 1(syz_tun) entered disabled state [ 370.644977][ T9521] syz_tun (unregistering): left allmulticast mode [ 370.657956][ T9521] syz_tun (unregistering): left promiscuous mode [ 370.668974][ T9521] bridge0: port 1(syz_tun) entered disabled state [ 370.740492][T13769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2895'. [ 370.794047][T13769] e1000e 0000:00:00.0: probe with driver e1000e failed with error -5 [ 370.862836][T13779] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2898'. [ 370.927457][T13782] EXT4-fs: Ignoring removed orlov option [ 371.031973][ T3425] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1017 with max blocks 3 with error 117 [ 371.046714][ T3425] EXT4-fs (sda1): This should not happen!! Data will be lost [ 371.046714][ T3425] [ 371.057901][ T3425] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 1018 with max blocks 1 with error 117 [ 371.071483][ T3425] EXT4-fs (sda1): This should not happen!! Data will be lost [ 371.071483][ T3425] [ 371.178816][T13788] lo speed is unknown, defaulting to 1000 [ 371.350321][T13788] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.377989][T13788] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.395984][T13788] bridge_slave_0: entered allmulticast mode [ 371.400435][T13806] netlink: 'syz.1.2905': attribute type 16 has an invalid length. [ 371.409822][T13788] bridge_slave_0: entered promiscuous mode [ 371.411672][T13806] netlink: 'syz.1.2905': attribute type 17 has an invalid length. [ 371.420863][T13788] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.442290][T13788] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.450993][T13788] bridge_slave_1: entered allmulticast mode [ 371.457776][T13788] bridge_slave_1: entered promiscuous mode [ 371.477805][T13788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.488702][T13788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.510360][T13788] team0: Port device team_slave_0 added [ 371.519975][T13788] team0: Port device team_slave_1 added [ 371.540130][T13788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.548356][T13788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.592765][T13788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.711134][T13806] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 371.863682][T13788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.871538][T13788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.913181][T13788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.974965][T13788] hsr_slave_0: entered promiscuous mode [ 371.989302][T13788] hsr_slave_1: entered promiscuous mode [ 371.996609][T13788] debugfs: 'hsr0' already exists in 'hsr' [ 372.002955][T13788] Cannot create hsr debugfs directory [ 372.085373][T13822] FAULT_INJECTION: forcing a failure. [ 372.085373][T13822] name failslab, interval 1, probability 0, space 0, times 0 [ 372.085405][T13822] CPU: 1 UID: 0 PID: 13822 Comm: syz.1.2908 Not tainted syzkaller #0 PREEMPT(lazy) [ 372.085500][T13822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.085545][T13822] Call Trace: [ 372.085552][T13822] [ 372.085559][T13822] __dump_stack+0x1d/0x30 [ 372.085587][T13822] dump_stack_lvl+0x95/0xd0 [ 372.085611][T13822] dump_stack+0x15/0x1b [ 372.085695][T13822] should_fail_ex+0x25e/0x270 [ 372.085729][T13822] should_failslab+0x8c/0xb0 [ 372.085756][T13822] __kvmalloc_node_noprof+0x15b/0x590 [ 372.085791][T13822] ? __rhashtable_init_noprof+0x320/0x490 [ 372.085895][T13822] ? __rhashtable_init_noprof+0x320/0x490 [ 372.086033][T13822] ? nla_strdup+0x78/0xc0 [ 372.086067][T13822] __rhashtable_init_noprof+0x320/0x490 [ 372.086164][T13822] __rhltable_init_noprof+0x1d/0x40 [ 372.086200][T13822] nf_tables_newtable+0x529/0xf00 [ 372.086237][T13822] nfnetlink_rcv+0xbf7/0x1740 [ 372.086297][T13822] netlink_unicast+0x5a7/0x680 [ 372.086323][T13822] netlink_sendmsg+0x5be/0x6f0 [ 372.086380][T13822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.086405][T13822] ____sys_sendmsg+0x532/0x580 [ 372.086428][T13822] ___sys_sendmsg+0x195/0x1e0 [ 372.086512][T13822] __x64_sys_sendmsg+0xd4/0x160 [ 372.086533][T13822] x64_sys_call+0x194c/0x3020 [ 372.086581][T13822] do_syscall_64+0x136/0x3c0 [ 372.086607][T13822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.086628][T13822] RIP: 0033:0x7f096158e0d9 [ 372.086689][T13822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.086709][T13822] RSP: 002b:00007f095ffe7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.086766][T13822] RAX: ffffffffffffffda RBX: 00007f0961815fa0 RCX: 00007f096158e0d9 [ 372.086784][T13822] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 372.086799][T13822] RBP: 00007f095ffe7090 R08: 0000000000000000 R09: 0000000000000000 [ 372.086868][T13822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.086882][T13822] R13: 00007f0961816038 R14: 00007f0961815fa0 R15: 00007ffca4e51938 [ 372.086905][T13822] [ 372.180989][T12065] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1502 with max blocks 1 with error 117 [ 372.181143][T12065] EXT4-fs (sda1): This should not happen!! Data will be lost [ 372.181143][T12065] [ 372.190695][T13823] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2904'. [ 372.215865][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1072.tmp-b7:9' failed: Read-only file system [ 372.370532][T13830] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2910'. [ 372.569078][ T5721] udevd[5721]: symlink '../../loop3' '/dev/disk/by-diskseq/1079.tmp-b7:3' failed: Read-only file system [ 372.630413][T12212] udevd[12212]: symlink '../../loop9' '/dev/disk/by-diskseq/1072.tmp-b7:9' failed: Read-only file system [ 372.679872][ T5721] udevd[5721]: symlink '../../loop3' '/dev/disk/by-diskseq/1079.tmp-b7:3' failed: Read-only file system [ 372.712233][ T5708] udevd[5708]: symlink '../../loop9' '/dev/disk/by-diskseq/1072.tmp-b7:9' failed: Read-only file system [ 372.758579][ T5721] udevd[5721]: symlink '../../loop3' '/dev/disk/by-diskseq/1079.tmp-b7:3' failed: Read-only file system [ 372.799399][T13788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 372.959431][T13788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.972021][T13788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 372.979475][T13848] set_capacity_and_notify: 3 callbacks suppressed [ 372.979493][T13848] loop9: detected capacity change from 0 to 1024 [ 372.994271][T13848] EXT4-fs: Ignoring removed orlov option [ 373.007882][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1088.tmp-b7:9' failed: Read-only file system [ 373.010662][T13788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.020237][T13854] sctp: [Deprecated]: syz.3.2915 (pid 13854) Use of int in max_burst socket option. [ 373.020237][T13854] Use struct sctp_assoc_value instead [ 373.027048][T13788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 373.037517][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 373.065160][T13788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.108115][T13788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 373.121173][T13788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.167976][ T5721] udevd[5721]: symlink '../../loop8' '/dev/disk/by-diskseq/1087.tmp-b7:8' failed: Read-only file system [ 373.221023][ T5721] udevd[5721]: symlink '../../loop1' '/dev/disk/by-diskseq/1086.tmp-b7:1' failed: Read-only file system [ 373.285751][T13889] loop9: detected capacity change from 0 to 512 [ 373.295221][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 373.295239][ T28] audit: type=1400 audit(1786083820.112:3401): avc: denied { sys_admin } for pid=13887 comm="syz.8.2920" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 373.356535][T13788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.380895][T13895] futex_wake_op: syz.1.2917 tries to shift op by 144; fix this program [ 373.906524][T13889] EXT4-fs: Ignoring removed orlov option [ 373.966827][T13898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2921'. [ 373.981948][ T28] audit: type=1400 audit(1786083820.742:3402): avc: denied { watch watch_reads } for pid=13885 comm="syz.9.2919" path="/220/file1/file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 374.027302][ T28] audit: type=1400 audit(1786083820.832:3403): avc: denied { write } for pid=13893 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.191160][T13788] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.216572][T13905] netlink: 11 bytes leftover after parsing attributes in process `syz.8.2922'. [ 374.241842][T12056] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.249238][T12056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.315772][T13920] loop3: detected capacity change from 0 to 512 [ 374.330874][T12056] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.339519][T12056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.367416][T13920] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 374.387901][ T28] audit: type=1400 audit(1786083821.193:3404): avc: denied { write } for pid=13903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.435406][T13920] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 374.446691][T13920] System zones: 0-1, 15-15, 18-18, 34-34 [ 374.455217][T13920] EXT4-fs (loop3): orphan cleanup on readonly fs [ 374.463766][T13920] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 374.480588][T13920] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 374.509654][T13920] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 374.546531][ T28] audit: type=1400 audit(1786083821.343:3405): avc: denied { write } for pid=13937 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.555197][T13920] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.2926: bad orphan inode 16 [ 374.636682][T13920] loop3: lost filesystem error report for type 5 error -117 [ 374.636861][T13920] ext4_test_bit(bit=15, block=18) = 1 [ 374.644677][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 374.644719][ C1] EXT4-fs (loop3): initial error at time 1786083821: ext4_orphan_get:1425 [ 374.644745][ C1] EXT4-fs (loop3): last error at time 1786083821: ext4_orphan_get:1425 [ 374.723442][T13957] loop9: detected capacity change from 0 to 512 [ 374.783097][T13920] is_bad_inode(inode)=0 [ 374.788422][T13920] NEXT_ORPHAN(inode)=0 [ 374.790205][ T28] audit: type=1400 audit(1786083821.583:3406): avc: denied { write } for pid=13946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.816580][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 374.886053][T13957] EXT4-fs mount: 23 callbacks suppressed [ 374.886072][T13957] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.914633][T13920] max_ino=32 [ 374.919629][T13920] i_nlink=2 [ 374.927409][T13920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 374.954273][ T28] audit: type=1400 audit(1786083821.723:3407): avc: denied { write } for pid=13956 comm="syz.9.2931" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 375.203513][ T28] audit: type=1400 audit(1786083821.733:3408): avc: denied { append } for pid=13956 comm="syz.9.2931" path="/224/file1/pids.current" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 375.243526][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2926'. [ 375.260505][T13788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.291461][ T28] audit: type=1400 audit(1786083821.763:3409): avc: denied { write } for pid=13968 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.531005][ T9968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.543755][T11932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.655597][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2933'. [ 375.692920][T14010] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.710426][T14010] bridge_slave_1 (unregistering): left allmulticast mode [ 375.726880][T14010] bridge_slave_1 (unregistering): left promiscuous mode [ 375.734911][T14010] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.752691][T14020] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2935'. [ 375.770816][T13788] veth0_vlan: entered promiscuous mode [ 375.801498][T13788] veth1_vlan: entered promiscuous mode [ 375.848672][T14027] loop3: detected capacity change from 0 to 128 [ 375.890915][T13788] veth0_macvtap: entered promiscuous mode [ 375.896090][T14027] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 375.922213][T14027] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 375.970160][T13788] veth1_macvtap: entered promiscuous mode [ 375.981354][T14027] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 63: comm syz.3.2937: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 376.011625][T14027] EXT4-fs error (device loop3) in do_split:2027: Corrupt filesystem [ 376.024988][T13788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.053895][T13788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.103194][T12056] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.134776][T11932] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.146146][T12056] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.188392][ T3509] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.258734][ T3425] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.289747][T14059] loop0: detected capacity change from 0 to 512 [ 376.321011][T14059] EXT4-fs (loop0): orphan cleanup on readonly fs [ 376.334560][T14059] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 376.362202][T14059] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 376.375290][T14069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2947'. [ 376.380088][T14059] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2903: attempt to clear invalid blocks 2 len 1 [ 376.403989][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 376.404017][ C0] EXT4-fs (loop0): initial error at time 1786083823: ext4_mb_generate_buddy:1317 [ 376.404044][ C0] EXT4-fs (loop0): last error at time 1786083823: ext4_mb_generate_buddy:1317 [ 376.444087][T14059] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 376.444394][T14059] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2903: invalid indirect mapped block 1819239214 (level 0) [ 376.477103][T14059] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 376.477352][T14059] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2903: invalid indirect mapped block 1819239214 (level 1) [ 376.481319][T14072] loop3: detected capacity change from 0 to 512 [ 376.510818][T14059] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 376.522236][T14076] loop8: detected capacity change from 0 to 512 [ 376.552636][T14059] EXT4-fs (loop0): 1 truncate cleaned up [ 376.568898][T14072] ext4: Unknown parameter 'subj_type' [ 376.572048][T14059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 376.607974][T14076] ext4: Unknown parameter 'subj_type' [ 376.693316][T14059] EXT4-fs error (device loop0): ext4_lookup:1782: inode #2: comm syz.0.2903: 'file1' linked to parent dir [ 376.710702][T14073] loop8: detected capacity change from 0 to 512 [ 376.718879][T14059] EXT4-fs error (device loop0): ext4_lookup:1782: inode #2: comm syz.0.2903: 'file1' linked to parent dir [ 376.769551][T14072] loop3: detected capacity change from 0 to 512 [ 376.810981][T13788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.890853][T14082] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2949'. [ 377.186836][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2951'. [ 377.316050][ T5721] udevd[5721]: symlink '../../loop1' '/dev/disk/by-diskseq/1086.tmp-b7:1' failed: Read-only file system [ 377.381551][T12212] udevd[12212]: symlink '../../loop3' '/dev/disk/by-diskseq/1108.tmp-b7:3' failed: Read-only file system [ 377.493337][ T5721] udevd[5721]: symlink '../../loop3' '/dev/disk/by-diskseq/1108.tmp-b7:3' failed: Read-only file system [ 377.529332][T12212] udevd[12212]: symlink '../../loop9' '/dev/disk/by-diskseq/1110.tmp-b7:9' failed: Read-only file system [ 377.548742][T14138] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 377.569179][ T5721] udevd[5721]: symlink '../../loop3' '/dev/disk/by-diskseq/1108.tmp-b7:3' failed: Read-only file system [ 377.611879][T14152] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2960'. [ 377.617302][T12212] udevd[12212]: symlink '../../loop9' '/dev/disk/by-diskseq/1110.tmp-b7:9' failed: Read-only file system [ 377.640345][T14155] FAT-fs (loop9): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 377.654088][T14155] FAT-fs (loop9): Filesystem has been set read-only [ 377.686571][ T5721] udevd[5721]: symlink '../../loop1' '/dev/disk/by-diskseq/1086.tmp-b7:1' failed: Read-only file system [ 377.747991][T12212] udevd[12212]: symlink '../../loop3' '/dev/disk/by-diskseq/1108.tmp-b7:3' failed: Read-only file system [ 377.824372][ T5721] udevd[5721]: symlink '../../loop0' '/dev/disk/by-diskseq/1109.tmp-b7:0' failed: Read-only file system [ 377.838293][ T5721] udevd[5721]: symlink '../../loop0' '/dev/disk/by-diskseq/1109.tmp-b7:0' failed: Read-only file system [ 377.878119][T14171] EXT4-fs: Ignoring removed orlov option [ 378.004593][T14186] program syz.0.2966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.005259][T14171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.066169][T14191] set_capacity_and_notify: 3 callbacks suppressed [ 378.066197][T14191] loop3: detected capacity change from 0 to 512 [ 378.120286][T14163] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 378.174012][T14163] EXT4-fs error (device loop1): __ext4_new_inode:1287: comm syz.1.2961: failed to insert inode 12: doubly allocated? [ 378.202284][T14191] ext4: Unknown parameter 'subj_type' [ 378.442834][T14213] lo speed is unknown, defaulting to 1000 [ 378.540346][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 378.540363][ T28] audit: type=1400 audit(1786083825.345:3465): avc: denied { write } for pid=14210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.640232][T14229] x_tables: duplicate underflow at hook 2 [ 378.651229][ T28] audit: type=1400 audit(1786083825.455:3466): avc: denied { write } for pid=14228 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.754268][T12428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.772935][T14177] loop3: detected capacity change from 0 to 512 [ 378.853902][T14236] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2972'. [ 378.879069][ T28] audit: type=1400 audit(1786083825.685:3467): avc: denied { read write } for pid=14238 comm="syz.8.2975" name="qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 378.909929][T14239] loop8: detected capacity change from 0 to 256 [ 378.983458][T14244] xt_CT: No such helper "netbios-ns" [ 379.001755][ T28] audit: type=1400 audit(1786083825.685:3468): avc: denied { open } for pid=14238 comm="syz.8.2975" path="/dev/qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 379.097327][ T28] audit: type=1400 audit(1786083825.905:3469): avc: denied { write } for pid=14240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.180828][T14270] qrtr: Invalid version 0 [ 379.277766][ T28] audit: type=1400 audit(1786083826.035:3470): avc: denied { write } for pid=14268 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.320719][ T28] audit: type=1400 audit(1786083826.125:3471): avc: denied { read } for pid=14276 comm="syz.1.2983" name="trace_pipe" dev="tracefs" ino=2253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 379.363799][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2985'. [ 379.379113][T14280] gretap0: entered promiscuous mode [ 379.452251][ T28] audit: type=1400 audit(1786083826.255:3472): avc: denied { bind } for pid=14287 comm="syz.0.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 379.561233][T14297] loop1: detected capacity change from 0 to 128 [ 379.603295][T14297] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 379.651771][ T28] audit: type=1400 audit(1786083826.455:3473): avc: denied { write } for pid=14283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.703530][T14302] xt_CT: No such helper "netbios-ns" [ 379.717419][ T28] audit: type=1400 audit(1786083826.515:3474): avc: denied { write } for pid=14307 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.933902][T14331] ip_tables: iptables: counters copy to user failed while replacing table [ 379.960356][T14329] ip_tables: iptables: counters copy to user failed while replacing table [ 380.298703][T14336] loop0: detected capacity change from 0 to 512 [ 380.330420][T14336] ext4: Unknown parameter 'subj_type' [ 380.548873][T14343] xt_CT: No such helper "netbios-ns" [ 380.583208][T14336] loop0: detected capacity change from 0 to 512 [ 380.706320][T14353] loop3: detected capacity change from 0 to 1024 [ 380.776491][T14353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.827544][T14360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3009'. [ 380.898217][T14360] loop0: detected capacity change from 0 to 512 [ 380.954299][T14373] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3014'. [ 380.954494][T14360] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51489!=18645) [ 380.978508][T14360] EXT4-fs (loop0): group descriptors corrupted! [ 381.013120][T14375] xt_CT: No such helper "netbios-ns" [ 381.074869][T11932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.132128][T14378] loop8: detected capacity change from 0 to 8192 [ 381.146477][T14378] vfat: Unknown parameter '00000000000000000004' [ 381.197927][T14380] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 381.331257][T14396] FAULT_INJECTION: forcing a failure. [ 381.331257][T14396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.352491][T14396] CPU: 0 UID: 0 PID: 14396 Comm: syz.3.3023 Not tainted syzkaller #0 PREEMPT(lazy) [ 381.352525][T14396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 381.352538][T14396] Call Trace: [ 381.352545][T14396] [ 381.352554][T14396] __dump_stack+0x1d/0x30 [ 381.352579][T14396] dump_stack_lvl+0x95/0xd0 [ 381.352660][T14396] dump_stack+0x15/0x1b [ 381.352679][T14396] should_fail_ex+0x25e/0x270 [ 381.352789][T14396] should_fail+0xb/0x20 [ 381.352818][T14396] should_fail_usercopy+0x1a/0x20 [ 381.352871][T14396] _copy_from_user+0x1c/0xb0 [ 381.352894][T14396] __sys_bpf+0x1e2/0xc30 [ 381.352931][T14396] ? get_pid_task+0x92/0xc0 [ 381.352955][T14396] ? vfs_write+0x770/0x990 [ 381.352980][T14396] __x64_sys_bpf+0x69/0x80 [ 381.353006][T14396] x64_sys_call+0x10cb/0x3020 [ 381.353095][T14396] do_syscall_64+0x136/0x3c0 [ 381.353126][T14396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.353196][T14396] RIP: 0033:0x7fe7bb2ee0d9 [ 381.353214][T14396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.353278][T14396] RSP: 002b:00007fe7b9d47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 381.353311][T14396] RAX: ffffffffffffffda RBX: 00007fe7bb575fa0 RCX: 00007fe7bb2ee0d9 [ 381.353326][T14396] RDX: 000000000000002e RSI: 00002000000005c0 RDI: 000000000000000a [ 381.353340][T14396] RBP: 00007fe7b9d47090 R08: 0000000000000000 R09: 0000000000000000 [ 381.353626][T14396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.353697][T14396] R13: 00007fe7bb576038 R14: 00007fe7bb575fa0 R15: 00007ffead14c718 [ 381.353717][T14396] [ 381.813147][T14416] xt_CT: No such helper "netbios-ns" [ 382.243196][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3030'. [ 382.351072][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1115.tmp-b7:9' failed: Read-only file system [ 382.505959][ T5721] udevd[5721]: symlink '../../loop1' '/dev/disk/by-diskseq/1121.tmp-b7:1' failed: Read-only file system [ 382.507679][T14436] loop1: detected capacity change from 0 to 512 [ 382.537674][ T5721] udevd[5721]: symlink '../../loop1' '/dev/disk/by-diskseq/1133.tmp-b7:1' failed: Read-only file system [ 382.551938][T14436] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 382.551958][T14436] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 382.551990][T14436] System zones: 0-1, 15-15 [ 382.562906][ T5721] udevd[5721]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 382.572075][T14436] , 18-18, 34-34 [ 382.572229][T14436] EXT4-fs (loop1): orphan cleanup on readonly fs [ 382.572287][T14436] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 382.572324][T14436] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 382.572457][T14436] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.3036: bad orphan inode 16 [ 382.572482][T14436] loop1: lost filesystem error report for type 5 error -117 [ 382.572582][T14436] ext4_test_bit(bit=15, block=18) = 1 [ 382.572598][T14436] is_bad_inode(inode)=0 [ 382.572605][T14436] NEXT_ORPHAN(inode)=0 [ 382.572614][T14436] max_ino=32 [ 382.572621][T14436] i_nlink=2 [ 382.573196][T14436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 382.655218][ T5721] udevd[5721]: symlink '../../loop1' '/dev/disk/by-diskseq/1133.tmp-b7:1' failed: Read-only file system [ 382.658504][T12212] udevd[12212]: symlink '../../loop0' '/dev/disk/by-diskseq/1129.tmp-b7:0' failed: Read-only file system [ 382.670965][ T5721] udevd[5721]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 382.748054][T14436] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 382.761808][T14436] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 382.874324][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3036'. [ 382.886531][ T5721] udevd[5721]: symlink '../../loop3' '/dev/disk/by-diskseq/1130.tmp-b7:3' failed: Read-only file system [ 383.072303][ T5721] udevd[5721]: symlink '../../loop3' '/dev/disk/by-diskseq/1134.tmp-b7:3' failed: Read-only file system [ 383.129872][T14448] netlink: 'syz.3.3037': attribute type 2 has an invalid length. [ 383.143269][T14448] netlink: 198728 bytes leftover after parsing attributes in process `syz.3.3037'. [ 383.260820][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1115.tmp-b7:9' failed: Read-only file system [ 383.349797][T14453] xt_CT: No such helper "netbios-ns" [ 383.525876][T14459] netlink: 'syz.3.3041': attribute type 4 has an invalid length. [ 383.930611][T12428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.016343][T14465] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3043'. [ 384.176163][T14467] ip_tables: iptables: counters copy to user failed while replacing table [ 384.496951][T14476] set_capacity_and_notify: 1 callbacks suppressed [ 384.496970][T14476] loop9: detected capacity change from 0 to 512 [ 384.514797][T14476] EXT4-fs: Ignoring removed nobh option [ 384.536440][T14476] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 384.592062][T14476] EXT4-fs (loop9): 1 truncate cleaned up [ 384.620903][T14476] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.622115][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 384.622130][ T28] audit: type=1400 audit(1786083831.438:3493): avc: denied { accept } for pid=14482 comm="syz.3.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 384.671685][ T28] audit: type=1400 audit(1786083831.488:3494): avc: denied { write } for pid=14475 comm="syz.9.3048" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 384.697473][T14488] xt_CT: No such helper "netbios-ns" [ 384.700283][ T28] audit: type=1400 audit(1786083831.488:3495): avc: denied { append } for pid=14475 comm="syz.9.3048" name="file2" dev="loop9" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 384.752637][T14495] netlink: 'syz.1.3051': attribute type 1 has an invalid length. [ 384.760791][T14496] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.764613][T14493] netlink: 'syz.1.3051': attribute type 1 has an invalid length. [ 384.774532][T14496] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 384.796664][ T28] audit: type=1400 audit(1786083831.568:3496): avc: denied { write } for pid=14475 comm="syz.9.3048" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 384.820164][T14495] bond1: (slave veth0_to_bond): making interface the new active one [ 384.828298][T14495] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 384.844253][T14493] macvlan2: entered promiscuous mode [ 384.849689][T14493] macvlan2: entered allmulticast mode [ 384.857000][T14493] bond1: entered promiscuous mode [ 384.866389][T14493] veth0_to_bond: entered promiscuous mode [ 384.873829][T14493] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 384.884582][ T28] audit: type=1400 audit(1786083831.568:3497): avc: denied { write } for pid=14475 comm="syz.9.3048" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 384.905154][T14505] loop3: detected capacity change from 0 to 512 [ 384.910854][ T28] audit: type=1400 audit(1786083831.678:3498): avc: denied { write } for pid=14499 comm="syz.3.3053" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 384.959640][T14505] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 384.968033][T14505] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 384.977408][T14505] System zones: 0-1, 15-15, 18-18, 34-34 [ 384.979738][T14493] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 384.987693][T14505] EXT4-fs (loop3): orphan cleanup on readonly fs [ 384.998748][ T9968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.006504][T14505] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 385.028838][T14505] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 385.046798][T14505] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 385.054633][T14505] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.3054: bad orphan inode 16 [ 385.069557][T14505] loop3: lost filesystem error report for type 5 error -117 [ 385.069816][T14505] ext4_test_bit(bit=15, block=18) = 1 [ 385.088563][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 385.088587][ C1] EXT4-fs (loop3): initial error at time 1786083831: ext4_orphan_get:1425 [ 385.088611][ C1] EXT4-fs (loop3): last error at time 1786083831: ext4_orphan_get:1425 [ 385.122584][T14505] is_bad_inode(inode)=0 [ 385.126842][T14505] NEXT_ORPHAN(inode)=0 [ 385.132220][T14505] max_ino=32 [ 385.132527][T14493] bond1: left promiscuous mode [ 385.137386][T14505] i_nlink=2 [ 385.137927][T14505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 385.145895][T14493] veth0_to_bond: left promiscuous mode [ 385.219394][T14505] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 385.227844][T14505] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 385.318011][T14495] macvlan2: entered promiscuous mode [ 385.327510][T14495] macvlan2: entered allmulticast mode [ 385.341092][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3054'. [ 385.354808][T14495] bond1: entered promiscuous mode [ 385.363084][T14495] veth0_to_bond: entered promiscuous mode [ 385.372035][T14495] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 385.425372][T14495] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 385.490080][T14523] x_tables: duplicate underflow at hook 2 [ 385.516611][ T28] audit: type=1400 audit(1786083832.328:3499): avc: denied { setopt } for pid=14524 comm="syz.0.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 385.542891][T14495] bond1: left promiscuous mode [ 385.559898][T14495] veth0_to_bond: left promiscuous mode [ 385.585806][T14519] loop8: detected capacity change from 0 to 1024 [ 385.611794][T14519] EXT4-fs: Ignoring removed orlov option [ 385.634739][T14519] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.729732][ T9028] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.821874][T14534] ip_tables: iptables: counters copy to user failed while replacing table [ 385.859327][T14536] xt_CT: No such helper "netbios-ns" [ 386.085243][T14552] lo speed is unknown, defaulting to 1000 [ 386.220182][T11932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.361491][ T28] audit: type=1400 audit(1786083833.159:3500): avc: denied { read write } for pid=14557 comm="syz.3.3068" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 386.467633][ T28] audit: type=1400 audit(1786083833.159:3501): avc: denied { open } for pid=14557 comm="syz.3.3068" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 386.526771][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3067'. [ 386.583444][T14552] xt_hashlimit: size too large, truncated to 1048576 [ 386.674984][T14567] loop0: detected capacity change from 0 to 1024 [ 386.689524][T14567] EXT4-fs: Ignoring removed orlov option [ 386.737292][T14567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.912236][T14586] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3066'. [ 386.951377][T14582] lo speed is unknown, defaulting to 1000 [ 387.086095][T14581] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3071'. [ 387.106329][T14590] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3075'. [ 387.116869][T14590] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3075'. [ 387.137186][T14590] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 387.150468][T14590] loop8: detected capacity change from 0 to 164 [ 387.159656][T14590] rock: corrupted directory entry. extent=8, offset=0, size=16774637 [ 387.200543][T13788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.329743][T14599] loop0: detected capacity change from 0 to 512 [ 387.369139][ T5721] udevd[5721]: symlink '../../loop0' '/dev/disk/by-diskseq/1146.tmp-b7:0' failed: Read-only file system [ 387.385391][T14599] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 387.385830][ T5721] udevd[5721]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 387.398489][T14599] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 387.440365][T14599] System zones: 0-1, 15-15, 18-18, 34-34 [ 387.460187][T12212] udevd[12212]: symlink '../../loop8' '/dev/disk/by-diskseq/1144.tmp-b7:8' failed: Read-only file system [ 387.462103][ T5721] udevd[5721]: symlink '../../loop0' '/dev/disk/by-diskseq/1146.tmp-b7:0' failed: Read-only file system [ 387.475899][T14599] EXT4-fs (loop0): orphan cleanup on readonly fs [ 387.488619][ T5721] udevd[5721]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 387.516468][T14603] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 387.544896][ T5721] udevd[5721]: symlink '../../loop8' '/dev/disk/by-diskseq/1144.tmp-b7:8' failed: Read-only file system [ 387.544969][T14599] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 387.575186][ T5721] udevd[5721]: symlink '../../loop8' '/dev/disk/by-diskseq/1147.tmp-b7:8' failed: Read-only file system [ 387.594406][T14599] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 387.606203][T14603] tc action pedit 'at' offset -4096 out of bounds [ 387.613146][T14603] tc action pedit 'at' offset -4096 out of bounds [ 387.618468][T14599] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.3078: bad orphan inode 16 [ 387.619988][T14603] tc action pedit 'at' offset -4096 out of bounds [ 387.637753][T14603] tc action pedit 'at' offset -4096 out of bounds [ 387.644337][T14603] tc action pedit 'at' offset -4096 out of bounds [ 387.648287][T14599] loop0: lost filesystem error report for type 5 error -117 [ 387.651280][T14603] tc action pedit 'at' offset -4096 out of bounds [ 387.651298][T14599] ext4_test_bit(bit=15, block=18) = 1 [ 387.651325][T14603] tc action pedit 'at' offset -4096 out of bounds [ 387.658681][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 387.658704][ C0] EXT4-fs (loop0): initial error at time 1786083834: ext4_orphan_get:1425 [ 387.658729][ C0] EXT4-fs (loop0): last error at time 1786083834: ext4_orphan_get:1425 [ 387.665438][T14603] tc action pedit 'at' offset -4096 out of bounds [ 387.670930][ C0] [ 387.692349][T14599] is_bad_inode(inode)=0 [ 387.693555][T14603] tc action pedit 'at' offset -4096 out of bounds [ 387.721296][T14599] NEXT_ORPHAN(inode)=0 [ 387.723833][T14603] tc action pedit 'at' offset -4096 out of bounds [ 387.736732][T14603] TC_ACT_REPEAT abuse ? [ 387.742989][T14599] max_ino=32 [ 387.746452][T14599] i_nlink=2 [ 387.750369][T14599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 387.782175][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1139.tmp-b7:9' failed: Read-only file system [ 387.861909][ T5721] udevd[5721]: symlink '../../loop1' '/dev/disk/by-diskseq/1136.tmp-b7:1' failed: Read-only file system [ 387.862056][T14599] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 387.882714][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1139.tmp-b7:9' failed: Read-only file system [ 387.898913][T14599] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 387.969189][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3078'. [ 388.054584][T14629] netlink: 'syz.1.3083': attribute type 13 has an invalid length. [ 388.068689][T14628] loop8: detected capacity change from 0 to 512 [ 388.550960][T14639] loop9: detected capacity change from 0 to 1024 [ 388.559876][T14639] EXT4-fs: Ignoring removed mblk_io_submit option [ 388.569852][T14639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 388.583282][T14639] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 388.598209][T14639] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #11: comm syz.9.3089: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 1537, max 0(0), depth 32512(32512) [ 388.624434][T14639] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 388.624585][T14639] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3089: couldn't read orphan inode 11 (err -117) [ 388.634479][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 388.634508][ C1] EXT4-fs (loop9): initial error at time 1786083835: ext4_ext_check_inode:521: inode 11 [ 388.634544][ C1] EXT4-fs (loop9): last error at time 1786083835: ext4_ext_check_inode:521: inode 11 [ 388.671303][T14643] loop8: detected capacity change from 0 to 1024 [ 388.676077][T14639] loop9: lost filesystem error report for type 5 error -117 [ 388.694124][T14639] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.776985][T14643] EXT4-fs: Ignoring removed orlov option [ 388.794651][T14629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.831090][T14643] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.927582][ T9968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.972824][T14648] xt_connbytes: Forcing CT accounting to be enabled [ 388.975459][T14649] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3092'. [ 388.990343][ T9028] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.000295][T14648] loop9: detected capacity change from 0 to 1764 [ 389.000640][T14648] iso9660: Unknown parameter '00000000000000000000004' [ 389.027767][T14650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3092'. [ 389.058329][T14650] x_tables: duplicate underflow at hook 3 [ 389.097479][T14656] ext4: Unknown parameter 'nouser_xattr' [ 389.108482][T14649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.175138][T14665] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3094'. [ 389.188261][T14649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.200258][T14663] EXT4-fs: Ignoring removed bh option [ 389.209811][T14663] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 389.228993][T14649] bond0 (unregistering): Released all slaves [ 389.229224][T14665] EXT4-fs: test_dummy_encryption option not supported [ 389.468513][T14676] syzkaller0: entered promiscuous mode [ 389.492253][T14676] syzkaller0: entered allmulticast mode [ 389.507555][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3101'. [ 389.569696][T14685] set_capacity_and_notify: 3 callbacks suppressed [ 389.569711][T14685] loop8: detected capacity change from 0 to 1024 [ 389.585376][T14685] EXT4-fs: Ignoring removed orlov option [ 389.670668][T14676] loop1: detected capacity change from 0 to 164 [ 389.685618][T14676] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 389.693900][T14685] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.710743][T14674] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 389.721422][T14674] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 389.732450][T14674] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 389.827407][T13788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.848839][ T9028] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.925433][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 389.925453][ T28] audit: type=1400 audit(1786083836.740:3513): avc: denied { name_connect } for pid=14691 comm="syz.8.3105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 390.167061][ T28] audit: type=1400 audit(1786083836.991:3514): avc: denied { write } for pid=14701 comm="syz.1.3106" name="instances" dev="tracefs" ino=2276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 390.193051][ T28] audit: type=1400 audit(1786083836.991:3515): avc: denied { add_name } for pid=14701 comm="syz.1.3106" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 390.215535][ T28] audit: type=1400 audit(1786083836.991:3516): avc: denied { create } for pid=14701 comm="syz.1.3106" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 390.686943][T14715] netlink: 'syz.3.3109': attribute type 29 has an invalid length. [ 390.928678][T14726] loop0: detected capacity change from 0 to 2048 [ 390.938369][T14726] msdos: Bad value for 'umask' [ 391.088551][T14734] xt_CT: No such helper "netbios-ns" [ 391.183954][ T28] audit: type=1400 audit(1786083838.001:3517): avc: denied { bind } for pid=14741 comm="syz.3.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 391.208321][ T817] IPVS: starting estimator thread 0... [ 391.270851][ T28] audit: type=1400 audit(1786083838.081:3518): avc: denied { write } for pid=14740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.316539][T14747] IPVS: using max 2448 ests per chain, 122400 per kthread [ 391.348465][ T28] audit: type=1400 audit(1786083838.161:3519): avc: denied { write } for pid=14757 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.430104][ T28] audit: type=1400 audit(1786083838.251:3520): avc: denied { wake_alarm } for pid=14755 comm="syz.3.3118" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 391.458021][T14762] loop0: detected capacity change from 0 to 1024 [ 391.481208][T14762] EXT4-fs: Ignoring removed orlov option [ 391.541400][T14762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.623054][T14778] loop8: detected capacity change from 0 to 128 [ 391.635411][ T28] audit: type=1400 audit(1786083838.441:3521): avc: denied { write } for pid=14761 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.642905][T14778] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 391.694158][ T28] audit: type=1400 audit(1786083838.511:3522): avc: denied { write } for pid=14785 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.787446][T13788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.796173][T14789] __nla_validate_parse: 4 callbacks suppressed [ 391.796246][T14789] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3116'. [ 391.837678][T14791] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3123'. [ 391.840770][T14793] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3124'. [ 391.869337][T14793] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.3124'. [ 391.882148][T14793] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3124'. [ 391.892730][T14793] tc_dump_action: action bad kind [ 392.129646][T14802] xt_CT: No such helper "netbios-ns" [ 392.301727][T14812] loop9: detected capacity change from 0 to 512 [ 392.312473][T14812] ext4: Unknown parameter 'subj_type' [ 392.413697][ T5721] udevd[5721]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 392.438916][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1173.tmp-b7:9' failed: Read-only file system [ 392.463582][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1173.tmp-b7:9' failed: Read-only file system [ 392.489694][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1174.tmp-b7:9' failed: Read-only file system [ 392.528936][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1174.tmp-b7:9' failed: Read-only file system [ 392.617503][T14814] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.629084][T14814] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.707530][T14814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.735721][T14817] tracefs: Unknown parameter '' [ 392.738820][ T5721] udevd[5721]: symlink '../../loop3' '/dev/disk/by-diskseq/1142.tmp-b7:3' failed: Read-only file system [ 392.763353][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1174.tmp-b7:9' failed: Read-only file system [ 392.953895][ T5721] udevd[5721]: symlink '../../loop8' '/dev/disk/by-diskseq/1171.tmp-b7:8' failed: Read-only file system [ 393.141296][ T5721] udevd[5721]: symlink '../../loop8' '/dev/disk/by-diskseq/1171.tmp-b7:8' failed: Read-only file system [ 393.177075][ T5721] udevd[5721]: symlink '../../loop3' '/dev/disk/by-diskseq/1142.tmp-b7:3' failed: Read-only file system [ 393.233978][T14847] xt_CT: No such helper "netbios-ns" [ 393.273541][T14841] loop8: detected capacity change from 0 to 1164 [ 393.286018][T14841] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 395.453070][T14864] loop1: detected capacity change from 0 to 512 [ 395.725477][T14864] ext4: Unknown parameter 'subj_type' [ 395.905904][T14867] loop9: detected capacity change from 0 to 1024 [ 395.918202][T14867] EXT4-fs: Ignoring removed orlov option [ 395.930978][T14863] loop1: detected capacity change from 0 to 512 [ 396.030448][T14872] ip_tables: iptables: counters copy to user failed while replacing table [ 396.070888][T14867] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.108193][T14874] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3144'. [ 396.164484][ T9968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.333400][T14874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.421389][T14874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.588651][T14874] bond0 (unregistering): Released all slaves [ 396.633010][T12063] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 396.642558][T12063] bond1: now running without any active interface! [ 396.744283][T14880] loop1: detected capacity change from 0 to 512 [ 396.756023][T14880] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 396.779994][T14880] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 396.811861][T14880] EXT4-fs (loop1): 1 truncate cleaned up [ 396.827002][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 396.827026][ C1] EXT4-fs (loop1): initial error at time 1786083843: ext4_mb_generate_buddy:1317 [ 396.827060][ C1] EXT4-fs (loop1): last error at time 1786083843: ext4_mb_generate_buddy:1317 [ 396.871149][T14880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.893807][T14880] EXT4-fs error (device loop1) in ext4_setattr:6172: error 28 [ 396.925216][T14880] lo speed is unknown, defaulting to 1000 [ 396.954752][ T28] kauditd_printk_skb: 453 callbacks suppressed [ 396.954771][ T28] audit: type=1400 audit(1786083843.664:3976): avc: denied { connect } for pid=14878 comm="syz.1.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 396.997304][ T28] audit: type=1400 audit(1786083843.664:3977): avc: denied { write } for pid=14878 comm="syz.1.3146" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.056005][ T28] audit: type=1400 audit(1786083843.664:3978): avc: denied { remove_name } for pid=14878 comm="syz.1.3146" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.249465][T14887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3148'. [ 397.261254][T14888] xt_CT: No such helper "netbios-ns" [ 397.327537][T14898] netlink: 'syz.3.3150': attribute type 5 has an invalid length. [ 397.351974][T14898] loop3: detected capacity change from 0 to 512 [ 397.365360][T14898] EXT4-fs: Ignoring removed mblk_io_submit option [ 397.396261][T14898] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.3150: corrupted inode contents [ 397.419153][T14898] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 397.419353][T14900] loop9: detected capacity change from 0 to 128 [ 397.421540][T14898] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 397.437755][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 397.437779][ C1] EXT4-fs (loop3): initial error at time 1786083844: ext4_do_update_inode:5742: inode 15 [ 397.437813][ C1] EXT4-fs (loop3): last error at time 1786083844: ext4_do_update_inode:5742: inode 15 [ 397.450649][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1185.tmp-b7:9' failed: Read-only file system [ 397.473824][T14898] loop3: lost filesystem error report for type 5 error -117 [ 397.533334][T14898] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.3150: corrupted inode contents [ 397.571083][T14898] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 397.571275][T14898] EXT4-fs error (device loop3): ext4_evict_inode:315: inode #15: comm syz.3.3150: mark_inode_dirty error [ 397.600553][T14898] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 397.600774][T14898] EXT4-fs (loop3): 1 orphan inode deleted [ 397.627445][T14898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.653548][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1185.tmp-b7:9' failed: Read-only file system [ 397.696826][T12212] udevd[12212]: symlink '../../loop8' '/dev/disk/by-diskseq/1176.tmp-b7:8' failed: Read-only file system [ 397.720058][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1185.tmp-b7:9' failed: Read-only file system [ 397.755824][ T28] audit: type=1400 audit(1786083844.564:3979): avc: denied { write } for pid=14896 comm="syz.3.3150" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.797443][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1186.tmp-b7:9' failed: Read-only file system [ 397.831906][T11932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.875100][ T5721] udevd[5721]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 397.893506][ T5721] udevd[5721]: symlink '../../loop3' '/dev/disk/by-diskseq/1184.tmp-b7:3' failed: Read-only file system [ 397.919282][ T5721] udevd[5721]: symlink '../../loop3' '/dev/disk/by-diskseq/1184.tmp-b7:3' failed: Read-only file system [ 397.925467][T12212] udevd[12212]: symlink '../../loop9' '/dev/disk/by-diskseq/1186.tmp-b7:9' failed: Read-only file system [ 397.937196][ T5721] udevd[5721]: symlink '../../loop3' '/dev/disk/by-diskseq/1187.tmp-b7:3' failed: Read-only file system [ 398.042225][T14916] loop3: detected capacity change from 0 to 128 [ 398.091007][ T28] audit: type=1400 audit(1786083844.864:3980): avc: denied { getopt } for pid=14915 comm="syz.3.3156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 398.122048][T14913] loop9: detected capacity change from 0 to 1024 [ 398.129237][T14913] EXT4-fs: Ignoring removed orlov option [ 398.167414][T14913] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.273669][ T9968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.354969][ T28] audit: type=1400 audit(1786083845.165:3981): avc: denied { ioctl } for pid=14920 comm="syz.0.3158" path="socket:[41940]" dev="sockfs" ino=41940 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 398.383888][T14924] loop3: detected capacity change from 0 to 512 [ 398.420466][T14924] ext4: Unknown parameter 'subj_type' [ 398.528585][T14929] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3153'. [ 398.618712][T12428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.631235][T14933] loop3: detected capacity change from 0 to 512 [ 398.673667][T14935] xt_CT: No such helper "netbios-ns" [ 398.815514][T14940] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3159'. [ 399.058266][T14945] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3163'. [ 399.166912][T14947] netlink: 'syz.8.3164': attribute type 16 has an invalid length. [ 399.214376][T14947] netlink: 'syz.8.3164': attribute type 17 has an invalid length. [ 399.252333][T14945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.316948][T14945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.354004][T14945] bond0 (unregistering): Released all slaves [ 399.553094][T14947] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 399.607123][T14962] EXT4-fs: Ignoring removed orlov option [ 399.764058][T14968] xt_CT: No such helper "netbios-ns" [ 399.921331][T14962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.924133][T14977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.076349][T12428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.088496][T14984] ext4: Unknown parameter 'subj_type' [ 400.095994][T13788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.184243][T14985] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3173'. [ 400.196547][T14987] netlink: 'syz.1.3185': attribute type 1 has an invalid length. [ 400.237651][T14987] bond0: entered promiscuous mode [ 400.269926][T14987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.291520][T14990] EXT4-fs (loop0): 1 orphan inode deleted [ 400.300445][T14990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.336998][T14990] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.358685][T12054] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 400.375269][T12054] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:13: Failed to release dquot type 1 [ 400.472755][T14987] bond0: (slave veth3): making interface the new active one [ 400.504937][ T28] audit: type=1400 audit(1786083847.326:3982): avc: denied { append } for pid=14999 comm="syz.8.3180" name="pfkey" dev="proc" ino=4026533648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 400.561948][T14987] veth3: entered promiscuous mode [ 400.580571][T14987] bond0: (slave veth3): Enslaving as an active interface with an up link [ 400.751703][T13788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.114393][T15020] set_capacity_and_notify: 6 callbacks suppressed [ 401.114412][T15020] loop1: detected capacity change from 0 to 2048 [ 401.259414][T15026] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3182'. [ 401.294696][T15028] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3181'. [ 401.365614][T15020] loop1: p1 p2 p3 p4 [ 401.390400][T15020] loop1: p1 start 917504 is beyond EOD, truncated [ 401.398947][T15032] loop3: detected capacity change from 0 to 1024 [ 401.426274][T15032] EXT4-fs: Ignoring removed orlov option [ 401.434286][T15033] usb usb8: usbfs: process 15033 (syz.8.3188) did not claim interface 0 before use [ 401.452821][T15020] loop1: p3 size 134217728 extends beyond EOD, truncated [ 401.502854][T15032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.520116][T15020] loop1: p4 size 4278190080 extends beyond EOD, truncated [ 401.685435][T11932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.876383][T15039] Cannot find set identified by id 0 to match [ 401.899472][T15041] loop1: detected capacity change from 0 to 512 [ 401.907665][T15041] ext4: Unknown parameter 'subj_type' [ 401.928206][T15041] loop1: detected capacity change from 0 to 512 [ 401.976474][T15045] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 401.980603][ T28] audit: type=1400 audit(1786083848.756:3983): avc: denied { read } for pid=15044 comm="syz.0.3193" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 402.039369][ T28] audit: type=1400 audit(1786083848.756:3984): avc: denied { open } for pid=15044 comm="syz.0.3193" path="/45/dev/mapper/control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 402.072292][ T28] audit: type=1400 audit(1786083848.756:3985): avc: denied { ioctl } for pid=15044 comm="syz.0.3193" path="/45/dev/mapper/control" dev="devtmpfs" ino=248 ioctlcmd=0xfd05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 402.184226][T15053] loop3: detected capacity change from 0 to 512 [ 402.223883][T15054] loop8: detected capacity change from 0 to 1024 [ 402.242659][T15053] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 402.265248][T15053] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 402.277696][T15054] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.315675][ T28] audit: type=1400 audit(1786083849.137:3986): avc: denied { create } for pid=15062 comm="syz.0.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 402.342209][T15053] System zones: 0-1, 15-15, 18-18, 34-34 [ 402.353026][T15053] EXT4-fs (loop3): orphan cleanup on readonly fs [ 402.373481][T15053] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 402.397724][ T28] audit: type=1400 audit(1786083849.177:3987): avc: denied { write } for pid=15047 comm="syz.8.3196" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 402.420668][T15053] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 402.462847][T15065] loop0: detected capacity change from 0 to 512 [ 402.471840][T15053] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 402.502130][ T5721] udevd[5721]: symlink '../../loop0' '/dev/disk/by-diskseq/1219.tmp-b7:0' failed: Read-only file system [ 402.511765][T15053] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.3197: bad orphan inode 16 [ 402.531326][T15053] loop3: lost filesystem error report for type 5 error -117 [ 402.532954][T15053] ext4_test_bit(bit=15, block=18) = 1 [ 402.550010][ T5721] udevd[5721]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 402.551103][T15053] is_bad_inode(inode)=0 [ 402.551117][T15053] NEXT_ORPHAN(inode)=0 [ 402.551126][T15053] max_ino=32 [ 402.551134][T15053] i_nlink=2 [ 402.568886][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 402.568911][ C0] EXT4-fs (loop3): initial error at time 1786083849: ext4_orphan_get:1425 [ 402.568944][ C0] EXT4-fs (loop3): last error at time 1786083849: ext4_orphan_get:1425 [ 402.624781][ T5721] udevd[5721]: symlink '../../loop0' '/dev/disk/by-diskseq/1219.tmp-b7:0' failed: Read-only file system [ 402.639491][T15054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.643009][T12212] udevd[12212]: symlink '../../loop9' '/dev/disk/by-diskseq/1207.tmp-b7:9' failed: Read-only file system [ 402.653227][ T5721] udevd[5721]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 402.693636][T15053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 402.696824][ T28] audit: type=1400 audit(1786083849.457:3988): avc: denied { ioctl } for pid=15047 comm="syz.8.3196" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 402.712768][ T3422] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:6: bg 3: bad block bitmap checksum [ 402.712837][ T3422] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 3397 with max blocks 108 with error 74 [ 402.712865][ T3422] EXT4-fs (sda1): This should not happen!! Data will be lost [ 402.712865][ T3422] [ 402.732159][T15054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.770251][T15065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.780903][T15049] rdma_rxe: rxe_newlink: failed to add lo [ 402.840514][T15066] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3194'. [ 402.858626][T15071] loop9: detected capacity change from 0 to 1024 [ 402.860022][T15053] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 402.867061][T15071] EXT4-fs: Ignoring removed orlov option [ 402.894852][T15053] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 402.975500][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1220.tmp-b7:9' failed: Read-only file system [ 403.004295][T15072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3197'. [ 403.024615][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 403.286679][T15071] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.310496][T13788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.340418][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 403.342491][ T28] audit: type=1400 audit(1786083850.167:3989): avc: denied { setopt } for pid=15079 comm="syz.0.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 403.362256][ T5721] udevd[5721]: symlink '../../loop0' '/dev/disk/by-diskseq/1219.tmp-b7:0' failed: Read-only file system [ 403.406842][ T5721] udevd[5721]: symlink '../../loop0' '/dev/disk/by-diskseq/1219.tmp-b7:0' failed: Read-only file system [ 403.474527][T15086] loop0: detected capacity change from 0 to 512 [ 403.482657][ T9968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.482933][T15086] ext4: Unknown parameter 'smackfsroot' [ 403.564767][T15090] loop9: detected capacity change from 0 to 512 [ 403.585551][T15090] ext4: Unknown parameter 'subj_type' [ 403.640807][T15092] gtp0: entered promiscuous mode [ 403.645910][T15092] gtp0: entered allmulticast mode [ 403.701703][T15098] xt_CT: No such helper "netbios-ns" [ 403.716145][T15094] ip_tables: iptables: counters copy to user failed while replacing table [ 403.864363][T15108] EXT4-fs: Ignoring removed orlov option [ 403.889314][ T28] audit: type=1326 audit(1786083850.687:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.1.3213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096158e0d9 code=0x7ffc0000 [ 403.933502][ T28] audit: type=1326 audit(1786083850.687:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.1.3213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096158e0d9 code=0x7ffc0000 [ 404.014690][T15108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.175297][T11932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.182250][T15115] hsr_slave_0: left promiscuous mode [ 404.191053][T13788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.231682][T15115] hsr_slave_1: left promiscuous mode [ 404.311022][ T9028] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.353368][T15133] xt_CT: No such helper "netbios-ns" [ 404.787456][T15143] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3227'. [ 404.958766][T15156] FAT-fs (loop3): bogus number of FAT sectors [ 404.968763][T15156] FAT-fs (loop3): Can't find a valid FAT filesystem [ 405.129681][T15158] netlink: 'syz.3.3233': attribute type 16 has an invalid length. [ 405.144032][T15158] netlink: 'syz.3.3233': attribute type 17 has an invalid length. [ 405.155964][T15158] netlink: 'syz.3.3233': attribute type 27 has an invalid length. [ 405.485845][T15171] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3237'. [ 405.523380][T15173] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3238: iget: bad extended attribute block 134217728 [ 405.541472][T15173] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.542492][T15173] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3238: couldn't read orphan inode 15 (err -117) [ 405.575041][T15173] loop1: lost filesystem error report for type 5 error -117 [ 405.575604][T15173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.579699][T15175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.659993][T12428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.690717][T15179] EXT4-fs (loop0): shut down requested (1) [ 405.720866][T15183] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3241'. [ 405.737232][T15183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3241'. [ 405.779358][T15183] x_tables: duplicate underflow at hook 3 [ 405.939864][T15187] rdma_rxe: rxe_newlink: failed to add lo [ 406.156701][T15198] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3246'. [ 406.166604][T15198] netlink: 30 bytes leftover after parsing attributes in process `syz.8.3246'. [ 406.177727][T15198] netlink: 30 bytes leftover after parsing attributes in process `syz.8.3246'. [ 406.402296][T13788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.426734][T15204] ip_tables: iptables: counters copy to user failed while replacing table [ 406.448868][T15208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3249'. [ 406.961793][T15217] xt_CT: No such helper "netbios-ns" [ 407.157326][T15220] netlink: 'syz.8.3254': attribute type 16 has an invalid length. [ 407.166159][T15220] netlink: 'syz.8.3254': attribute type 17 has an invalid length. [ 407.174782][T15220] netlink: 'syz.8.3254': attribute type 27 has an invalid length. [ 407.471552][T15237] set_capacity_and_notify: 4 callbacks suppressed [ 407.471572][T15237] loop0: detected capacity change from 0 to 512 [ 407.506413][T15237] EXT4-fs: Ignoring removed orlov option [ 407.528034][T12212] udevd[12212]: symlink '../../loop9' '/dev/disk/by-diskseq/1226.tmp-b7:9' failed: Read-only file system [ 407.534168][T15237] EXT4-fs: Ignoring removed mblk_io_submit option [ 407.557882][ T5721] udevd[5721]: symlink '../../loop0' '/dev/disk/by-diskseq/1237.tmp-b7:0' failed: Read-only file system [ 407.572952][ T5721] udevd[5721]: symlink '../../loop0' '/dev/disk/by-label/\x86\x5b.tmp-b7:0' failed: Read-only file system [ 407.606916][T15239] loop9: detected capacity change from 0 to 1024 [ 407.615431][T15239] EXT4-fs: Ignoring removed orlov option [ 407.623169][T15237] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.3258: corrupted in-inode xattr: e_value size too large [ 407.640431][T15237] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 407.640858][T15237] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3258: couldn't read orphan inode 15 (err -117) [ 407.646885][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1238.tmp-b7:9' failed: Read-only file system [ 407.652061][T15237] loop0: lost filesystem error report for type 5 error -117 [ 407.684503][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 407.698001][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 407.721277][ C0] EXT4-fs (loop0): initial error at time 1786083854: ext4_iget_extra_inode:5180: inode 15 [ 407.723480][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1238.tmp-b7:9' failed: Read-only file system [ 407.733220][ C0] EXT4-fs (loop0): last error at time 1786083854: ext4_orphan_get:1404 [ 407.764689][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 407.766537][T15237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.815915][ T3425] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1015 with max blocks 5 with error 117 [ 407.831968][ T3425] EXT4-fs (sda1): This should not happen!! Data will be lost [ 407.831968][ T3425] [ 407.878022][ T28] kauditd_printk_skb: 211 callbacks suppressed [ 407.878101][ T28] audit: type=1400 audit(1786083854.709:4203): avc: denied { write } for pid=15230 comm="syz.0.3258" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 407.928606][T15237] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.3258: corrupted in-inode xattr: e_value size too large [ 407.991533][ T5721] udevd[5721]: symlink '../../loop8' '/dev/disk/by-diskseq/1230.tmp-b7:8' failed: Read-only file system [ 408.008317][ T3425] EXT4-fs (sda1): Delayed block allocation failed for inode 2037 at logical offset 1015 with max blocks 5 with error 117 [ 408.015469][ T28] audit: type=1400 audit(1786083854.709:4204): avc: denied { write } for pid=15230 comm="syz.0.3258" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.025017][ T3425] EXT4-fs (sda1): This should not happen!! Data will be lost [ 408.025017][ T3425] [ 408.062861][ T28] audit: type=1400 audit(1786083854.709:4205): avc: denied { link } for pid=15230 comm="syz.0.3258" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 408.115319][T15243] loop8: detected capacity change from 0 to 512 [ 408.116848][ T28] audit: type=1400 audit(1786083854.759:4206): avc: denied { write } for pid=15230 comm="syz.0.3258" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.156260][ T5721] udevd[5721]: symlink '../../loop8' '/dev/disk/by-diskseq/1239.tmp-b7:8' failed: Read-only file system [ 408.183675][ T5721] udevd[5721]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 408.229350][T15243] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 408.238168][T15243] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 408.246395][T15243] System zones: 0-1, 15-15, 18-18, 34-34 [ 408.253026][T15243] EXT4-fs (loop8): orphan cleanup on readonly fs [ 408.260756][T15243] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 408.273244][T15243] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 408.289756][T15239] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.290361][T13788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.313628][T15243] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 408.330530][T15243] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.3262: bad orphan inode 16 [ 408.346945][T15243] loop8: lost filesystem error report for type 5 error -117 [ 408.350284][T15243] ext4_test_bit(bit=15, block=18) = 1 [ 408.369538][T15243] is_bad_inode(inode)=0 [ 408.375123][T15243] NEXT_ORPHAN(inode)=0 [ 408.380104][T15243] max_ino=32 [ 408.384330][T15251] xt_CT: No such helper "netbios-ns" [ 408.385822][T15243] i_nlink=2 [ 408.386352][T15243] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 408.545332][T15243] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 408.556566][T15243] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 408.567137][ T9968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.644480][T15257] __nla_validate_parse: 2 callbacks suppressed [ 408.644498][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3262'. [ 408.683919][T15263] loop9: detected capacity change from 0 to 512 [ 408.705268][T15263] ext4: Unknown parameter 'subj_type' [ 408.984550][T15271] tipc: Started in network mode [ 408.989715][T15271] tipc: Node identity 76c1e894a8cb, cluster identity 4711 [ 408.998139][T15271] tipc: Enabled bearer , priority 10 [ 409.052593][T15275] veth0_macvtap: Caught tx_queue_len zero misconfig [ 409.180063][T15280] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3274'. [ 409.218943][T15280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3274'. [ 409.271648][T15282] x_tables: duplicate underflow at hook 3 [ 409.370250][T15285] Cannot find set identified by id 0 to match [ 409.724890][T15291] loop3: detected capacity change from 0 to 512 [ 409.745075][T15291] ext4: Unknown parameter 'subj_type' [ 409.844072][T15291] loop3: detected capacity change from 0 to 512 [ 410.066240][ T817] tipc: Node number set to 3725256852 [ 410.071920][ T9028] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.099330][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3281'. [ 410.113697][T15302] vlan3: entered promiscuous mode [ 410.175703][T15304] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3283'. [ 410.470925][T15317] loop3: detected capacity change from 0 to 512 [ 410.500222][T15317] ext4: Unknown parameter 'subj_type' [ 410.656078][T15319] loop3: detected capacity change from 0 to 512 [ 410.856902][T15321] loop8: detected capacity change from 0 to 512 [ 410.883374][T15321] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 410.900444][T15323] ip_tables: iptables: counters copy to user failed while replacing table [ 410.908693][T15321] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 410.925761][T15321] System zones: 0-1, 15-15, 18-18, 34-34 [ 410.937132][T15321] EXT4-fs (loop8): orphan cleanup on readonly fs [ 410.947622][T15321] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 410.947716][T15321] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 410.947744][T15321] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 410.948056][T15321] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.3287: bad orphan inode 16 [ 411.006846][T15321] loop8: lost filesystem error report for type 5 error -117 [ 411.013079][T15321] ext4_test_bit(bit=15, block=18) = 1 [ 411.021514][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 411.021544][ C1] EXT4-fs (loop8): initial error at time 1786083857: ext4_orphan_get:1425 [ 411.021569][ C1] EXT4-fs (loop8): last error at time 1786083857: ext4_orphan_get:1425 [ 411.034846][T15329] loop1: detected capacity change from 0 to 512 [ 411.036961][T15321] is_bad_inode(inode)=0 [ 411.036973][T15321] NEXT_ORPHAN(inode)=0 [ 411.036981][T15321] max_ino=32 [ 411.037062][T15321] i_nlink=2 [ 411.037503][T15321] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 411.111228][T15321] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 411.121883][T15329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.135221][T15321] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 411.150149][ T28] audit: type=1400 audit(1786083857.981:4207): avc: denied { write } for pid=15328 comm="syz.1.3289" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 411.304105][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3287'. [ 411.348528][T12428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.677256][T15348] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3290'. [ 411.689631][T15354] xt_CT: No such helper "netbios-ns" [ 411.775954][T15341] EXT4-fs: Ignoring removed orlov option [ 411.861584][T15365] Cannot find set identified by id 0 to match [ 411.949186][T15341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.176605][T11932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.193147][ T28] audit: type=1326 audit(1786083859.022:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15370 comm="syz.0.3301" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10dac2e0d9 code=0x0 [ 412.256667][ T9028] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.269943][ T28] audit: type=1400 audit(1786083859.102:4209): avc: denied { getopt } for pid=15375 comm="syz.3.3302" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 412.351835][T15376] EXT4-fs: Ignoring removed nobh option [ 412.382715][T15376] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 412.408228][T15376] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3302: invalid indirect mapped block 256 (level 1) [ 412.433229][T15376] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 412.434657][T15384] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3303'. [ 412.441281][T15376] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3302: invalid indirect mapped block 2683928664 (level 1) [ 412.448205][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 412.448787][ C1] EXT4-fs (loop3): initial error at time 1786083859: ext4_free_branches:1023: inode 13 [ 412.449147][ C1] EXT4-fs (loop3): last error at time 1786083859: ext4_free_branches:1023: inode 13 [ 412.472025][T15384] e1000e 0000:00:00.0: probe with driver e1000e failed with error -5 [ 412.493810][T15376] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 412.547015][T15379] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2570 sclass=netlink_tcpdiag_socket pid=15379 comm=syz.0.3301 [ 412.594248][T15376] EXT4-fs (loop3): 1 truncate cleaned up [ 412.603384][T15376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.756637][T11932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.776610][ T5721] udevd[5721]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 412.799422][ T5721] udevd[5721]: symlink '../../loop3' '/dev/disk/by-diskseq/1259.tmp-b7:3' failed: Read-only file system [ 412.824740][ T5721] udevd[5721]: symlink '../../loop3' '/dev/disk/by-diskseq/1259.tmp-b7:3' failed: Read-only file system [ 412.851179][ T5721] udevd[5721]: symlink '../../loop3' '/dev/disk/by-diskseq/1260.tmp-b7:3' failed: Read-only file system [ 412.949519][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1243.tmp-b7:9' failed: Read-only file system [ 412.961685][T15400] xt_CT: No such helper "netbios-ns" [ 412.994983][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1243.tmp-b7:9' failed: Read-only file system [ 413.143287][ T5721] udevd[5721]: symlink '../../loop8' '/dev/disk/by-diskseq/1258.tmp-b7:8' failed: Read-only file system [ 413.173841][T15407] ip_tables: iptables: counters copy to user failed while replacing table [ 413.327090][ T5721] udevd[5721]: symlink '../../loop1' '/dev/disk/by-diskseq/1255.tmp-b7:1' failed: Read-only file system [ 413.401047][T15412] set_capacity_and_notify: 2 callbacks suppressed [ 413.401069][T15412] loop1: detected capacity change from 0 to 8192 [ 413.476013][ T5721] udevd[5721]: symlink '../../loop1' '/dev/disk/by-diskseq/1261.tmp-b7:1' failed: Read-only file system [ 413.591287][T12212] udevd[12212]: symlink '../../loop8' '/dev/disk/by-diskseq/1258.tmp-b7:8' failed: Read-only file system [ 413.610021][ T28] audit: type=1400 audit(1786083860.322:4210): avc: denied { map } for pid=15411 comm="syz.1.3313" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 413.808181][T15421] netlink: 116 bytes leftover after parsing attributes in process `syz.8.3317'. [ 414.180229][T15430] xt_CT: No such helper "netbios-ns" [ 414.260520][T15433] loop0: detected capacity change from 0 to 512 [ 414.269542][T15435] netlink: 'syz.9.3322': attribute type 1 has an invalid length. [ 414.298764][T15433] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 414.313135][T15433] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 414.325026][T15433] System zones: 0-1, 15-15, 18-18, 34-34 [ 414.334506][T15433] EXT4-fs (loop0): orphan cleanup on readonly fs [ 414.343627][T15433] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 414.346818][T15439] loop1: detected capacity change from 0 to 128 [ 414.368563][T15433] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 414.393011][T15433] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 414.402870][T15433] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.3320: bad orphan inode 16 [ 414.420204][T15433] loop0: lost filesystem error report for type 5 error -117 [ 414.427559][T15433] ext4_test_bit(bit=15, block=18) = 1 [ 414.447283][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 414.447305][ C0] EXT4-fs (loop0): initial error at time 1786083861: ext4_orphan_get:1425 [ 414.447332][ C0] EXT4-fs (loop0): last error at time 1786083861: ext4_orphan_get:1425 [ 414.482756][T15433] is_bad_inode(inode)=0 [ 414.490535][T15433] NEXT_ORPHAN(inode)=0 [ 414.497615][T15433] max_ino=32 [ 414.502356][T15433] i_nlink=2 [ 414.510497][T15433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 414.592446][T15433] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 414.601181][T15433] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 414.693625][T15457] xt_TPROXY: Can be used only with -p tcp or -p udp [ 414.848645][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3320'. [ 414.910709][T15467] xt_CT: No such helper "netbios-ns" [ 415.016005][ T28] audit: type=1400 audit(1786083861.813:4211): avc: denied { map } for pid=15474 comm="syz.8.3333" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 415.070555][T15480] sit0: entered promiscuous mode [ 415.077610][T15480] sit0: entered allmulticast mode [ 415.138692][T15479] xt_ecn: cannot match TCP bits for non-tcp packets [ 415.160595][T15479] netlink: 'syz.9.3329': attribute type 10 has an invalid length. [ 415.174016][T15479] netlink: 'syz.9.3329': attribute type 10 has an invalid length. [ 415.198970][T15488] loop8: detected capacity change from 0 to 1024 [ 415.316444][T15488] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 415.344893][T15488] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.399581][T15488] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3337: bg 0: block 112: padding at end of block bitmap is not set [ 415.712467][T15498] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3339'. [ 415.725759][T15498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3339'. [ 415.776608][T15500] x_tables: duplicate underflow at hook 3 [ 416.054599][ T9028] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 416.089515][T15504] xt_CT: No such helper "netbios-ns" [ 416.125233][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3342'. [ 416.161986][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3342'. [ 416.222507][T15518] loop9: detected capacity change from 0 to 1024 [ 416.230541][T15518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 416.274441][T15518] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.341974][ T28] audit: type=1400 audit(1786083863.164:4212): avc: denied { ioctl } for pid=15523 comm="syz.8.3348" path="socket:[43954]" dev="sockfs" ino=43954 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 416.362909][T15524] Unsupported ieee802154 address type: 0 [ 416.386118][ T28] audit: type=1400 audit(1786083863.214:4213): avc: denied { write } for pid=15517 comm="syz.9.3347" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.436789][ T28] audit: type=1400 audit(1786083863.264:4214): avc: denied { execute_no_trans } for pid=15517 comm="syz.9.3347" path="/305/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 416.488090][T15531] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3350'. [ 416.535143][ T9968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.539565][T15532] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3350'. [ 416.587113][T15532] x_tables: duplicate underflow at hook 3 [ 416.604350][T13788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.615054][T15531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.629429][T15536] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.3351'. [ 416.713180][T15531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.754782][T15531] bond0 (unregistering): Released all slaves [ 416.833810][T15543] xt_CT: No such helper "netbios-ns" [ 416.873403][T15546] netlink: 'syz.8.3354': attribute type 21 has an invalid length. [ 416.883244][T15546] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3354'. [ 416.895413][T15546] netlink: 'syz.8.3354': attribute type 4 has an invalid length. [ 416.905512][T15546] netlink: 'syz.8.3354': attribute type 5 has an invalid length. [ 416.986852][ T28] audit: type=1400 audit(1786083863.814:4215): avc: denied { watch_reads } for pid=15556 comm="syz.0.3359" path="/79" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 417.553360][T15568] loop1: detected capacity change from 0 to 512 [ 417.573429][T15568] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 417.588844][T15568] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 417.607833][T15568] System zones: 0-1, 15-15, 18-18, 34-34 [ 417.615919][T15568] EXT4-fs (loop1): orphan cleanup on readonly fs [ 417.626512][T15568] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 417.641394][T15568] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 417.662516][T15568] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 417.673562][T15568] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.3362: bad orphan inode 16 [ 417.689680][T15568] loop1: lost filesystem error report for type 5 error -117 [ 417.689849][T15568] ext4_test_bit(bit=15, block=18) = 1 [ 417.702447][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 417.702472][ C1] EXT4-fs (loop1): initial error at time 1786083864: ext4_orphan_get:1425 [ 417.702498][ C1] EXT4-fs (loop1): last error at time 1786083864: ext4_orphan_get:1425 [ 417.744726][T15568] is_bad_inode(inode)=0 [ 417.749343][T15568] NEXT_ORPHAN(inode)=0 [ 417.753739][T15568] max_ino=32 [ 417.757506][T15568] i_nlink=2 [ 417.761487][T15568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 417.803600][T15568] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 417.819818][T15568] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 417.822633][ T5721] udevd[5721]: symlink '../../loop0' '/dev/disk/by-diskseq/1270.tmp-b7:0' failed: Read-only file system [ 418.053130][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1269.tmp-b7:9' failed: Read-only file system [ 418.069921][T15582] xt_CT: No such helper "netbios-ns" [ 418.073540][T12212] udevd[12212]: symlink '../../loop3' '/dev/disk/by-diskseq/1260.tmp-b7:3' failed: Read-only file system [ 418.092910][T15585] loop9: detected capacity change from 0 to 512 [ 418.106932][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1272.tmp-b7:9' failed: Read-only file system [ 418.127203][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1272.tmp-b7:9' failed: Read-only file system [ 418.146013][T12212] udevd[12212]: symlink '../../loop3' '/dev/disk/by-diskseq/1260.tmp-b7:3' failed: Read-only file system [ 418.163734][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1272.tmp-b7:9' failed: Read-only file system [ 418.181720][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1272.tmp-b7:9' failed: Read-only file system [ 418.200465][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1273.tmp-b7:9' failed: Read-only file system [ 418.216491][T15589] netlink: 'syz.3.3366': attribute type 16 has an invalid length. [ 418.240441][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1273.tmp-b7:9' failed: Read-only file system [ 418.335375][ T28] audit: type=1400 audit(1786083865.165:4216): avc: denied { write } for pid=15593 comm="syz.3.3368" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 418.500472][ T28] audit: type=1400 audit(1786083865.325:4217): avc: denied { relabelfrom } for pid=15600 comm="syz.3.3371" name="NETLINK" dev="sockfs" ino=44441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 418.558530][T15603] loop3: detected capacity change from 0 to 512 [ 418.568950][T15603] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 418.585318][T15603] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 418.595912][T15603] System zones: 1-12 [ 418.601154][T15603] EXT4-fs (loop3): orphan cleanup on readonly fs [ 418.610063][T15603] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.3372: attempt to clear invalid blocks 1024 len 1 [ 418.626682][T15603] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 418.627170][T15603] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3372: bg 0: block 361: padding at end of block bitmap is not set [ 418.638097][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 418.638121][ C1] EXT4-fs (loop3): initial error at time 1786083865: ext4_clear_blocks:876: inode 11 [ 418.638150][ C1] EXT4-fs (loop3): last error at time 1786083865: ext4_clear_blocks:876: inode 11 [ 418.698506][T15603] loop3: lost filesystem error report for type 5 error -117 [ 418.698767][T15603] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 418.723822][T15603] loop3: lost filesystem error report for type 5 error -117 [ 418.724177][T15603] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3372: invalid indirect mapped block 1811939328 (level 0) [ 418.755925][T15603] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 418.756184][T15603] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3372: invalid indirect mapped block 2 (level 2) [ 418.788483][T15603] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 418.789573][T15603] EXT4-fs (loop3): 1 truncate cleaned up [ 418.813421][T15603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 418.834981][ T28] audit: type=1400 audit(1786083865.665:4218): avc: denied { append } for pid=15602 comm="syz.3.3372" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 418.903280][T12428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.041725][T15613] xt_CT: No such helper "netbios-ns" [ 419.064003][T15603] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 5: comm syz.3.3372: lblock 0 mapped to illegal pblock 5 (length 1) [ 419.086342][T15603] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.3372: error -EUCLEAN reading directory block [ 419.124106][T15610] loop1: detected capacity change from 0 to 1024 [ 419.148999][T15618] netlink: 'syz.9.3378': attribute type 16 has an invalid length. [ 419.170228][T15610] EXT4-fs: Ignoring removed orlov option [ 419.205204][T15618] __nla_validate_parse: 5 callbacks suppressed [ 419.205338][T15618] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3378'. [ 419.238417][T15610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.270269][T11932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 419.326426][T15626] IPv6: NLM_F_CREATE should be specified when creating new route [ 419.336486][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3380'. [ 419.350760][ T28] audit: type=1400 audit(1786083866.145:4219): avc: denied { mount } for pid=15625 comm="syz.3.3380" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 419.432923][T15626] lo speed is unknown, defaulting to 1000 [ 419.527915][T12428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.580308][T15630] loop3: detected capacity change from 0 to 512 [ 419.590915][T15630] EXT4-fs (loop3): orphan cleanup on readonly fs [ 419.602447][T15630] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 419.613627][T15630] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 419.638199][T15633] loop0: detected capacity change from 0 to 512 [ 419.640925][T15630] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.3382: attempt to clear invalid blocks 2 len 1 [ 419.646350][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 419.660914][T15630] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 419.667882][ C0] EXT4-fs (loop3): initial error at time 1786083866: ext4_mb_generate_buddy:1317 [ 419.684797][T15630] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3382: invalid indirect mapped block 1819239214 (level 0) [ 419.691490][ C0] EXT4-fs (loop3): last error at time 1786083866: ext4_clear_blocks:876: inode 13 [ 419.719888][T15630] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 419.720658][T15630] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3382: invalid indirect mapped block 1819239214 (level 1) [ 419.753853][T15630] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 419.754341][T15630] EXT4-fs (loop3): 1 truncate cleaned up [ 419.773987][T15630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 419.799054][T15633] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 419.810539][T15633] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 419.832407][T15633] System zones: 0-1, 15-15, 18-18, 34-34 [ 419.842427][T15633] EXT4-fs (loop0): orphan cleanup on readonly fs [ 419.855746][T15633] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 419.898095][T15633] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 419.928603][T15633] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 419.936131][T15635] loop1: detected capacity change from 0 to 512 [ 419.938890][T15630] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 419.939680][T15633] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.3383: bad orphan inode 16 [ 419.950900][T15635] ext4: Unknown parameter 'subj_type' [ 419.969330][T15630] EXT4-fs error (device loop3): __ext4_remount:6844: comm syz.3.3382: Abort forced by user [ 420.015332][T15633] loop0: lost filesystem error report for type 5 error -117 [ 420.020823][T15633] ext4_test_bit(bit=15, block=18) = 1 [ 420.032593][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 420.032621][ C0] EXT4-fs (loop0): initial error at time 1786083866: ext4_orphan_get:1425 [ 420.032647][ C0] EXT4-fs (loop0): last error at time 1786083866: ext4_orphan_get:1425 [ 420.046859][T15630] EXT4-fs (loop3): Remounting filesystem read-only [ 420.053845][T15633] is_bad_inode(inode)=0 [ 420.088945][T15633] NEXT_ORPHAN(inode)=0 [ 420.095635][T15633] max_ino=32 [ 420.099113][T15633] i_nlink=2 [ 420.108033][T15641] loop1: detected capacity change from 0 to 512 [ 420.117496][T15630] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 420.136817][T15633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 420.189583][ T28] audit: type=1400 audit(1786083867.016:4220): avc: denied { create } for pid=15644 comm="syz.8.3387" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=smc_socket permissive=1 [ 420.218681][T15633] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 420.229363][T15633] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 420.243839][ T28] audit: type=1400 audit(1786083867.016:4221): avc: denied { ioctl } for pid=15644 comm="syz.8.3387" path="socket:[44522]" dev="sockfs" ino=44522 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=smc_socket permissive=1 [ 420.299228][T15652] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3389'. [ 420.308967][T15650] ip_tables: iptables: counters copy to user failed while replacing table [ 420.352990][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3389'. [ 420.365456][T15657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.404173][T15652] Cannot find del_set index 2 as target [ 420.417395][T11932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.492036][T15662] loop9: detected capacity change from 0 to 512 [ 420.527374][T15669] loop3: detected capacity change from 0 to 512 [ 420.553315][T15662] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 420.573503][T15662] System zones: 1-12 [ 420.582824][T15662] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.3392: error while reading EA inode 32 err=-116 [ 420.597531][T15662] loop9: lost filesystem error report for type 5 error -117 [ 420.597763][T15669] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 420.605603][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 420.605628][ C1] EXT4-fs (loop9): initial error at time 1786083867: ext4_xattr_inode_iget:446 [ 420.605655][ C1] EXT4-fs (loop9): last error at time 1786083867: ext4_xattr_inode_iget:446 [ 420.646631][T15669] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 420.646928][T15662] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.3392: error while reading EA inode 32 err=-116 [ 420.663150][T15669] EXT4-fs (loop3): orphan cleanup on readonly fs [ 420.682379][T15662] loop9: lost filesystem error report for type 5 error -117 [ 420.693430][T15669] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.3393: iget: bad i_size value: 12154761577498 [ 420.693459][T15662] EXT4-fs (loop9): 1 orphan inode deleted [ 420.710439][T15669] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 420.718524][T15662] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.759307][T15669] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3393: couldn't read orphan inode 13 (err -117) [ 420.773200][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 420.773223][ C0] EXT4-fs (loop3): initial error at time 1786083867: ext4_orphan_get:1399: inode 13 [ 420.773254][ C0] EXT4-fs (loop3): last error at time 1786083867: ext4_orphan_get:1399: inode 13 [ 420.819040][T15669] loop3: lost filesystem error report for type 5 error -117 [ 420.819599][T15669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 420.853550][T15669] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.3393: dx entry: limit 65535 != root limit 120 [ 420.867572][T15678] loop8: detected capacity change from 0 to 512 [ 420.872756][T15669] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3393: Corrupt directory, running e2fsck is recommended [ 420.886825][T15678] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 420.907948][T15678] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 420.919257][T15678] EXT4-fs (loop8): orphan cleanup on readonly fs [ 420.929399][T15678] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #13: comm syz.8.3396: iget: bad i_size value: 12154761577498 [ 420.949262][T15678] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 420.949512][T15678] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3396: couldn't read orphan inode 13 (err -117) [ 420.953089][T15682] loop1: detected capacity change from 0 to 512 [ 420.964852][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 420.998951][ C0] EXT4-fs (loop8): initial error at time 1786083867: ext4_orphan_get:1399: inode 13 [ 421.011195][ C0] EXT4-fs (loop8): last error at time 1786083867: ext4_orphan_get:1399: inode 13 [ 421.020713][T15682] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 421.024958][T15678] loop8: lost filesystem error report for type 5 error -117 [ 421.035278][T15682] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 421.037227][T11932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.046723][T15682] EXT4-fs (loop1): orphan cleanup on readonly fs [ 421.056460][T15678] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 421.091023][T15682] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.3397: iget: bad i_size value: 12154761577498 [ 421.102648][T15678] FAULT_INJECTION: forcing a failure. [ 421.102648][T15678] name failslab, interval 1, probability 0, space 0, times 0 [ 421.105750][T15682] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 421.120565][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 421.139399][ C1] EXT4-fs (loop1): initial error at time 1786083867: ext4_orphan_get:1399: inode 13 [ 421.145231][T15678] CPU: 0 UID: 0 PID: 15678 Comm: syz.8.3396 Not tainted syzkaller #0 PREEMPT(lazy) [ 421.145315][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 421.145327][T15678] Call Trace: [ 421.145335][T15678] [ 421.145345][T15678] __dump_stack+0x1d/0x30 [ 421.145371][T15678] dump_stack_lvl+0x95/0xd0 [ 421.145392][T15678] dump_stack+0x15/0x1b [ 421.145434][T15678] should_fail_ex+0x25e/0x270 [ 421.145464][T15678] should_failslab+0x8c/0xb0 [ 421.145487][T15678] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 421.145511][T15678] ? do_getname+0x2e/0x1c0 [ 421.145586][T15678] ? do_getname+0x2e/0x1c0 [ 421.145609][T15678] ? vfs_write+0x848/0x990 [ 421.145630][T15678] do_getname+0x2e/0x1c0 [ 421.145706][T15678] getname_flags+0x1d/0x30 [ 421.145729][T15678] do_sys_openat2+0x6c/0x130 [ 421.145839][T15678] __x64_sys_openat+0xf2/0x120 [ 421.145868][T15678] x64_sys_call+0x1e39/0x3020 [ 421.145923][T15678] do_syscall_64+0x136/0x3c0 [ 421.145950][T15678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.145973][T15678] RIP: 0033:0x7f20ca70e0d9 [ 421.145992][T15678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.146023][T15678] RSP: 002b:00007f20c9167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 421.146045][T15678] RAX: ffffffffffffffda RBX: 00007f20ca995fa0 RCX: 00007f20ca70e0d9 [ 421.146120][T15678] RDX: 00000000000026e1 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 421.146135][T15678] RBP: 00007f20c9167090 R08: 0000000000000000 R09: 0000000000000000 [ 421.146149][T15678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.146163][T15678] R13: 00007f20ca996038 R14: 00007f20ca995fa0 R15: 00007ffc4de4da58 [ 421.146183][T15678] [ 421.162032][T15682] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3397: couldn't read orphan inode 13 (err -117) [ 421.162677][ C1] EXT4-fs (loop1): last error at time 1786083867: ext4_orphan_get:1399 [ 421.182749][T15682] loop1: lost filesystem error report for type 5 error -117 [ 421.186588][ C1] : inode 13 [ 421.207429][T15688] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3400'. [ 421.213146][T15682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 421.221331][ T9028] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.494385][ T9968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.503514][T15692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15692 comm=syz.8.3402 [ 421.525603][T15692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15692 comm=syz.8.3402 [ 421.546260][T15692] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3402'. [ 421.568802][T15692] veth3: entered promiscuous mode [ 421.577520][T15692] veth3: entered allmulticast mode [ 421.872744][T12428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.007835][T15708] pim6reg: entered allmulticast mode [ 422.051797][T13788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.063459][T15717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 422.093286][T15715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=15715 comm=syz.1.3405 [ 422.112066][T15717] System zones: 1-12 [ 422.132240][T15717] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.3408: error while reading EA inode 32 err=-116 [ 422.160098][T15705] ================================================================== [ 422.166341][T15722] xt_CT: No such helper "netbios-ns" [ 422.168493][T15705] BUG: KCSAN: data-race in ktime_get_coarse_real_ts64_mg / timekeeping_update_from_shadow [ 422.185429][T15705] [ 422.187872][T15705] write to 0xffffffff893d74c8 of 304 bytes by interrupt on cpu 0: [ 422.195945][T15705] timekeeping_update_from_shadow+0x40d/0x440 [ 422.204222][T15705] __timekeeping_advance+0xa68/0xc10 [ 422.209914][T15705] update_wall_time+0x21/0x50 [ 422.216634][T15705] tick_do_update_jiffies64+0x169/0x1c0 [ 422.222211][T15705] tick_nohz_handler+0x88/0x380 [ 422.227265][T15705] __hrtimer_run_queues+0x1f8/0x510 [ 422.232479][T15705] hrtimer_interrupt+0x257/0x810 [ 422.237532][T15705] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 422.244222][T15705] sysvec_apic_timer_interrupt+0x6f/0x80 [ 422.249974][T15705] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.256606][T15705] kcsan_setup_watchpoint+0x3e8/0x450 [ 422.262255][T15705] unmap_vmas+0x15f/0x310 [ 422.267506][T15705] exit_mmap+0x1a2/0x5e0 [ 422.274157][T15705] __mmput+0x28/0x1c0 [ 422.278972][T15705] mmput+0x40/0x50 [ 422.283030][T15705] exit_mm+0x113/0x1a0 [ 422.287218][T15705] do_exit+0x438/0x1500 [ 422.292060][T15705] do_group_exit+0x138/0x140 [ 422.296863][T15705] __x64_sys_exit_group+0x1f/0x20 [ 422.301913][T15705] x64_sys_call+0x3008/0x3020 [ 422.307047][T15705] do_syscall_64+0x136/0x3c0 [ 422.312014][T15705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.318389][T15705] [ 422.320733][T15705] read to 0xffffffff893d7538 of 4 bytes by task 15705 on cpu 1: [ 422.329079][T15705] ktime_get_coarse_real_ts64_mg+0x89/0x1a0 [ 422.335590][T15705] current_time+0x41/0x250 [ 422.340151][T15705] file_update_time_flags+0x83/0x2e0 [ 422.345636][T15705] file_update_time+0x17/0x20 [ 422.350446][T15705] shmem_file_write_iter+0x9c/0xf0 [ 422.356474][T15705] __kernel_write_iter+0x30f/0x590 [ 422.361806][T15705] dump_user_range+0xa73/0xd00 [ 422.366977][T15705] elf_core_dump+0x21c0/0x2340 [ 422.373006][T15705] coredump_write+0xaf9/0xdd0 [ 422.378925][T15705] vfs_coredump+0x2770/0x3290 [ 422.385013][T15705] get_signal+0xd33/0xf10 [ 422.390093][T15705] arch_do_signal_or_restart+0x96/0x480 [ 422.396755][T15705] irqentry_exit+0x14d/0x610 [ 422.402168][T15705] exc_general_protection+0x155/0x1e0 [ 422.409669][T15705] asm_exc_general_protection+0x26/0x30 [ 422.419108][T15705] [ 422.422327][T15705] value changed: 0x3ad4ad77 -> 0x3b6d577f [ 422.430790][T15705] [ 422.434222][T15705] Reported by Kernel Concurrency Sanitizer on: [ 422.443929][T15705] CPU: 1 UID: 0 PID: 15705 Comm: syz.3.3403 Not tainted syzkaller #0 PREEMPT(lazy) [ 422.455174][T15705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.467604][T15705] ================================================================== [ 422.493340][T15717] loop9: lost filesystem error report for type 5 error -117 [ 422.494456][T15717] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.3408: error while reading EA inode 32 err=-116 [ 422.502306][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 422.502328][ C1] EXT4-fs (loop9): initial error at time 1786083869: ext4_xattr_inode_iget:446 [ 422.502362][ C1] EXT4-fs (loop9): last error at time 1786083869: ext4_xattr_inode_iget:446 [ 422.561192][T15717] loop9: lost filesystem error report for type 5 error -117 [ 422.561710][T15717] EXT4-fs (loop9): 1 orphan inode deleted [ 422.581039][T15717] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.152984][ T9968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.174099][ T5721] udevd[5721]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 423.192081][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1294.tmp-b7:9' failed: Read-only file system [ 423.212234][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1294.tmp-b7:9' failed: Read-only file system [ 423.228928][ T5721] udevd[5721]: symlink '../../loop9' '/dev/disk/by-diskseq/1296.tmp-b7:9' failed: Read-only file system [ 426.306563][ T2978] udevd[2978]: worker [5721] terminated by signal 6 (Aborted) [ 426.397741][ T2978] udevd[2978]: worker [5708] terminated by signal 6 (Aborted)