last executing test programs: 6m17.905154677s ago: executing program 3 (id=1004): unshare(0x2c020400) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50148, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = gettid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000001480)=[{0x9, &(0x7f0000001440)=0x9, 0x2}], 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket(0x1e, 0x805, 0x1000000) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 6m16.933127798s ago: executing program 3 (id=1010): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c1, &(0x7f0000001880)="$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") mq_open(&(0x7f0000000240)='.\x00', 0x2, 0x80, 0x0) syz_clone3(0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x27}}}}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = dup2(r1, r1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x9, 0x80, 0x8, 0x7, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_address={0x5, 0x17, 0x2b, 0x0, 0x0, @in6={0xa, 0x4e23, 0x40000000, @empty, 0x2}}]}, 0x38}}, 0x40) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000b40)=ANY=[@ANYBLOB='h\x00\x00\t'], 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x4080) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r4 = openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) statx(r2, &(0x7f0000000100)='./file0/../file0\x00', 0x6000, 0x2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4, {r6}}, './file0\x00'}) 6m16.524390143s ago: executing program 3 (id=1015): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x1412, 0x0, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x48}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x10000000004, 0xd) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) recvfrom$inet6(r3, &(0x7f0000000380)=""/86, 0x56, 0x30022, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6m16.089824148s ago: executing program 3 (id=1017): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1000414, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRES8], 0x1, 0x801, &(0x7f0000001540)="$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") utimes(&(0x7f0000000000)='./file1\x00', 0x0) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) set_mempolicy(0x3, 0x0, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e0"], 0x1000f) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 6m14.910091111s ago: executing program 3 (id=1024): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) prlimit64(0x0, 0xe, 0x0, 0x0) io_setup(0x4, 0x0) io_submit(0x0, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000006c0)='.\x00', 0xaa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r2, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf25eeff7700", @ANYRES32=0x0, @ANYBLOB="390902000360000008001b0000000000080004"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 6m14.772070543s ago: executing program 3 (id=1027): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgrp(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b0, 0x10, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = epoll_create1(0x80000) epoll_pwait2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0, 0x3f, 0x0, 0x8}, 0x28) 6m14.757741933s ago: executing program 32 (id=1027): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgrp(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b0, 0x10, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = epoll_create1(0x80000) epoll_pwait2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0, 0x3f, 0x0, 0x8}, 0x28) 11.854233915s ago: executing program 4 (id=2728): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001e00)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRES8, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2eb, &(0x7f00000004c0)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0}, 0x10100, 0x400000, 0x0, 0x0, 0x80000001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) listen(0xffffffffffffffff, 0x8) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r1 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r1, &(0x7f00000004c0)=""/249, 0xf9, 0x20120, 0x0, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x5, &(0x7f0000000380)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) ftruncate(r2, 0x51a9497) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000000)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x29, 0x80003, 0x6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xededd4aa2e286f5c, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xf, 0xffff}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x1, 0x0, 0x0, 0xa092a5fe06e0bc84}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) 10.728241668s ago: executing program 4 (id=2737): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c8", @ANYRES32=r0, @ANYRES32], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x80000011}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r3 = syz_open_procfs(0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r6, 0x11a, 0x1, 0x0, &(0x7f00000001c0)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)={'security\x00', 0x0, [0x0, 0x8, 0x5, 0x2, 0xd40]}, &(0x7f0000000480)=0x54) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) 8.255956826s ago: executing program 4 (id=2746): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000012"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r1, 0x400000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, 0x0, &(0x7f0000000340)=""/166}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r2, 0x22, 0x1, 0x100, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={0x0, 0x0, 0x8}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) socket$packet(0x11, 0x2, 0x300) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000240), 0x0}, 0x20) finit_module(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sync() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x22, 0x4a3, &(0x7f0000000980)="$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") arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) 7.616013444s ago: executing program 4 (id=2752): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x1f4) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000200)=0xffffffff, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0xc4000000, 0x0, 0x1, 0x1}, 0x20) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$clear(0x7, r3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/protocols\x00') socket(0x1d, 0x2, 0x6) setresuid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) 6.855893772s ago: executing program 2 (id=2764): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) mkdir(0x0, 0xffeb) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r1) socket$kcm(0xa, 0x1, 0x106) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5e", 0x6c}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, 0x0) syz_read_part_table(0x105c, &(0x7f0000000a00)="$eJzsz8FtwjAYx9G/o7RppCrqIt0B1mAIZoiUXdiDO0MwBAduQQ7JCsDhvYv1s+XPcniv75SxJGn7WuW6bP4NXV2aXJascUufJsn087z31a0Dpn2TlKQMJeOhzWk7qFOzW+M+z3OSPr85bk+3+T+/6psAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MkeAQAA//+brgwU") r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xffffff00, 0xff, 0x0, 0xffffff00], 0x4e22, 0x4e21, 0x4e20, 0x4e20, 0x20000, 0x55, 0x2, 0xffff, 0x81}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e23], [0x4e20, 0x4e21], 0x1c, 0x21, 0x40, 0x5}}, @common=@ttl={{0x28}, {0x2, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x9, 0x1, 0x7, 0x4, 0x4]}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x9d97f04e30713082, 0x1], 0x0, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 5.592801087s ago: executing program 4 (id=2758): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000140)='\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x2}, @typedef={0x5, 0x0, 0x0, 0x8, 0x5}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @fwd={0x4}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x2e, 0x30, 0x30, 0x5f, 0x2e, 0x5f, 0x30]}}, 0x0, 0x61, 0x0, 0x1, 0x1ffffe}, 0x28) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000000340)={0x0, 0xfb, 0xb2, 0x1, 0x0, "1130315fce7f50ab7ea925a764d20111", "750d8e3f235cbc6e5d689788b8054e18e602cffa2cc0f9c2e13f56965ffde01326b9cfd5da937727a394d2632107cfa220d9ea17c0f9e3e4e48cec01a5ef6c0fa457a6164e244cf27edc3fe1685f5e1f31943d18c09730126ca3052bea1a44048482c1708d1b118168bb5c1502cf6e75ad04a950cd7d5f73edd2e4379a5692cd84796f9cc901786139a7cfd0695151e82da67f4d398969e317d9181be4"}, 0xb2, 0x3) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}}) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) 5.514777837s ago: executing program 2 (id=2759): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703001010000000850000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x84, &(0x7f0000000000), 0x90) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a109000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="d4", 0x1}], 0x1}, 0x40) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x67, 0xffffffffffffffff, &(0x7f0000000080), 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2d, 0xe, 0x0, &(0x7f0000000080)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = inotify_init1(0x800) creat(&(0x7f0000000000)='./file0\x00', 0x108) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x60000804) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x860001b1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c001880080001400100000000000000000000020800034000000002240001801400018008000100e000000108000200e00000010c00028005000100000000"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.158193902s ago: executing program 2 (id=2763): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], &(0x7f0000003ff6)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a00)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_dump={0x40, 0x13, 0x200}}) unshare(0x20000400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x1, @void}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xa0000000, 0x1b54c8}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000440)={0x2000000}) syz_open_dev$sg(0x0, 0x0, 0x800) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4000}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}, 0xe}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r5, 0x5441, 0xf42) syz_open_pts(r5, 0x4000) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="250347c600e60000000008"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0) 4.41233653s ago: executing program 0 (id=2765): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x200, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r2, 0x25, 0x0, @val=@netkit}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r4, 0x4, r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x0, 0x3, {{0x14, 0x4, 0x0, 0x3, 0x50, 0x64, 0x0, 0x8, 0x29, 0x0, @local, @broadcast, {[@lsrr={0x83, 0x23, 0x21, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @loopback, @remote]}, @generic={0x94, 0x9, "34ef4925796577"}, @rr={0x7, 0x3, 0xfc}, @noop, @timestamp_addr={0x44, 0xc, 0xae, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}}}}) io_uring_setup(0x5d09, &(0x7f0000000100)={0x0, 0x2881, 0x10, 0x0, 0x59}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404e084}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x22a}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c55", 0x57}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.357142011s ago: executing program 1 (id=2766): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x20000054) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 4.340867351s ago: executing program 2 (id=2767): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x1843, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) unshare(0x2000400) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(r5, 0x0, 0x8) r6 = epoll_create1(0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r7, 0x0, 0x0, 0x14, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 3.421964801s ago: executing program 4 (id=2768): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x400002) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x35, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r3, 0x2b4b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x20085e, &(0x7f00000107c0), 0x1, 0x53a, &(0x7f0000010280)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 3.408516842s ago: executing program 5 (id=2769): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000740)={[{@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noload}, {@noblock_validity}, {@oldalloc}, {@grpjquota}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV") r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@generic={&(0x7f0000000ac0)='./file2\x00', 0x0, 0x8}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0xfd}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, 0x0}}], 0x2, 0x40000c0) shutdown(r4, 0x1) fchdir(r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0xffffffffffeffffd, 0x3) r6 = eventfd(0x6) io_submit(r2, 0x2, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xc2, r6, &(0x7f0000000300)="0900bda31f70924f6d2311972560bb88", 0x10, 0x3}]) r7 = socket(0x40000000015, 0x5, 0x0) capset(&(0x7f0000000080)={0xf1504}, &(0x7f0000000040)={0x200000, 0x5, 0x0, 0x0, 0x81, 0x100}) r8 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x68241) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x37, 0x3, @scatter={0x0, 0x12, 0xfffffffffffffffd}, &(0x7f0000000840)="5375f2c04e0c381ed850e32a5252ce9a896a44b1bc5869a38a76fb42a2a6105c42ae3a4b0366fc61c489fea07f1692fb910afc7bf85431313ca3d0c7bf651ef37263bcabfe14abbd70f5864a2cd16cf703b3", 0x0, 0x80000001, 0x1, 0xffffffffffffffff, 0x0}) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) unshare(0x6020400) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0xc4042, 0x1ff) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000700)="57f09009cd1c", 0x6}], 0x1}}], 0x1, 0x20008000) shutdown(r1, 0x1) 3.254353333s ago: executing program 1 (id=2770): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x63, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1}], 0x10}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075b, 0x4}}]}, 0xc4}}, 0x2c000010) r4 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15\x11\xf0\xd3\xa0\x99\xef\xe4\xb3\xc5\xc3AK\x7f\xe2\xa6]\x9a\xadyr\xaf <\xd5\xe1\xfa,N\x8a\x03\xe7s\xef\x96\xfc\x8c\xe4\xd2', 0x6e93ebbbcc0884f2, 0x1c6, &(0x7f0000000040)={0x4d3f98f6, 0x2, 0x4, 0x1}) mq_timedreceive(r4, &(0x7f0000000280)=""/211, 0xd3, 0x800000000000, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x3ed7, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000400)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="180000003800ffcf000000000000000003"], 0x18}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r7, &(0x7f0000000240)=""/4096, 0x1000) 2.903624147s ago: executing program 0 (id=2771): add_key$user(&(0x7f00000000c0), 0x0, &(0x7f00000002c0), 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/23], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x81) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe(0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x29080, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x81, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7fe, 0x6, 0x7, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)=r4}, 0x20) 2.485750962s ago: executing program 1 (id=2772): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "79d52f0c71eeb59f46407d763398c06afedd262e858725472217df6434a1eee8039f09fa6c64ba69fb1cfb0b82966a852e6b8d0e93529d5b6d0cead6f180eff8", 0x16}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="000600080000000000000000000000000000ffffac14141b000000000000000040cbbc0fc1a80982000000000000000000"], 0x38) syz_open_dev$MSR(&(0x7f0000000340), 0x8, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) chdir(0x0) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x2803) keyctl$get_security(0x11, r4, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) unshare(0x26020480) ioctl$LOOP_CONFIGURE(r5, 0xc0c0128e, &(0x7f0000000140)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbf908598948224ad54afac11d875397bdb22d2ed91e55be365f819e01177f3d458dd499286aac00000000170000d38eb2284ab1145500", "f4bd000000801900", [0x100000000, 0x8]}}) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r6, 0x560e, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f00000000c0)=0xfffffa68, 0x4) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, 0x0) 2.372776203s ago: executing program 1 (id=2773): syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) epoll_create(0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x400, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfe, 0x69f, &(0x7f0000000f00)="$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") openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x8, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2000000002000000"], 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x1d, 0xfeff, 0x21ae}) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200d5115300010002000001e0"], 0x190) 2.360829864s ago: executing program 5 (id=2774): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0x400, 0x8, 0x2000}) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0xfdfd, 0x0, 0x132, 0x401}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0xd, 0x7ff, 0x7, 0x6, 0x4b, "381b4e49cffceed97492d7675fd790bfa07e1a", 0x100, 0x8f9}) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fcntl$dupfd(r3, 0x0, r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46, 0x43]}, 0x35) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60002}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) close(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000100)={0x5, 0x8, 0x80000, {r0}}, 0x20) 2.150602356s ago: executing program 5 (id=2775): r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xf, 0x1d, 0xa, 0x0, 0x0, 0x10005, 0xf41b8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x2, @perf_config_ext={0x3ff, 0x5}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x4, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200d}, 0x0, 0x5, r0, 0xb) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f00000002c0)={[{@resgid}, {@prjquota}, {@auto_da_alloc}, {@nobarrier}, {@noblock_validity}]}, 0xfe, 0x4bb, &(0x7f0000001180)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000074000/0x2000)=nil, 0x2000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) unshare(0x22020600) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) acct(0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8840) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efb", 0x4}], 0x1}, 0x8804) r5 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r5) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)) 2.111282386s ago: executing program 1 (id=2776): getpid() r0 = syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x8, 0x0, 0x0, 0x6, 0x0, 0xa, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)={r3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00'/19, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x17e) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) 1.742914241s ago: executing program 5 (id=2777): openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10000) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x180a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0x3, 0x2, 0x84, 0x42208, r0, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5, 0x8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000780), 0x1, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000200)={'ipvlan1\x00', @local}) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) 1.727321911s ago: executing program 0 (id=2787): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$inet_sctp(r1, &(0x7f0000000480)={&(0x7f0000000180)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="8617d34dcce4a9008f1095a70a5f1e9e437c0ea5be1532336b32d2eb8feeec9044b3e592e71bd402af4d7fb772ab48228821881e196250bf", 0x38}], 0x1, &(0x7f00000003c0)=[@authinfo={0x18, 0x84, 0x6, {0x10}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xffffffff}}, @init={0x18, 0x84, 0x0, {0x9, 0xa000, 0x9, 0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @init={0x18, 0x84, 0x0, {0x7, 0x7, 0x800, 0x9}}, @authinfo={0x18, 0x84, 0x6, {0x7ff}}], 0x90, 0x40058c4}, 0x8001) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d80)={0x6, 0x13, &(0x7f0000001180)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xd4}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @generic={0x1a, 0xf, 0x2, 0x35d, 0x7ff}], &(0x7f0000001240)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001c40)=""/4096, 0x40f00, 0x55, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000002c40)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000002c80)={0x1, 0x6, 0x8, 0xffffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002cc0)=[r1, r1, r1, r1, r1, r1], &(0x7f0000002d00)=[{0x5, 0x2, 0x4, 0xc}, {0x0, 0x1, 0x6, 0xb}, {0x3, 0x2, 0x10, 0x4}, {0x5, 0x3, 0x5}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffef6, 0x4, @perf_bp={0x0, 0x1}, 0xc8a0, 0x6, 0xfffffffe, 0x8, 0xc, 0x475}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r3) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r4, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r5, 0x0, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) write(r6, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f00000010c0)=r2, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r7 = semget$private(0x0, 0x5, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$sock_proto_private(r8, 0x89e0, 0x0) semctl$IPC_STAT(r7, 0x0, 0x12, &(0x7f0000000300)=""/160) perf_event_open(&(0x7f0000001100)={0x6, 0x80, 0x19, 0xa, 0xb, 0xfb, 0x0, 0x39, 0xc8052, 0x1a, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x11aeeb, 0x0, 0x7fffffff, 0x5, 0x9, 0xa0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 1.726943861s ago: executing program 2 (id=2778): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xb3e}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000004379b8207a847f6d2b112600"/24, @ANYRES32=0x0, @ANYRES32], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x8, 0x0, 0x0) open(0x0, 0x517002, 0x0) 1.698323151s ago: executing program 0 (id=2779): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) mkdir(0x0, 0xffeb) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r1) socket$kcm(0xa, 0x1, 0x106) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, 0x0) syz_read_part_table(0x105c, &(0x7f0000000a00)="$eJzsz8FtwjAYx9G/o7RppCrqIt0B1mAIZoiUXdiDO0MwBAduQQ7JCsDhvYv1s+XPcniv75SxJGn7WuW6bP4NXV2aXJascUufJsn087z31a0Dpn2TlKQMJeOhzWk7qFOzW+M+z3OSPr85bk+3+T+/6psAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MkeAQAA//+brgwU") r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xffffff00, 0xff, 0x0, 0xffffff00], 0x4e22, 0x4e21, 0x4e20, 0x4e20, 0x20000, 0x55, 0x2, 0xffff, 0x81}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e23], [0x4e20, 0x4e21], 0x1c, 0x21, 0x40, 0x5}}, @common=@ttl={{0x28}, {0x2, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x9, 0x1, 0x7, 0x4, 0x4]}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x9d97f04e30713082, 0x1], 0x0, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 1.640161442s ago: executing program 5 (id=2780): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x49, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_open_dev$sg(0x0, 0x9a08, 0x10000) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000001080)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x20040000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000200)={0x80, 0x2b, 0x62, 0xe17, 0x9, 0xda}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000007000000010000000200000604000000"], 0x0, 0x3b, 0x0, 0x1, 0xfffffff0}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000001ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32], 0x1b0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r7, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x0, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) 822.133991ms ago: executing program 5 (id=2781): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0xa80, &(0x7f0000002380)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setopts(0x4200, r1, 0x8, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 753.779902ms ago: executing program 2 (id=2782): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x8000000000b, &(0x7f0000102000/0x4000)=nil, 0x3) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000300)=0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x1b8}}, 0x44050) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x20008820) openat$autofs(0xffffffffffffff9c, 0x0, 0x4c00, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400030000000900020073797a32000000000500010007000000050005000a000000140007800800114000000000080012400000ffff13000300686173683a6e65742c6966616365"], 0x60}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r6, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) fsync(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) 654.114993ms ago: executing program 1 (id=2783): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703001010000000850000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x84, &(0x7f0000000000), 0x90) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a109000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="d4", 0x1}], 0x1}, 0x40) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x67, 0xffffffffffffffff, &(0x7f0000000080), 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2d, 0xe, 0x0, &(0x7f0000000080)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = inotify_init1(0x800) creat(&(0x7f0000000000)='./file0\x00', 0x108) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x60000804) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x860001b1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c001880080001400100000000000000000000020800034000000002240001801400018008000100e000000108000200e00000010c00028005000100000000"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 652.486083ms ago: executing program 0 (id=2784): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) r6 = openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r6, 0x0, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) openat$cgroup_int(r3, &(0x7f0000000400)='io.weight\x00', 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x10, 0x2, 0x10) 0s ago: executing program 0 (id=2785): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703001010000000850000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x84, &(0x7f0000000000), 0x90) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a109000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="d4", 0x1}], 0x1}, 0x40) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x67, 0xffffffffffffffff, &(0x7f0000000080), 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2d, 0xe, 0x0, &(0x7f0000000080)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = inotify_init1(0x800) creat(&(0x7f0000000000)='./file0\x00', 0x108) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x60000804) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x860001b1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c001880080001400100000000000000000000020800034000000002240001801400018008000100e000000108000200e00000010c00028005000100000000"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): [ 447.621040][T11398] total_active_anon 73728 [ 447.640984][T11398] total_inactive_file 114688 [ 447.650338][T11398] total_active_file 208896 [ 447.667376][T11398] total_unevictable 0 [ 447.682521][T11398] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1889,pid=11389,uid=0 [ 447.734461][T11398] Memory cgroup out of memory: Killed process 11391 (syz.0.1889) total-vm:166120kB, anon-rss:1396kB, file-rss:26656kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 447.901783][T11426] IPv6: Can't replace route, no match found [ 447.945011][T11426] x_tables: duplicate underflow at hook 3 [ 448.001243][T11429] netlink: 'syz.2.1904': attribute type 1 has an invalid length. [ 448.019486][T11432] loop5: detected capacity change from 0 to 512 [ 448.047069][ T28] audit: type=1400 audit(2000000013.160:4453): avc: denied { create } for pid=11433 comm="syz.0.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 448.077656][T11432] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 448.144569][T11436] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1904'. [ 448.209356][T11436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1904'. [ 448.245217][T11432] EXT4-fs (loop5): 1 truncate cleaned up [ 448.271382][T11432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.265599][T11449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1906'. [ 449.417460][ T28] audit: type=1400 audit(2000000014.530:4454): avc: denied { write } for pid=11419 comm="syz.5.1899" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 449.590855][ T28] audit: type=1400 audit(2000000014.710:4455): avc: denied { mount } for pid=11455 comm="syz.2.1910" name="/" dev="ramfs" ino=30517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 449.768374][T11459] dvmrp1: entered allmulticast mode [ 451.007883][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.206693][T11471] x_tables: duplicate underflow at hook 3 [ 452.279277][T11500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1921'. [ 453.415804][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1923'. [ 453.466303][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1923'. [ 453.479272][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'. [ 453.557214][ T28] audit: type=1400 audit(2000000018.670:4456): avc: denied { bind } for pid=11511 comm="syz.2.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 453.885810][T11528] IPv6: Can't replace route, no match found [ 454.031633][T11528] x_tables: duplicate underflow at hook 3 [ 454.188180][T11534] dvmrp1: entered allmulticast mode [ 454.205919][T11543] loop5: detected capacity change from 0 to 8192 [ 455.437863][T11558] xt_hashlimit: size too large, truncated to 1048576 [ 455.840386][T11576] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11576 comm=syz.4.1941 [ 455.853029][T11576] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11576 comm=syz.4.1941 [ 455.869443][ T28] audit: type=1400 audit(2000000020.990:4458): avc: denied { connect } for pid=11563 comm="syz.5.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 455.889503][ T28] audit: type=1400 audit(2000000020.980:4457): avc: denied { audit_write } for pid=11575 comm="syz.4.1941" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 456.318466][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1941'. [ 456.980930][T11593] loop5: detected capacity change from 0 to 256 [ 457.026240][T11593] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1945'. [ 457.047200][T11596] netlink: 'syz.4.1946': attribute type 1 has an invalid length. [ 457.081651][T11593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.102156][T11600] x_tables: duplicate underflow at hook 3 [ 457.109628][T11596] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1946'. [ 457.118835][T11596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1946'. [ 457.141263][T11593] netlink: 'syz.5.1945': attribute type 4 has an invalid length. [ 457.158709][T11593] netlink: 'syz.5.1945': attribute type 4 has an invalid length. [ 457.534259][ T28] audit: type=1400 audit(2000000022.620:4459): avc: denied { listen } for pid=11605 comm="syz.5.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 457.699576][ T28] audit: type=1400 audit(2000000022.620:4460): avc: denied { shutdown } for pid=11605 comm="syz.5.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 458.465435][T11636] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1956'. [ 458.476263][T11635] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.483466][T11635] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.590738][T11635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.599707][T11635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.930677][ T49] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.946042][ T49] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.955248][ T49] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.964286][ T49] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.235236][T11655] netlink: 340 bytes leftover after parsing attributes in process `syz.5.1961'. [ 459.253718][T11657] netlink: 'syz.4.1962': attribute type 1 has an invalid length. [ 459.297451][T11657] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1962'. [ 459.306669][T11657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1962'. [ 459.317025][T11655] loop9: detected capacity change from 0 to 7 [ 459.345350][T11658] x_tables: duplicate underflow at hook 3 [ 459.371718][T11655] buffer_io_error: 18 callbacks suppressed [ 459.371735][T11655] Buffer I/O error on dev loop9, logical block 0, async page read [ 459.385492][T11655] Buffer I/O error on dev loop9, logical block 0, async page read [ 459.402781][T11655] loop9: unable to read partition table [ 459.408887][T11655] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 459.408887][T11655] ) failed (rc=-5) [ 459.446230][T11659] loop9: detected capacity change from 7 to 0 [ 459.475128][ T28] audit: type=1326 audit(2000000024.590:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.2.1965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 459.505003][ T28] audit: type=1326 audit(2000000024.620:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.2.1965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 459.532754][ T28] audit: type=1326 audit(2000000024.620:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.2.1965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 459.559721][ T28] audit: type=1326 audit(2000000024.620:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.2.1965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 459.585993][ T28] audit: type=1326 audit(2000000024.620:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.2.1965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fee9fcacb42 code=0x7ffc0000 [ 459.612084][ T28] audit: type=1326 audit(2000000024.620:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.2.1965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fee9fc6d60e code=0x7ffc0000 [ 459.689107][T11675] netlink: 'syz.5.1967': attribute type 1 has an invalid length. [ 459.957168][T11675] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1967'. [ 460.001211][T11677] x_tables: duplicate underflow at hook 3 [ 460.004529][T11675] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1967'. [ 460.175545][T11687] netlink: 'syz.4.1974': attribute type 1 has an invalid length. [ 460.209634][T11687] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1974'. [ 460.218808][T11687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1974'. [ 460.265326][T11690] netlink: 'syz.1.1985': attribute type 1 has an invalid length. [ 460.283096][T11692] loop5: detected capacity change from 0 to 1024 [ 460.289659][T11690] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1985'. [ 460.298753][T11690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1985'. [ 460.331516][T11692] EXT4-fs: test_dummy_encryption option not supported [ 460.581188][T11698] loop5: detected capacity change from 0 to 512 [ 461.125728][T11703] x_tables: duplicate underflow at hook 3 [ 461.588347][T11698] EXT4-fs (loop5): 1 orphan inode deleted [ 461.594662][T11698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.939722][T11698] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.177250][ T8681] IPVS: starting estimator thread 0... [ 462.256066][ T28] kauditd_printk_skb: 220 callbacks suppressed [ 462.256087][ T28] audit: type=1400 audit(2000000027.360:4687): avc: denied { ioctl } for pid=11707 comm="syz.4.1978" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31398 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 462.289494][ T4529] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 462.361107][ T4529] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:22: Failed to release dquot type 1 [ 462.388549][T11719] IPVS: using max 2592 ests per chain, 129600 per kthread [ 462.430478][T11723] IPv6: Can't replace route, no match found [ 462.477315][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.503160][T11725] netlink: 'syz.2.1982': attribute type 1 has an invalid length. [ 462.731106][T11723] x_tables: duplicate underflow at hook 3 [ 463.319892][T11742] binfmt_misc: register: failed to install interpreter file ./file2 [ 466.686114][ T28] audit: type=1400 audit(2000000031.800:4688): avc: denied { accept } for pid=11779 comm="syz.4.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 466.783510][T11777] loop5: detected capacity change from 0 to 512 [ 466.803999][T11784] x_tables: duplicate underflow at hook 3 [ 466.851333][T11789] IPv6: Can't replace route, no match found [ 466.859719][T11777] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1998: inode has both inline data and extents flags [ 466.911434][T11789] x_tables: duplicate underflow at hook 3 [ 466.916258][T11777] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 466.923012][T11777] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1998: couldn't read orphan inode 15 (err -117) [ 466.932632][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 466.932677][ C0] EXT4-fs (loop5): initial error at time 2000000032: ext4_orphan_get:1397: inode 15 [ 466.932782][ C0] EXT4-fs (loop5): last error at time 2000000032: ext4_orphan_get:1397: inode 15 [ 466.934086][T11793] netlink: 'syz.0.2003': attribute type 1 has an invalid length. [ 466.940604][T11793] __nla_validate_parse: 32 callbacks suppressed [ 466.940621][T11793] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2003'. [ 466.997417][T11793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2003'. [ 467.011292][T11777] loop5: lost filesystem error report for type 5 error -117 [ 467.027906][T11777] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.099885][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.162877][T11790] ipvlan0: left allmulticast mode [ 467.168126][T11790] veth0_vlan: left allmulticast mode [ 467.174325][T11790] xfrm1: left promiscuous mode [ 467.179164][T11790] xfrm1: left allmulticast mode [ 467.203060][ T364] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 467.214900][ T28] audit: type=1400 audit(2000000032.330:4689): avc: denied { getopt } for pid=11801 comm="syz.5.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 467.216842][ T364] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 467.246279][ T364] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 467.255427][ T364] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 467.361695][T11807] loop5: detected capacity change from 0 to 512 [ 467.368951][T11807] EXT4-fs: Ignoring removed nobh option [ 468.419151][T11807] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 468.863986][T11807] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2010: invalid indirect mapped block 256 (level 1) [ 468.913388][T11807] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 468.916062][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 468.931851][ C1] EXT4-fs (loop5): initial error at time 2000000034: ext4_free_branches:1023: inode 13 [ 468.941713][ C1] EXT4-fs (loop5): last error at time 2000000034: ext4_free_branches:1023: inode 13 [ 468.972045][T11807] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2010: invalid indirect mapped block 2683928664 (level 1) [ 469.004119][T11807] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 469.035372][T11807] EXT4-fs (loop5): 1 truncate cleaned up [ 469.212284][T11807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.364097][T11807] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2010: invalid indirect mapped block 4294967295 (level 0) [ 469.378334][T11807] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2010: invalid indirect mapped block 4294967295 (level 0) [ 469.392583][T11807] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2010: invalid indirect mapped block 480848489 (level 1) [ 469.429838][ T28] audit: type=1400 audit(2000000034.480:4690): avc: denied { write } for pid=11806 comm="syz.5.2010" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.465531][ T28] audit: type=1400 audit(2000000034.530:4691): avc: denied { write } for pid=11806 comm="syz.5.2010" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.488971][T11826] IPv6: Can't replace route, no match found [ 469.503903][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.767113][T11836] x_tables: duplicate underflow at hook 3 [ 470.488810][T11846] x_tables: duplicate underflow at hook 3 [ 471.067937][T11856] netlink: 'syz.0.2022': attribute type 6 has an invalid length. [ 471.078687][T11858] 9p: Bad value for 'wfdno' [ 471.092464][T11856] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2022'. [ 471.824741][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2028'. [ 471.834854][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2028'. [ 471.844036][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2028'. [ 471.853220][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2028'. [ 471.862336][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2028'. [ 472.518924][T11884] netlink: 'syz.0.2030': attribute type 36 has an invalid length. [ 472.532115][T11884] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 472.541998][T11884] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 472.563558][T11884] netlink: 'syz.0.2030': attribute type 10 has an invalid length. [ 472.571763][T11884] ipvlan0: entered allmulticast mode [ 472.577182][T11884] veth0_vlan: entered allmulticast mode [ 472.609796][T11882] netlink: 'syz.5.2031': attribute type 1 has an invalid length. [ 472.765865][ T28] audit: type=1326 audit(2000000037.880:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11885 comm="syz.1.2032" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a447ecdd9 code=0x7ffc0000 [ 472.820195][T11887] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2031'. [ 472.992699][T11887] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2031'. [ 473.025626][ T28] audit: type=1326 audit(2000000037.910:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11885 comm="syz.1.2032" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a447ecdd9 code=0x7ffc0000 [ 473.051818][ T28] audit: type=1326 audit(2000000037.920:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11885 comm="syz.1.2032" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a447ecdd9 code=0x7ffc0000 [ 473.088311][ T28] audit: type=1326 audit(2000000037.910:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11885 comm="syz.1.2032" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a447ecdd9 code=0x7ffc0000 [ 473.130401][ T28] audit: type=1326 audit(2000000037.920:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11885 comm="syz.1.2032" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f8a447ecdd9 code=0x7ffc0000 [ 473.164815][ T28] audit: type=1326 audit(2000000037.920:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11885 comm="syz.1.2032" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a447ecdd9 code=0x7ffc0000 [ 473.196224][T11894] loop5: detected capacity change from 0 to 1024 [ 473.224363][ T28] audit: type=1326 audit(2000000037.920:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11885 comm="syz.1.2032" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a447ecdd9 code=0x7ffc0000 [ 473.251316][ T28] audit: type=1326 audit(2000000037.920:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11885 comm="syz.1.2032" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a447ecdd9 code=0x7ffc0000 [ 473.288497][T11894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.322571][T11894] EXT4-fs (loop5): shut down requested (0) [ 473.352916][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2035'. [ 473.409519][T11905] 9p: Bad value for 'wfdno' [ 473.976179][T11913] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2040'. [ 474.403958][T11912] netlink: 'syz.2.2039': attribute type 6 has an invalid length. [ 474.425041][T11912] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2039'. [ 475.857301][T11924] xfrm0 speed is unknown, defaulting to 1000 [ 475.895942][T11924] lo speed is unknown, defaulting to 1000 [ 477.274082][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.335520][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 477.335551][ T28] audit: type=1400 audit(2000000042.450:4780): avc: denied { setopt } for pid=11939 comm="syz.4.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 477.867178][ T8681] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 477.876859][ T8681] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 478.311725][T11948] fido_id[11948]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 478.533128][T11951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2049'. [ 479.154216][ T28] audit: type=1400 audit(2000000044.270:4781): avc: denied { write } for pid=11952 comm="syz.0.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 480.706385][T11964] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2052'. [ 480.715623][T11964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2052'. [ 480.937040][T11971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11971 comm=syz.0.2054 [ 481.157886][T11980] netlink: 'syz.0.2057': attribute type 36 has an invalid length. [ 481.172177][T11980] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 481.182205][T11980] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 481.205885][T11980] netlink: 'syz.0.2057': attribute type 10 has an invalid length. [ 481.905891][ T28] audit: type=1400 audit(2000000047.020:4782): avc: denied { setopt } for pid=11988 comm="syz.0.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 481.978777][T11996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2068'. [ 482.053798][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2063'. [ 482.066953][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2063'. [ 482.084788][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'. [ 482.218122][T12003] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2059'. [ 482.500997][T12004] binfmt_misc: register: failed to install interpreter file ./file2 [ 482.672649][ T28] audit: type=1326 audit(2000000047.790:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.1.2066" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a447ecdd9 code=0x7ffc0000 [ 482.699743][ T28] audit: type=1326 audit(2000000047.820:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.1.2066" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a447ecdd9 code=0x7ffc0000 [ 482.744801][ T28] audit: type=1326 audit(2000000047.820:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.1.2066" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a447ecdd9 code=0x7ffc0000 [ 482.773811][ T28] audit: type=1326 audit(2000000047.820:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.1.2066" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8a447ecdd9 code=0x7ffc0000 [ 482.843616][ T28] audit: type=1326 audit(2000000047.820:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.1.2066" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8a447ecb42 code=0x7ffc0000 [ 482.873326][ T28] audit: type=1326 audit(2000000047.850:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.1.2066" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a447ecdd9 code=0x7ffc0000 [ 482.899402][ T28] audit: type=1326 audit(2000000047.860:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.1.2066" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8a447ad60e code=0x7ffc0000 [ 482.968224][ T28] audit: type=1326 audit(2000000047.920:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.1.2066" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8a447ecc07 code=0x7ffc0000 [ 483.010995][ T28] audit: type=1326 audit(2000000047.920:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.1.2066" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a447ad60e code=0x7ffc0000 [ 483.042879][ T28] audit: type=1326 audit(2000000047.920:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.1.2066" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8a447ad60e code=0x7ffc0000 [ 483.171139][T12029] netlink: 'syz.2.2073': attribute type 1 has an invalid length. [ 483.202013][T12029] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2073'. [ 483.211337][T12029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2073'. [ 486.216980][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2082'. [ 486.278846][T12067] xfrm0 speed is unknown, defaulting to 1000 [ 486.347408][T12066] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2081'. [ 486.382509][T12062] x_tables: duplicate underflow at hook 3 [ 486.382530][T12075] netlink: 'syz.1.2086': attribute type 1 has an invalid length. [ 486.392713][T12065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2083'. [ 486.417339][T12065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2083'. [ 486.556860][T12079] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2086'. [ 486.616404][T12079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2086'. [ 487.875861][T12067] lo speed is unknown, defaulting to 1000 [ 487.980275][T12090] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 487.989391][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 487.989409][ T28] audit: type=1400 audit(2000000053.090:4927): avc: denied { relabelto } for pid=12088 comm="syz.5.2090" name="bus" dev="tmpfs" ino=1099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 488.021993][ T28] audit: type=1400 audit(2000000053.090:4928): avc: denied { associate } for pid=12088 comm="syz.5.2090" name="bus" dev="tmpfs" ino=1099 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0" [ 488.679635][T12097] binfmt_misc: register: failed to install interpreter file ./file2 [ 488.713100][T12095] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2093'. [ 488.722407][T12095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2093'. [ 489.966109][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.126947][T12121] loop5: detected capacity change from 0 to 8192 [ 490.299903][T12119] x_tables: duplicate underflow at hook 3 [ 491.035620][T12143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2105'. [ 491.059847][ T28] audit: type=1400 audit(2000000056.170:4929): avc: denied { name_bind } for pid=12133 comm="syz.5.2104" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 491.795192][T12159] xt_ecn: cannot match TCP bits for non-tcp packets [ 494.689247][T12166] ipvlan0: left allmulticast mode [ 494.694466][T12166] veth0_vlan: left allmulticast mode [ 494.812191][T12171] loop5: detected capacity change from 0 to 512 [ 494.845800][T12171] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2113: inode has both inline data and extents flags [ 494.876740][T12171] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 494.881531][T12171] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2113: couldn't read orphan inode 15 (err -117) [ 494.891189][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 494.891239][ C1] EXT4-fs (loop5): initial error at time 2000000060: ext4_orphan_get:1397: inode 15 [ 494.891343][ C1] EXT4-fs (loop5): last error at time 2000000060: ext4_orphan_get:1397: inode 15 [ 494.951729][T12177] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12177 comm=syz.1.2114 [ 495.040449][T12177] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12177 comm=syz.1.2114 [ 495.164071][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2114'. [ 495.211871][T12171] loop5: lost filesystem error report for type 5 error -117 [ 495.223017][T12171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.424943][T12182] x_tables: duplicate underflow at hook 3 [ 495.452448][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.222701][T12198] loop5: detected capacity change from 0 to 2048 [ 496.469052][T12198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.173088][ T28] audit: type=1400 audit(2000000062.290:4930): avc: denied { read } for pid=12203 comm="syz.2.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 497.318539][T12213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2120'. [ 497.597624][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.861481][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2124'. [ 497.903631][T12221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.897929][T12236] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12236 comm=syz.0.2130 [ 498.953425][T12236] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12236 comm=syz.0.2130 [ 499.012038][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2130'. [ 499.096790][T12242] netlink: 'syz.2.2133': attribute type 22 has an invalid length. [ 499.132148][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'. [ 499.610055][T12261] loop5: detected capacity change from 0 to 512 [ 499.726667][T12261] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2138: inode has both inline data and extents flags [ 499.842525][T12261] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 499.845980][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 499.861845][ C1] EXT4-fs (loop5): initial error at time 2000000064: ext4_orphan_get:1397: inode 15 [ 499.871825][ C1] EXT4-fs (loop5): last error at time 2000000064: ext4_orphan_get:1397: inode 15 [ 500.002666][T12261] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2138: couldn't read orphan inode 15 (err -117) [ 500.276166][T12261] loop5: lost filesystem error report for type 5 error -117 [ 500.284960][T12261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.371479][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.268598][T12273] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2141'. [ 502.457141][T12286] xfrm0 speed is unknown, defaulting to 1000 [ 502.583876][ T28] audit: type=1400 audit(2000000067.700:4931): avc: denied { read } for pid=12285 comm="syz.2.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 502.750092][T12286] lo speed is unknown, defaulting to 1000 [ 503.679018][T12300] all: renamed from bridge_slave_1 [ 503.687268][T12302] netlink: 'syz.0.2149': attribute type 1 has an invalid length. [ 503.708857][T12302] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2149'. [ 503.718098][T12302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2149'. [ 504.080161][ T28] audit: type=1400 audit(2000000069.200:4932): avc: denied { bind } for pid=12307 comm="syz.0.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 504.119748][ T28] audit: type=1400 audit(2000000069.220:4933): avc: denied { name_bind } for pid=12307 comm="syz.0.2152" src=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 505.118416][ T28] audit: type=1400 audit(2000000069.230:4934): avc: denied { node_bind } for pid=12307 comm="syz.0.2152" src=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 505.541272][T12316] netlink: 'syz.5.2154': attribute type 27 has an invalid length. [ 505.549164][T12316] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2154'. [ 507.109401][T12326] loop5: detected capacity change from 0 to 512 [ 508.620323][T12334] netlink: 'syz.0.2159': attribute type 1 has an invalid length. [ 508.690688][T12326] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2157: inode has both inline data and extents flags [ 508.717305][T12334] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2159'. [ 508.751824][T12334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2159'. [ 508.764136][T12326] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 508.765152][T12326] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2157: couldn't read orphan inode 15 (err -117) [ 508.774793][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 508.774908][ C0] EXT4-fs (loop5): initial error at time 2000000073: ext4_orphan_get:1397: inode 15 [ 508.775061][ C0] EXT4-fs (loop5): last error at time 2000000073: ext4_orphan_get:1397: inode 15 [ 508.880008][T12338] xfrm0 speed is unknown, defaulting to 1000 [ 508.931525][T12326] loop5: lost filesystem error report for type 5 error -117 [ 508.947211][T12326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.987841][T12340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2158'. [ 509.051624][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.129564][T12331] geneve3: entered promiscuous mode [ 509.164886][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.173859][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.184395][T12338] lo speed is unknown, defaulting to 1000 [ 509.190682][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.220425][T12342] netlink: 'syz.1.2161': attribute type 1 has an invalid length. [ 509.238581][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.328246][T12349] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2161'. [ 509.403924][T12349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2161'. [ 509.819801][ T28] audit: type=1400 audit(2000000074.910:4935): avc: denied { bind } for pid=12354 comm="syz.2.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 509.922061][T12348] ipvlan0: left allmulticast mode [ 509.927160][T12348] veth0_vlan: left allmulticast mode [ 509.953081][ T36] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.970805][ T36] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.982777][ T36] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.028493][ T36] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.143981][ T8681] syz1: Port: 1 Link DOWN [ 510.164527][ T35] xfrm0 speed is unknown, defaulting to 1000 [ 510.172115][ T35] syz0: Port: 1 Link DOWN [ 510.372892][ T8681] xfrm0 speed is unknown, defaulting to 1000 [ 510.558718][T12371] x_tables: duplicate underflow at hook 3 [ 510.942624][T12376] netlink: 'syz.1.2171': attribute type 1 has an invalid length. [ 510.960634][T12379] loop5: detected capacity change from 0 to 1024 [ 510.974012][T12379] EXT4-fs: Ignoring removed orlov option [ 510.986561][T12376] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2171'. [ 510.995645][T12376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2171'. [ 511.047694][T12379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.246880][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.281443][T12384] tmpfs: Unknown parameter 'sizÿ' [ 511.412082][T12394] loop5: detected capacity change from 0 to 8192 [ 511.578745][T12402] x_tables: duplicate underflow at hook 3 [ 511.611121][T12403] x_tables: duplicate underflow at hook 3 [ 512.738909][T12415] xfrm0 speed is unknown, defaulting to 1000 [ 513.445829][T12415] lo speed is unknown, defaulting to 1000 [ 514.068830][T12425] x_tables: duplicate underflow at hook 3 [ 514.736209][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2192'. [ 514.808083][T12450] x_tables: duplicate underflow at hook 3 [ 515.543277][T12449] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2194'. [ 515.844502][T12462] x_tables: duplicate underflow at hook 3 [ 516.662448][T12475] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12475 comm=syz.5.2202 [ 516.675116][T12475] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12475 comm=syz.5.2202 [ 516.724466][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2202'. [ 516.851164][T12479] xfrm0 speed is unknown, defaulting to 1000 [ 516.930712][T12479] lo speed is unknown, defaulting to 1000 [ 516.998271][T12484] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2205'. [ 518.017426][T12497] x_tables: duplicate underflow at hook 3 [ 518.816709][T12505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2209'. [ 519.002285][T12512] ªªªªªª: renamed from vlan0 [ 519.065063][T12514] all: renamed from bridge_slave_1 [ 520.083228][T12530] x_tables: duplicate underflow at hook 3 [ 520.159026][T12527] loop5: detected capacity change from 0 to 8192 [ 520.849559][ T28] audit: type=1400 audit(2000000085.960:4936): avc: denied { bind } for pid=12538 comm="syz.1.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 521.004847][T12539] xfrm0 speed is unknown, defaulting to 1000 [ 521.556674][T12539] lo speed is unknown, defaulting to 1000 [ 521.595797][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2227'. [ 521.605015][T12546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2225'. [ 521.746505][T12552] hsr_slave_1 (unregistering): left promiscuous mode [ 521.818821][T12558] xfrm0 speed is unknown, defaulting to 1000 [ 523.235537][T12567] netlink: 'syz.2.2231': attribute type 27 has an invalid length. [ 523.243507][T12567] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2231'. [ 523.276280][T12575] loop5: detected capacity change from 0 to 128 [ 523.286421][T12575] vfat: Unknown parameter '' [ 523.347845][T12578] loop5: detected capacity change from 0 to 2048 [ 523.355212][T12558] lo speed is unknown, defaulting to 1000 [ 523.492496][T12578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.544535][ T28] audit: type=1400 audit(2000000088.660:4937): avc: denied { write } for pid=12577 comm="syz.5.2234" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 523.668348][T12587] lo: Caught tx_queue_len zero misconfig [ 524.199038][ T36] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 524.215287][ T36] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 690 with error 28 [ 524.241493][ T36] EXT4-fs (loop5): This should not happen!! Data will be lost [ 524.241493][ T36] [ 524.251187][ T36] EXT4-fs (loop5): Total free blocks count 0 [ 524.257202][ T36] EXT4-fs (loop5): Free/Dirty block details [ 524.263232][ T36] EXT4-fs (loop5): free_blocks=4096 [ 524.268503][ T36] EXT4-fs (loop5): dirty_blocks=720 [ 524.273483][T12604] netlink: 'syz.2.2242': attribute type 7 has an invalid length. [ 524.273724][ T36] EXT4-fs (loop5): Block reservation details [ 524.273741][ T36] EXT4-fs (loop5): i_reserved_data_blocks=45 [ 524.276991][ T36] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 524.297491][T12604] netlink: 'syz.2.2242': attribute type 7 has an invalid length. [ 524.306172][ T4521] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.306309][ T4521] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.316349][ T7993] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 524.322334][ T4521] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.374322][ T4521] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.393233][T12613] loop5: detected capacity change from 0 to 512 [ 524.427587][T12613] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2245: inode has both inline data and extents flags [ 524.441411][T12613] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 524.441900][T12613] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2245: couldn't read orphan inode 15 (err -117) [ 524.451247][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 524.451397][ C1] EXT4-fs (loop5): initial error at time 2000000089: ext4_orphan_get:1397: inode 15 [ 524.451626][ C1] EXT4-fs (loop5): last error at time 2000000089: ext4_orphan_get:1397: inode 15 [ 524.489922][T12613] loop5: lost filesystem error report for type 5 error -117 [ 524.495070][T12613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.543463][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.935383][T12626] xfrm0 speed is unknown, defaulting to 1000 [ 526.182177][ T28] audit: type=1400 audit(2000000091.300:4938): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 526.384404][T12626] lo speed is unknown, defaulting to 1000 [ 526.766181][T12629] siw: device registration error -23 [ 527.846787][ T28] audit: type=1400 audit(2000000092.070:4939): avc: denied { create } for pid=12633 comm="syz.2.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 527.867852][ T28] audit: type=1400 audit(2000000092.220:4940): avc: denied { sys_admin } for pid=12633 comm="syz.2.2250" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 528.775222][T12648] loop5: detected capacity change from 0 to 256 [ 528.875477][T12644] VFS: Mount too revealing [ 529.240482][ T28] audit: type=1400 audit(2000000094.360:4941): avc: denied { read } for pid=12649 comm="syz.4.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 529.776665][ T28] audit: type=1400 audit(2000000094.540:4942): avc: denied { ioctl } for pid=12649 comm="syz.4.2255" path="socket:[36214]" dev="sockfs" ino=36214 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 530.001990][T12657] syz.5.2254 (12657) used greatest stack depth: 7056 bytes left [ 530.120696][ T28] audit: type=1400 audit(2000000095.230:4943): avc: denied { ioctl } for pid=12668 comm="syz.4.2260" path="socket:[36248]" dev="sockfs" ino=36248 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 530.178099][T12671] ipt_REJECT: TCP_RESET invalid for non-tcp [ 530.255605][ T28] audit: type=1400 audit(2000000095.330:4944): avc: denied { connect } for pid=12680 comm="syz.0.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 530.276016][ T28] audit: type=1400 audit(2000000095.330:4945): avc: denied { getopt } for pid=12680 comm="syz.0.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 530.446513][T12689] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2267'. [ 530.540554][ T364] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.551594][ T364] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.571533][ T364] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.590331][ T364] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.641605][T12693] tipc: Enabling of bearer rejected, failed to enable media [ 530.985269][T12698] xt_TCPMSS: Only works on TCP SYN packets [ 531.081022][T12703] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.088381][T12703] IPv6: NLM_F_CREATE should be set when creating new route [ 531.095634][T12703] IPv6: NLM_F_CREATE should be set when creating new route [ 531.103072][ T28] audit: type=1400 audit(2000000096.200:4946): avc: denied { ioctl } for pid=12702 comm="syz.1.2272" path="socket:[36349]" dev="sockfs" ino=36349 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 531.330053][T12707] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 531.546192][ T28] audit: type=1400 audit(2000000096.650:4947): avc: denied { accept } for pid=12702 comm="syz.1.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 531.569042][T12703] Cannot find add_set index 2 as target [ 532.219716][T12718] lo speed is unknown, defaulting to 1000 [ 532.225969][T12718] lo speed is unknown, defaulting to 1000 [ 532.232002][T12718] lo speed is unknown, defaulting to 1000 [ 532.400564][T12718] infiniband syz2: set down [ 532.405250][ T3379] lo speed is unknown, defaulting to 1000 [ 532.413926][T12718] infiniband syz2: added lo [ 533.279841][T12718] RDS/IB: syz2: added [ 533.288596][T12718] smc: adding ib device syz2 with port count 1 [ 533.294863][T12718] smc: ib device syz2 port 1 has no pnetid [ 533.309364][ T3379] lo speed is unknown, defaulting to 1000 [ 533.317156][T12718] lo speed is unknown, defaulting to 1000 [ 533.351267][T12730] xt_TCPMSS: Only works on TCP SYN packets [ 533.423007][T12733] 9p: Bad value for 'wfdno' [ 533.476520][T12718] lo speed is unknown, defaulting to 1000 [ 533.583338][T12718] lo speed is unknown, defaulting to 1000 [ 533.624831][T12731] ipt_REJECT: TCP_RESET invalid for non-tcp [ 533.630401][T12718] lo speed is unknown, defaulting to 1000 [ 533.680825][T12718] lo speed is unknown, defaulting to 1000 [ 533.716881][T12740] xfrm0 speed is unknown, defaulting to 1000 [ 533.799016][T12740] lo speed is unknown, defaulting to 1000 [ 534.976128][T12752] loop5: detected capacity change from 0 to 512 [ 535.959238][T12740] lo speed is unknown, defaulting to 1000 [ 535.988017][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2285'. [ 538.652619][T12752] EXT4-fs warning (device loop5): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop5. [ 539.221939][T12779] x_tables: duplicate underflow at hook 3 [ 539.534943][T12768] loop5: detected capacity change from 0 to 8192 [ 539.572323][T12784] x_tables: duplicate underflow at hook 3 [ 540.258166][T12795] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2301'. [ 542.170536][T12818] loop5: detected capacity change from 0 to 512 [ 542.178560][T12812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2304'. [ 542.236775][T12818] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2307: inode has both inline data and extents flags [ 542.293939][T12818] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 542.294157][T12818] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2307: couldn't read orphan inode 15 (err -117) [ 542.303373][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 542.303395][ C0] EXT4-fs (loop5): initial error at time 2000000107: ext4_orphan_get:1397: inode 15 [ 542.303439][ C0] EXT4-fs (loop5): last error at time 2000000107: ext4_orphan_get:1397: inode 15 [ 542.497256][T12818] loop5: lost filesystem error report for type 5 error -117 [ 542.497807][T12818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.641987][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.029433][T12837] x_tables: duplicate underflow at hook 3 [ 545.164005][T12861] netlink: 'syz.1.2319': attribute type 1 has an invalid length. [ 545.241757][T12861] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2319'. [ 545.251098][T12861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2319'. [ 545.392243][T12876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2324'. [ 545.422258][T12874] loop5: detected capacity change from 0 to 512 [ 545.496295][T12878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2325'. [ 545.523175][T12874] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2322: inode has both inline data and extents flags [ 545.536589][T12874] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 545.536811][T12874] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2322: couldn't read orphan inode 15 (err -117) [ 545.557764][T12874] loop5: lost filesystem error report for type 5 error -117 [ 545.565313][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2324'. [ 545.590967][T12874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.726075][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.013220][T12888] loop5: detected capacity change from 0 to 8192 [ 546.045639][T12899] x_tables: duplicate underflow at hook 3 [ 546.118835][ T28] audit: type=1400 audit(2000000111.230:4948): avc: denied { search } for pid=3022 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.274987][T12904] netlink: 'syz.0.2331': attribute type 1 has an invalid length. [ 546.321044][ T28] audit: type=1400 audit(2000000111.230:4949): avc: denied { search } for pid=3022 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.574922][T12906] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2331'. [ 546.644534][ T28] audit: type=1400 audit(2000000111.230:4950): avc: denied { search } for pid=3022 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.673603][ T28] audit: type=1400 audit(2000000111.230:4951): avc: denied { read } for pid=3022 comm="dhcpcd" name="n40" dev="tmpfs" ino=16932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 546.702306][T12906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2331'. [ 546.734714][ T28] audit: type=1400 audit(2000000111.230:4952): avc: denied { open } for pid=3022 comm="dhcpcd" path="/run/udev/data/n40" dev="tmpfs" ino=16932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 546.774196][ T28] audit: type=1400 audit(2000000111.230:4953): avc: denied { getattr } for pid=3022 comm="dhcpcd" path="/run/udev/data/n40" dev="tmpfs" ino=16932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 546.797689][ T28] audit: type=1400 audit(2000000111.850:4954): avc: denied { read } for pid=12913 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.826888][ T28] audit: type=1400 audit(2000000111.850:4955): avc: denied { read open } for pid=12913 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.852779][ T28] audit: type=1400 audit(2000000111.850:4956): avc: denied { getattr } for pid=12913 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.950073][T12926] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2338'. [ 547.034006][ T28] audit: type=1400 audit(2000000112.130:4957): avc: denied { write } for pid=12912 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.963414][T12955] tipc: Enabling of bearer rejected, failed to enable media [ 548.077711][T12969] loop5: detected capacity change from 0 to 512 [ 548.110497][T12969] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2345: inode has both inline data and extents flags [ 548.154072][T12969] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 548.155949][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 548.171612][ C0] EXT4-fs (loop5): initial error at time 2000000113: ext4_orphan_get:1397: inode 15 [ 548.181046][ C0] EXT4-fs (loop5): last error at time 2000000113: ext4_orphan_get:1397: inode 15 [ 548.190794][T12969] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2345: couldn't read orphan inode 15 (err -117) [ 548.191914][T12980] netlink: 'syz.4.2347': attribute type 1 has an invalid length. [ 548.216046][T12984] x_tables: duplicate underflow at hook 3 [ 548.234922][T12980] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2347'. [ 548.244087][T12980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2347'. [ 548.251222][T12969] loop5: lost filesystem error report for type 5 error -117 [ 548.269128][T12969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.371326][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.507412][T12999] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2350'. [ 551.579878][T13026] lyz2: rxe_newlink: already configured on lo [ 552.030212][T13044] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2363'. [ 552.068060][T13041] x_tables: duplicate underflow at hook 3 [ 552.072454][T13044] netlink: 372 bytes leftover after parsing attributes in process `syz.5.2363'. [ 552.146477][T13053] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2367'. [ 555.841609][T13131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.852064][T13131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.120839][T13140] x_tables: duplicate underflow at hook 3 [ 559.565974][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 559.565991][ T28] audit: type=1400 audit(2000000124.680:4968): avc: denied { write } for pid=13160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 559.674804][T13180] loop5: detected capacity change from 0 to 128 [ 559.684535][ T28] audit: type=1400 audit(2000000124.770:4969): avc: denied { write } for pid=13182 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 559.737566][ T4515] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.745890][ T4515] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.800280][ T4515] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.820142][ T4515] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.887964][T13193] x_tables: duplicate underflow at hook 3 [ 559.968073][T13187] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 559.974867][T13187] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 559.999818][T13187] vhci_hcd vhci_hcd.0: Device attached [ 560.013276][T13196] vhci_hcd: connection closed [ 560.013504][ T4515] vhci_hcd vhci_hcd.0: stop threads [ 560.024656][ T4515] vhci_hcd vhci_hcd.0: release socket [ 560.030159][ T4515] vhci_hcd vhci_hcd.0: disconnect device [ 561.209437][T13208] x_tables: duplicate underflow at hook 3 [ 562.177219][T13206] VFS: Mount too revealing [ 562.513434][T13223] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2392'. [ 562.541122][ T28] audit: type=1400 audit(2000000127.660:4970): avc: denied { write } for pid=13209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.574271][T13228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.659848][ T28] audit: type=1400 audit(2000000127.780:4971): avc: denied { write } for pid=13230 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.710352][T13237] netlink: 'syz.0.2395': attribute type 1 has an invalid length. [ 562.794814][T13237] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2395'. [ 562.809746][T13237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2395'. [ 562.870239][T13248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2400'. [ 563.242309][T13252] x_tables: duplicate underflow at hook 3 [ 563.735036][T13259] netlink: 'syz.5.2403': attribute type 21 has an invalid length. [ 563.742992][T13259] IPv6: NLM_F_CREATE should be specified when creating new route [ 563.777666][T13264] loop5: detected capacity change from 0 to 128 [ 563.811740][T13264] 9p: Bad value for 'wfdno' [ 563.861615][T13264] loop5: detected capacity change from 0 to 512 [ 563.873043][T13264] EXT4-fs: Ignoring removed mblk_io_submit option [ 563.896803][T13264] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 563.908515][T13264] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 563.916988][T13264] EXT4-fs (loop5): orphan cleanup on readonly fs [ 563.925770][T13264] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2404: bg 0: block 361: padding at end of block bitmap is not set [ 563.940168][T13264] loop5: lost filesystem error report for type 5 error -117 [ 563.944257][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 563.958037][ C1] EXT4-fs (loop5): initial error at time 2000000129: ext4_validate_block_bitmap:441 [ 563.967447][ C1] EXT4-fs (loop5): last error at time 2000000129: ext4_validate_block_bitmap:441 [ 564.021788][T13264] EXT4-fs (loop5): Remounting filesystem read-only [ 564.159519][T13264] EXT4-fs (loop5): 1 truncate cleaned up [ 564.167735][T13264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 564.365975][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 564.413142][T13273] macvlan2: entered allmulticast mode [ 564.418577][T13273] batadv0: entered allmulticast mode [ 564.424515][T13273] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 564.488576][T13273] batadv0: left allmulticast mode [ 564.692952][T13281] x_tables: duplicate underflow at hook 3 [ 564.735161][T13282] x_tables: duplicate underflow at hook 3 [ 564.772970][T13275] loop5: detected capacity change from 0 to 8192 [ 564.936520][T13288] netlink: 'syz.4.2412': attribute type 1 has an invalid length. [ 564.967894][T13291] loop5: detected capacity change from 0 to 512 [ 565.003667][T13291] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2411: inode has both inline data and extents flags [ 565.067710][T13300] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2412'. [ 565.090504][T13291] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 565.090752][T13291] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2411: couldn't read orphan inode 15 (err -117) [ 565.099977][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 565.100004][ C0] EXT4-fs (loop5): initial error at time 2000000130: ext4_orphan_get:1397: inode 15 [ 565.100034][ C0] EXT4-fs (loop5): last error at time 2000000130: ext4_orphan_get:1397: inode 15 [ 565.137568][T13300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2412'. [ 565.160792][T13291] loop5: lost filesystem error report for type 5 error -117 [ 565.190873][T13291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.364696][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.227226][T13307] x_tables: duplicate underflow at hook 3 [ 566.906764][T13331] x_tables: duplicate underflow at hook 3 [ 567.147441][T13333] loop5: detected capacity change from 0 to 4096 [ 567.154859][T13333] EXT4-fs: Ignoring removed bh option [ 567.203916][T13335] x_tables: duplicate underflow at hook 3 [ 567.880445][T13315] netlink: 'syz.4.2418': attribute type 7 has an invalid length. [ 567.912660][T13315] netlink: 'syz.4.2418': attribute type 7 has an invalid length. [ 567.986629][ T4529] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.000282][ T4529] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.009176][ T4529] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.021214][T13333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.070887][T13333] EXT4-fs error (device loop5): ext4_empty_dir:3101: inode #12: block 80: comm syz.5.2422: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 568.091115][T13333] EXT4-fs (loop5): Remounting filesystem read-only [ 568.097782][T13333] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz.5.2422: directory missing '..' [ 568.117788][ T4529] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.153496][ T28] audit: type=1400 audit(2000000133.180:4972): avc: denied { write } for pid=13327 comm="syz.5.2422" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 568.496491][ T28] audit: type=1400 audit(2000000133.190:4973): avc: denied { write } for pid=13327 comm="syz.5.2422" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 568.576091][ T28] audit: type=1400 audit(2000000133.190:4974): avc: denied { write } for pid=13327 comm="syz.5.2422" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 568.642552][ T28] audit: type=1400 audit(2000000133.190:4975): avc: denied { rmdir } for pid=13327 comm="syz.5.2422" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 568.713288][ T28] audit: type=1400 audit(2000000133.230:4976): avc: denied { write } for pid=13327 comm="syz.5.2422" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 568.826053][ T28] audit: type=1400 audit(2000000133.230:4977): avc: denied { create } for pid=13327 comm="syz.5.2422" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 568.911646][T13345] netlink: 'syz.4.2428': attribute type 1 has an invalid length. [ 568.944058][ T28] audit: type=1400 audit(2000000133.230:4978): avc: denied { write } for pid=13327 comm="syz.5.2422" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 568.975369][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.054041][ T28] audit: type=1400 audit(2000000134.170:4979): avc: denied { accept } for pid=13346 comm="syz.2.2430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 569.061670][T13348] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2430'. [ 569.122503][T13345] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2428'. [ 569.131628][T13345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2428'. [ 569.305105][T13354] x_tables: duplicate underflow at hook 3 [ 570.043350][T13368] xt_hashlimit: size too large, truncated to 1048576 [ 570.204055][T13372] netlink: 'syz.1.2438': attribute type 3 has an invalid length. [ 570.464693][T13389] netlink: 'syz.2.2442': attribute type 1 has an invalid length. [ 570.520863][T13393] x_tables: duplicate underflow at hook 3 [ 570.718606][T13394] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2442'. [ 570.861227][T13394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2442'. [ 571.150196][T13402] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2454'. [ 571.162695][T13403] loop5: detected capacity change from 0 to 512 [ 571.176145][T13403] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #11: block 327694: comm syz.5.2444: lblock 0 mapped to illegal pblock 327694 (length 1) [ 571.205796][T13403] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 571.205938][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 571.221695][ C1] EXT4-fs (loop5): initial error at time 2000000136: ext4_map_blocks:791: inode 11: block 327694 [ 571.232305][ C1] EXT4-fs (loop5): last error at time 2000000136: ext4_map_blocks:791: inode 11: block 327694 [ 571.254913][T13403] EXT4-fs (loop5): 1 orphan inode deleted [ 571.267249][T13403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.715293][T13417] x_tables: duplicate underflow at hook 3 [ 572.340535][T13418] netlink: 'syz.5.2444': attribute type 7 has an invalid length. [ 572.370814][T13418] netlink: 'syz.5.2444': attribute type 7 has an invalid length. [ 572.378669][ T4529] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.396104][ T4529] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.416470][ T4529] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.436598][ T4529] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.797522][T13430] netlink: 'syz.4.2451': attribute type 1 has an invalid length. [ 572.956875][T13430] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2451'. [ 572.965962][T13430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2451'. [ 573.085983][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.419334][T13435] loop5: detected capacity change from 0 to 512 [ 573.909858][T13435] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2452: inode has both inline data and extents flags [ 574.048730][T13435] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 574.049983][T13435] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2452: couldn't read orphan inode 15 (err -117) [ 574.059535][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 574.059678][ C1] EXT4-fs (loop5): initial error at time 2000000139: ext4_orphan_get:1397: inode 15 [ 574.059859][ C1] EXT4-fs (loop5): last error at time 2000000139: ext4_orphan_get:1397: inode 15 [ 574.156539][T13435] loop5: lost filesystem error report for type 5 error -117 [ 574.164229][T13435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.279481][T13455] 9p: Bad value for 'wfdno' [ 574.293816][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.323903][ T28] audit: type=1326 audit(2000000139.430:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 574.354783][ T28] audit: type=1326 audit(2000000139.430:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 574.382371][ T28] audit: type=1326 audit(2000000139.430:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 574.449879][ T28] audit: type=1326 audit(2000000139.430:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 574.461051][T13459] loop5: detected capacity change from 0 to 1024 [ 574.515352][ T28] audit: type=1326 audit(2000000139.430:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 574.553060][T13453] x_tables: duplicate underflow at hook 3 [ 574.583901][ T28] audit: type=1326 audit(2000000139.430:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 574.616788][T13459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.742404][ T28] audit: type=1326 audit(2000000139.430:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 574.777688][ T28] audit: type=1326 audit(2000000139.430:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 574.834738][ T28] audit: type=1326 audit(2000000139.430:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 574.897398][ T28] audit: type=1326 audit(2000000139.430:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.2.2463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 575.373735][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.550167][T13478] netlink: 'syz.5.2467': attribute type 1 has an invalid length. [ 575.738325][T13484] netlink: 'syz.1.2469': attribute type 1 has an invalid length. [ 575.759591][T13484] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2469'. [ 575.790446][T13484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2469'. [ 575.880230][T13481] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2467'. [ 575.893208][T13481] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2467'. [ 576.148355][T13489] loop5: detected capacity change from 0 to 512 [ 576.186879][T13489] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2473: inode has both inline data and extents flags [ 576.217079][T13489] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 576.220484][T13489] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2473: couldn't read orphan inode 15 (err -117) [ 576.230317][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 576.230440][ C1] EXT4-fs (loop5): initial error at time 2000000141: ext4_orphan_get:1397: inode 15 [ 576.230587][ C1] EXT4-fs (loop5): last error at time 2000000141: ext4_orphan_get:1397: inode 15 [ 576.298598][T13489] loop5: lost filesystem error report for type 5 error -117 [ 576.390694][T13489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.523011][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.671571][T13500] 9p: Bad value for 'wfdno' [ 576.965129][T13506] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 577.085373][T13506] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 577.097181][T13510] netlink: 'syz.2.2478': attribute type 1 has an invalid length. [ 577.967016][T13510] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2478'. [ 577.983757][T13518] netlink: 'syz.4.2480': attribute type 1 has an invalid length. [ 578.006810][T13510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2478'. [ 578.150107][T13522] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2480'. [ 578.226596][T13522] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2480'. [ 578.911478][T13533] loop5: detected capacity change from 0 to 512 [ 578.991919][T13533] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2485: inode has both inline data and extents flags [ 579.111198][T13533] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 579.132137][T13533] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2485: couldn't read orphan inode 15 (err -117) [ 579.142869][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 579.142913][ C1] EXT4-fs (loop5): initial error at time 2000000144: ext4_orphan_get:1397: inode 15 [ 579.143111][ C1] EXT4-fs (loop5): last error at time 2000000144: ext4_orphan_get:1397: inode 15 [ 579.201350][T13533] loop5: lost filesystem error report for type 5 error -117 [ 579.202143][T13533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.305721][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.379135][T13551] loop5: detected capacity change from 0 to 764 [ 579.424750][T13551] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 579.470598][T13553] netlink: 'syz.2.2491': attribute type 1 has an invalid length. [ 579.487985][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 579.488005][ T28] audit: type=1400 audit(2000000144.590:5102): avc: denied { create } for pid=13550 comm="syz.5.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 579.499080][ T28] audit: type=1400 audit(2000000144.610:5103): avc: denied { connect } for pid=13550 comm="syz.5.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 579.586056][T13553] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2491'. [ 579.595153][T13553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2491'. [ 579.605203][T13551] Symlink component flag not implemented [ 579.611279][T13551] Symlink component flag not implemented (7) [ 579.630344][T13554] Symlink component flag not implemented (7) [ 579.663233][T13559] netlink: 'syz.2.2493': attribute type 1 has an invalid length. [ 580.707549][T13593] netlink: 'syz.2.2502': attribute type 1 has an invalid length. [ 580.755269][T13599] __nla_validate_parse: 5 callbacks suppressed [ 580.755288][T13599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2494'. [ 580.794620][T13593] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2502'. [ 580.804193][T13593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2502'. [ 580.809808][T13595] netlink: 'syz.0.2503': attribute type 3 has an invalid length. [ 581.066007][T13609] netlink: 'syz.2.2506': attribute type 1 has an invalid length. [ 581.167262][T13609] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2506'. [ 581.206391][T13610] xt_NFQUEUE: number of total queues is 0 [ 581.338904][T13609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2506'. [ 582.002721][T13621] netlink: 'syz.0.2520': attribute type 1 has an invalid length. [ 582.030929][T13616] x_tables: duplicate underflow at hook 3 [ 582.151142][T13626] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2520'. [ 582.168709][T13626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2520'. [ 582.214266][ T28] audit: type=1400 audit(2000000147.330:5104): avc: denied { connect } for pid=13630 comm="syz.1.2523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 582.234871][T13632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2523'. [ 582.236455][T13631] dvmrp1: entered allmulticast mode [ 582.258779][T13632] unsupported nlmsg_type 40 [ 584.175294][T13669] netlink: 'syz.1.2525': attribute type 1 has an invalid length. [ 584.393832][T13672] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2525'. [ 584.416725][T13672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2525'. [ 584.442105][T13668] x_tables: duplicate underflow at hook 3 [ 584.463971][ T28] audit: type=1326 audit(2000000149.570:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.2.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 584.521921][ T28] audit: type=1326 audit(2000000149.570:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.2.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 584.586295][ T28] audit: type=1326 audit(2000000149.570:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.2.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 584.595859][T13678] dvmrp1: entered allmulticast mode [ 584.650024][ T28] audit: type=1326 audit(2000000149.570:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.2.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 584.681642][ T28] audit: type=1326 audit(2000000149.570:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.2.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 584.727563][ T28] audit: type=1326 audit(2000000149.570:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.2.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 584.779787][ T28] audit: type=1400 audit(2000000149.570:5111): avc: denied { wake_alarm } for pid=13673 comm="syz.2.2526" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 584.803429][ T28] audit: type=1326 audit(2000000149.570:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.2.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 584.837756][ T28] audit: type=1326 audit(2000000149.570:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.2.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 584.873861][ T28] audit: type=1326 audit(2000000149.570:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.2.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 584.900206][ T28] audit: type=1326 audit(2000000149.570:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.2.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fee9fcacdd9 code=0x7ffc0000 [ 585.392217][T13700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.402521][T13700] team0: Port device bond0 added [ 585.763433][T13708] bridge0: port 3(team0) entered blocking state [ 585.770019][T13708] bridge0: port 3(team0) entered disabled state [ 585.776763][T13708] team0: entered allmulticast mode [ 585.782043][T13708] team_slave_0: entered allmulticast mode [ 585.787984][T13708] team_slave_1: entered allmulticast mode [ 585.793857][T13708] bond0: entered allmulticast mode [ 585.849265][T13708] bond_slave_0: entered allmulticast mode [ 585.898949][T13708] bond_slave_1: entered allmulticast mode [ 585.962287][T13708] team0: entered promiscuous mode [ 585.976019][T13708] team_slave_0: entered promiscuous mode [ 585.992874][T13708] team_slave_1: entered promiscuous mode [ 585.999062][T13708] bond0: entered promiscuous mode [ 586.004384][T13708] bond_slave_0: entered promiscuous mode [ 586.016590][T13708] bond_slave_1: entered promiscuous mode [ 586.140365][T13725] netlink: 'syz.4.2539': attribute type 1 has an invalid length. [ 586.439622][T13732] x_tables: duplicate underflow at hook 3 [ 586.640770][T13734] loop5: detected capacity change from 0 to 512 [ 586.879112][T13734] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2542: inode has both inline data and extents flags [ 586.922818][T13734] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 586.923878][T13734] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2542: couldn't read orphan inode 15 (err -117) [ 586.933505][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 586.933710][ C1] EXT4-fs (loop5): initial error at time 2000000001: ext4_orphan_get:1397: inode 15 [ 586.933861][ C1] EXT4-fs (loop5): last error at time 2000000001: ext4_orphan_get:1397: inode 15 [ 586.943163][T13725] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2539'. [ 586.980022][T13734] loop5: lost filesystem error report for type 5 error -117 [ 587.000076][T13734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.078679][T13725] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2539'. [ 587.093317][T13742] xfrm0 speed is unknown, defaulting to 1000 [ 587.103424][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.272528][T13742] lo speed is unknown, defaulting to 1000 [ 588.157666][T13742] lo speed is unknown, defaulting to 1000 [ 588.326746][T13763] xfrm0 speed is unknown, defaulting to 1000 [ 588.872824][T13774] loop5: detected capacity change from 0 to 8192 [ 588.882853][T13763] lo speed is unknown, defaulting to 1000 [ 588.935715][T13774] x_tables: duplicate underflow at hook 3 [ 588.960215][T13763] lo speed is unknown, defaulting to 1000 [ 589.159455][T13783] loop5: detected capacity change from 0 to 512 [ 589.171956][T13786] netlink: 'syz.0.2559': attribute type 1 has an invalid length. [ 589.219023][T13786] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2559'. [ 589.222222][T13783] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2557: inode has both inline data and extents flags [ 589.228173][T13786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2559'. [ 589.283698][T13783] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 589.284320][T13783] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2557: couldn't read orphan inode 15 (err -117) [ 589.315927][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 589.322450][ C0] EXT4-fs (loop5): initial error at time 2000000004: ext4_orphan_get:1397: inode 15 [ 589.331889][ C0] EXT4-fs (loop5): last error at time 2000000004: ext4_orphan_get:1397: inode 15 [ 589.332035][T13783] loop5: lost filesystem error report for type 5 error -117 [ 589.346398][T13783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.399188][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.699739][T13793] loop5: detected capacity change from 0 to 1024 [ 589.735835][T13793] EXT4-fs: Ignoring removed oldalloc option [ 589.741878][T13793] ext4: Unknown parameter 'appraise' [ 592.021998][T13791] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2561'. [ 592.282815][T13817] x_tables: duplicate underflow at hook 3 [ 592.360049][T13830] netlink: 'syz.1.2572': attribute type 1 has an invalid length. [ 592.386219][T13830] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2572'. [ 592.395288][T13830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2572'. [ 593.275373][T13856] loop5: detected capacity change from 0 to 512 [ 593.304320][T13856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 593.317507][T13856] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.679988][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 595.680008][ T28] audit: type=1400 audit(2000000002.150:5223): avc: denied { write } for pid=13853 comm="syz.5.2578" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 595.771066][T13876] siw: device registration error -23 [ 595.822271][ T28] audit: type=1400 audit(2000000002.190:5224): avc: denied { write } for pid=13853 comm="syz.5.2578" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 595.910822][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 595.914389][T13880] netlink: 'syz.4.2587': attribute type 1 has an invalid length. [ 596.097840][T13883] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2587'. [ 596.203796][T13891] x_tables: duplicate underflow at hook 3 [ 596.261582][T13882] loop5: detected capacity change from 0 to 8192 [ 596.283633][T13883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2587'. [ 596.383321][T13898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2592'. [ 596.407491][T13900] x_tables: duplicate underflow at hook 3 [ 597.448232][T13907] x_tables: duplicate underflow at hook 3 [ 599.741329][T13924] 8021q: adding VLAN 0 to HW filter on device bond3 [ 600.029263][T13932] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2599'. [ 600.560009][T13945] netlink: 'syz.2.2604': attribute type 1 has an invalid length. [ 600.814814][T13947] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2604'. [ 601.177118][T13947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2604'. [ 601.342291][ T28] audit: type=1400 audit(2000000007.790:5225): avc: denied { cmd } for pid=13951 comm="syz.5.2606" path="socket:[41406]" dev="sockfs" ino=41406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 601.411491][T13956] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2607'. [ 602.728209][T13975] x_tables: duplicate underflow at hook 3 [ 603.974320][T13978] loop5: detected capacity change from 0 to 128 [ 604.051070][T13978] bio_check_eod: 32 callbacks suppressed [ 604.051091][T13978] syz.5.2610: attempt to access beyond end of device [ 604.051091][T13978] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 604.103909][T13978] syz.5.2610: attempt to access beyond end of device [ 604.103909][T13978] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 604.137790][T13978] syz.5.2610: attempt to access beyond end of device [ 604.137790][T13978] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 604.166837][T13978] syz.5.2610: attempt to access beyond end of device [ 604.166837][T13978] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 604.194032][T13978] syz.5.2610: attempt to access beyond end of device [ 604.194032][T13978] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 604.239914][T13978] syz.5.2610: attempt to access beyond end of device [ 604.239914][T13978] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 604.267104][T13978] syz.5.2610: attempt to access beyond end of device [ 604.267104][T13978] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 604.296030][T13978] syz.5.2610: attempt to access beyond end of device [ 604.296030][T13978] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 604.325982][T13978] syz.5.2610: attempt to access beyond end of device [ 604.325982][T13978] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 604.351260][T13978] syz.5.2610: attempt to access beyond end of device [ 604.351260][T13978] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 605.614564][ T28] audit: type=1400 audit(2000000012.070:5226): avc: denied { create } for pid=13982 comm="syz.4.2612" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 605.676128][T13992] netlink: 'syz.5.2614': attribute type 10 has an invalid length. [ 605.711854][ T28] audit: type=1400 audit(2000000012.150:5227): avc: denied { search } for pid=13991 comm="syz.5.2614" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 605.740122][ T28] audit: type=1400 audit(2000000012.150:5228): avc: denied { search } for pid=13991 comm="syz.5.2614" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 605.779010][ T28] audit: type=1400 audit(2000000012.150:5229): avc: denied { search } for pid=13991 comm="syz.5.2614" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 605.801763][ T28] audit: type=1400 audit(2000000012.150:5230): avc: denied { write search } for pid=13991 comm="syz.5.2614" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 605.824889][ T28] audit: type=1400 audit(2000000012.150:5231): avc: denied { add_name } for pid=13991 comm="syz.5.2614" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 605.943593][T13999] hub 8-0:1.0: USB hub found [ 605.948483][T13999] hub 8-0:1.0: 8 ports detected [ 605.967633][T13999] netlink: 'syz.5.2615': attribute type 36 has an invalid length. [ 605.984023][T13999] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 605.994059][T13999] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 606.016419][T13999] netlink: 'syz.5.2615': attribute type 10 has an invalid length. [ 606.024411][T13999] ipvlan0: entered allmulticast mode [ 606.029970][T13999] veth0_vlan: entered allmulticast mode [ 606.037018][T13999] team0: Device ipvlan0 failed to register rx_handler [ 606.516143][ T28] audit: type=1400 audit(2000000012.150:5232): avc: denied { create } for pid=13991 comm="syz.5.2614" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 606.536571][ T28] audit: type=1400 audit(2000000012.550:5233): avc: denied { unlink } for pid=3308 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 606.589301][T14002] netlink: 'syz.4.2617': attribute type 1 has an invalid length. [ 606.623524][T14004] loop5: detected capacity change from 0 to 256 [ 606.687789][T14004] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 606.688798][T14008] veth0_vlan: entered allmulticast mode [ 606.710050][T14009] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2617'. [ 606.722270][T14007] xfrm0 speed is unknown, defaulting to 1000 [ 606.761276][T14007] lo speed is unknown, defaulting to 1000 [ 606.778604][T14008] veth0_vlan: left promiscuous mode [ 606.812289][T14008] veth0_vlan: entered promiscuous mode [ 606.820083][T14007] lo speed is unknown, defaulting to 1000 [ 606.876981][T14011] FAT-fs (loop5): error, invalid FAT chain (i_pos 196, last_block 8200) [ 606.905975][T14011] FAT-fs (loop5): Filesystem has been set read-only [ 606.931034][T14009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2617'. [ 607.663889][ T28] audit: type=1400 audit(2000000014.130:5234): avc: denied { getattr } for pid=14019 comm="syz.4.2624" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 607.973905][T14003] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2057) [ 608.175792][T14029] loop5: detected capacity change from 0 to 512 [ 608.214639][T14029] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 608.253233][T14029] EXT4-fs (loop5): 1 truncate cleaned up [ 608.269619][T14029] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.299464][ T28] audit: type=1400 audit(2000000014.770:5235): avc: denied { write } for pid=14028 comm="syz.5.2627" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 608.753015][T14046] x_tables: duplicate underflow at hook 3 [ 608.881352][T14050] xfrm0 speed is unknown, defaulting to 1000 [ 608.919308][ T28] audit: type=1400 audit(2000000015.390:5236): avc: denied { read } for pid=14028 comm="syz.5.2627" name="file0" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 608.981429][T14050] lo speed is unknown, defaulting to 1000 [ 609.009937][T14039] xfrm0 speed is unknown, defaulting to 1000 [ 609.035767][T14050] lo speed is unknown, defaulting to 1000 [ 609.211528][T14059] veth0_vlan: left allmulticast mode [ 609.770320][T14059] ip6gre1: left allmulticast mode [ 609.810313][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.867766][ T4500] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.876580][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.886095][T14039] lo speed is unknown, defaulting to 1000 [ 609.887471][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.912057][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.923732][T14130] syzkaller0: entered promiscuous mode [ 609.929517][T14132] netlink: 'syz.1.2641': attribute type 1 has an invalid length. [ 609.930082][T14130] syzkaller0: entered allmulticast mode [ 609.945915][T14132] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2641'. [ 609.963775][T14132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2641'. [ 610.007313][T14135] netlink: 'syz.1.2642': attribute type 1 has an invalid length. [ 610.369687][ T28] audit: type=1400 audit(2000000016.840:5237): avc: denied { module_load } for pid=14139 comm="syz.0.2644" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=41785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 610.443067][T14039] lo speed is unknown, defaulting to 1000 [ 610.471934][T14140] Invalid ELF header magic: != ELF [ 610.697365][T14150] netlink: 'syz.2.2646': attribute type 1 has an invalid length. [ 610.711279][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2646'. [ 610.727363][T14146] x_tables: duplicate underflow at hook 3 [ 610.933761][ T28] audit: type=1400 audit(2000000017.390:5238): avc: denied { mount } for pid=14147 comm="syz.0.2647" name="/" dev="rpc_pipefs" ino=41814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 611.213654][T14155] x_tables: duplicate underflow at hook 3 [ 611.706997][T14168] batadv_slave_0: Caught tx_queue_len zero misconfig [ 612.710316][T14177] netlink: 'syz.0.2655': attribute type 1 has an invalid length. [ 612.720875][ T28] audit: type=1400 audit(2000000019.190:5239): avc: denied { ioctl } for pid=14178 comm="syz.1.2656" path="socket:[42325]" dev="sockfs" ino=42325 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 612.741535][T14177] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2655'. [ 612.754914][T14177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2655'. [ 612.862089][T14171] loop5: detected capacity change from 0 to 764 [ 612.869665][T14171] rock: directory entry would overflow storage [ 612.875884][T14171] rock: sig=0x4654, size=5, remaining=4 [ 613.145523][ T28] audit: type=1400 audit(2000000019.610:5240): avc: denied { ioctl } for pid=14178 comm="syz.1.2656" path="socket:[42344]" dev="sockfs" ino=42344 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 613.460020][T14190] netlink: 'syz.0.2668': attribute type 1 has an invalid length. [ 613.477269][T14191] loop5: detected capacity change from 0 to 512 [ 613.656590][T14191] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2658: inode has both inline data and extents flags [ 613.673481][T14191] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 613.675901][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 613.691527][ C0] EXT4-fs (loop5): initial error at time 2000000020: ext4_orphan_get:1397: inode 15 [ 613.691796][T14190] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2668'. [ 613.700986][ C0] EXT4-fs (loop5): last error at time 2000000020: ext4_orphan_get:1397: inode 15 [ 613.710152][T14190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2668'. [ 613.719861][T14191] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2658: couldn't read orphan inode 15 (err -117) [ 614.266288][T14191] loop5: lost filesystem error report for type 5 error -117 [ 614.301296][T14191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.390439][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.410776][T14205] netlink: 'syz.1.2663': attribute type 1 has an invalid length. [ 614.478605][T14209] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2663'. [ 614.490987][T14209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2663'. [ 615.405962][T14219] loop5: detected capacity change from 0 to 512 [ 615.590373][T14219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.126069][T14233] xfrm0 speed is unknown, defaulting to 1000 [ 616.179013][T14234] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.2671'. [ 616.215312][T14233] lo speed is unknown, defaulting to 1000 [ 616.298982][T14233] lo speed is unknown, defaulting to 1000 [ 616.928818][T14242] x_tables: duplicate underflow at hook 3 [ 617.180256][T14248] netlink: 'syz.1.2676': attribute type 1 has an invalid length. [ 617.240404][T14248] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2676'. [ 617.259711][T14248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2676'. [ 618.754196][T14268] netlink: 'syz.1.2683': attribute type 1 has an invalid length. [ 618.775546][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.118297][T14269] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2683'. [ 619.167583][T14269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2683'. [ 619.333609][T14272] loop5: detected capacity change from 0 to 8192 [ 619.459529][T14275] netlink: 'syz.1.2695': attribute type 1 has an invalid length. [ 619.588136][T14280] ipvlan0: left allmulticast mode [ 619.593303][T14280] veth0_vlan: left allmulticast mode [ 620.450539][T14286] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2695'. [ 620.875548][ T28] audit: type=1400 audit(2000000026.660:5241): avc: denied { write } for pid=14281 comm="syz.2.2686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 620.875588][ T12] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.879101][ T4500] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.980644][ T4500] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.995898][T14294] netlink: 'syz.1.2689': attribute type 1 has an invalid length. [ 621.015494][ T4500] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.048603][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2689'. [ 621.125052][T14292] loop5: detected capacity change from 0 to 8192 [ 621.227306][T14300] x_tables: duplicate underflow at hook 3 [ 621.383624][T14309] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.2694'. [ 621.568757][T14313] loop5: detected capacity change from 0 to 164 [ 621.874740][T14340] netlink: 'syz.0.2699': attribute type 36 has an invalid length. [ 621.927187][T14341] netlink: 'syz.0.2699': attribute type 10 has an invalid length. [ 622.333149][T14344] netlink: 'syz.4.2700': attribute type 1 has an invalid length. [ 622.374847][T14344] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2700'. [ 622.384093][T14344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2700'. [ 622.509287][T14340] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 622.519256][T14340] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 622.530091][T14341] ipvlan0: entered allmulticast mode [ 622.535443][T14341] veth0_vlan: entered allmulticast mode [ 622.703072][T14389] netlink: 'syz.0.2711': attribute type 1 has an invalid length. [ 622.780524][T14389] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2711'. [ 622.789677][T14389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2711'. [ 622.964994][T14391] x_tables: duplicate underflow at hook 3 [ 623.024154][T14405] geneve3: left promiscuous mode [ 623.082049][T14408] loop5: detected capacity change from 0 to 8192 [ 623.126138][T14408] x_tables: duplicate underflow at hook 3 [ 623.190775][ T4515] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.200985][ T4515] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.260611][ T4515] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.279250][ T4515] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.288278][ T4515] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.297166][ T4515] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.306084][ T4515] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.314965][ T4515] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.186263][T14430] x_tables: duplicate underflow at hook 3 [ 624.914397][ T28] audit: type=1400 audit(2000000031.380:5242): avc: denied { read } for pid=14433 comm="syz.5.2713" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 625.131388][T14437] Invalid ELF header magic: != ELF [ 625.251002][T14452] loop5: detected capacity change from 0 to 512 [ 625.342760][T14452] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2717: inode has both inline data and extents flags [ 625.385730][T14452] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 625.396053][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 625.412364][ C1] EXT4-fs (loop5): initial error at time 2000000031: ext4_orphan_get:1397: inode 15 [ 625.422013][ C1] EXT4-fs (loop5): last error at time 2000000031: ext4_orphan_get:1397: inode 15 [ 625.432497][T14452] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2717: couldn't read orphan inode 15 (err -117) [ 625.452006][T14452] loop5: lost filesystem error report for type 5 error -117 [ 625.457543][T14452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.464742][ T28] audit: type=1400 audit(2000000031.920:5243): avc: denied { connect } for pid=14467 comm="syz.1.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 625.511006][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.563404][T14492] loop5: detected capacity change from 0 to 128 [ 625.651608][T14510] netlink: 'syz.1.2723': attribute type 36 has an invalid length. [ 625.667578][T14510] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 625.677547][T14510] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 625.700531][T14510] netlink: 'syz.1.2723': attribute type 10 has an invalid length. [ 625.708494][T14510] ipvlan0: entered allmulticast mode [ 625.713978][T14510] veth0_vlan: entered allmulticast mode [ 626.007048][T14512] veth0_vlan: left promiscuous mode [ 626.014584][T14512] veth0_vlan: entered promiscuous mode [ 626.855407][T14492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.888143][T14521] netlink: 'syz.1.2726': attribute type 1 has an invalid length. [ 626.907504][T14521] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2726'. [ 626.916595][T14521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2726'. [ 626.991227][T14492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.014651][T14523] x_tables: duplicate underflow at hook 3 [ 627.239017][T14538] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 627.253440][T14543] 9p: Bad value for 'rfdno' [ 627.617485][ T28] audit: type=1400 audit(2000000034.080:5244): avc: denied { mount } for pid=14544 comm="syz.1.2732" name="/" dev="hugetlbfs" ino=43000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 627.670140][ T28] audit: type=1400 audit(2000000034.090:5245): avc: denied { write } for pid=14544 comm="syz.1.2732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 627.754511][T14543] infiniband !yz2: set down [ 627.768070][T14543] infiniband !yz2: added veth0_to_batadv [ 627.815778][T14543] RDS/IB: !yz2: added [ 627.820544][T14543] smc: adding ib device !yz2 with port count 1 [ 627.827284][T14543] smc: ib device !yz2 port 1 has no pnetid [ 628.012261][ T4525] bio_check_eod: 2 callbacks suppressed [ 628.012298][ T4525] kworker/u8:20: attempt to access beyond end of device [ 628.012298][ T4525] loop5: rw=1, sector=145, nr_sectors = 89 limit=128 [ 628.154959][T14602] loop5: detected capacity change from 0 to 512 [ 628.197565][T14602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.244196][ T28] audit: type=1400 audit(2000000034.710:5246): avc: denied { write } for pid=14594 comm="syz.5.2735" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 628.312356][ T28] audit: type=1400 audit(2000000034.710:5247): avc: denied { unlink } for pid=14594 comm="syz.5.2735" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 628.505088][T14619] netlink: 'syz.0.2738': attribute type 1 has an invalid length. [ 628.580689][T14621] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2738'. [ 628.619664][T14621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2738'. [ 628.947143][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.319546][T14657] x_tables: duplicate underflow at hook 3 [ 630.005771][T14654] netlink: 308 bytes leftover after parsing attributes in process `syz.4.2737'. [ 630.380654][T14672] netlink: 'syz.2.2745': attribute type 1 has an invalid length. [ 630.466468][T14672] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2745'. [ 630.475571][T14672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2745'. [ 630.772596][T14681] Invalid ELF header magic: != ELF [ 630.954898][T14692] loop5: detected capacity change from 0 to 512 [ 630.990653][T14692] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2750: inode has both inline data and extents flags [ 631.006790][T14692] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 631.007704][T14692] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2750: couldn't read orphan inode 15 (err -117) [ 631.017159][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 631.017252][ C1] EXT4-fs (loop5): initial error at time 2000000037: ext4_orphan_get:1397: inode 15 [ 631.017342][ C1] EXT4-fs (loop5): last error at time 2000000037: ext4_orphan_get:1397: inode 15 [ 631.066386][T14697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'. [ 631.099415][T14692] loop5: lost filesystem error report for type 5 error -117 [ 631.108186][T14692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.224641][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.233834][T14690] x_tables: duplicate underflow at hook 3 [ 631.486068][T14703] GUP no longer grows the stack in syz.2.2753 (14703): 200000004000-20000000a000 (200000002000) [ 631.620700][T14703] CPU: 0 UID: 0 PID: 14703 Comm: syz.2.2753 Tainted: G W syzkaller #0 PREEMPT(full) [ 631.620762][T14703] Tainted: [W]=WARN [ 631.620771][T14703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 631.620787][T14703] Call Trace: [ 631.620796][T14703] [ 631.620807][T14703] __dump_stack+0x1d/0x30 [ 631.620837][T14703] dump_stack_lvl+0x95/0xd0 [ 631.620929][T14703] dump_stack+0x15/0x1b [ 631.620950][T14703] __get_user_pages+0x1b26/0x1f10 [ 631.621017][T14703] ? rcu_read_unlock_special+0x9f/0x200 [ 631.621060][T14703] ? __rcu_read_unlock+0x4e/0x70 [ 631.621085][T14703] get_user_pages_remote+0x1d5/0x6b0 [ 631.621123][T14703] __access_remote_vm+0x154/0x4c0 [ 631.621188][T14703] access_remote_vm+0x32/0x40 [ 631.621232][T14703] proc_pid_cmdline_read+0x32b/0x6b0 [ 631.621272][T14703] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 631.621304][T14703] vfs_readv+0x432/0x6e0 [ 631.621377][T14703] __x64_sys_preadv+0xfd/0x1c0 [ 631.621415][T14703] x64_sys_call+0x2915/0x3020 [ 631.621443][T14703] do_syscall_64+0x12c/0x3b0 [ 631.621474][T14703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.621559][T14703] RIP: 0033:0x7fee9fcacdd9 [ 631.621614][T14703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.621636][T14703] RSP: 002b:00007fee9e6ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 631.621664][T14703] RAX: ffffffffffffffda RBX: 00007fee9ff25fa0 RCX: 00007fee9fcacdd9 [ 631.621682][T14703] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 000000000000000b [ 631.621699][T14703] RBP: 00007fee9fd42d69 R08: 00000000fffffff9 R09: 0000000000000000 [ 631.621716][T14703] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 631.621765][T14703] R13: 00007fee9ff26038 R14: 00007fee9ff25fa0 R15: 00007ffdf0292e38 [ 631.621788][T14703] [ 631.847861][T14697] syz.1.2747 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 631.862746][T14697] CPU: 0 UID: 0 PID: 14697 Comm: syz.1.2747 Tainted: G W syzkaller #0 PREEMPT(full) [ 631.862787][T14697] Tainted: [W]=WARN [ 631.862839][T14697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 631.862853][T14697] Call Trace: [ 631.862878][T14697] [ 631.862887][T14697] __dump_stack+0x1d/0x30 [ 631.862916][T14697] dump_stack_lvl+0x95/0xd0 [ 631.862940][T14697] dump_stack+0x15/0x1b [ 631.862963][T14697] dump_header+0x80/0x240 [ 631.863012][T14697] oom_kill_process+0x295/0x350 [ 631.863057][T14697] out_of_memory+0x97d/0xb80 [ 631.863093][T14697] try_charge_memcg+0x62f/0xa10 [ 631.863214][T14697] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 631.863245][T14697] __alloc_frozen_pages_noprof+0x18a/0x350 [ 631.863296][T14697] alloc_pages_mpol+0xb3/0x260 [ 631.863326][T14697] alloc_pages_noprof+0x8f/0x140 [ 631.863355][T14697] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 631.863457][T14697] __kvmalloc_node_noprof+0x3d4/0x640 [ 631.863482][T14697] ? futex_hash_allocate+0x190/0x9a0 [ 631.863518][T14697] ? futex_hash_allocate+0x190/0x9a0 [ 631.863606][T14697] futex_hash_allocate+0x190/0x9a0 [ 631.863643][T14697] ? cap_task_prctl+0x13f/0x6b0 [ 631.863673][T14697] futex_hash_prctl+0xd8/0xf0 [ 631.863739][T14697] __se_sys_prctl+0x4f4/0x1400 [ 631.863773][T14697] __x64_sys_prctl+0x67/0x80 [ 631.863803][T14697] x64_sys_call+0x2533/0x3020 [ 631.863832][T14697] do_syscall_64+0x12c/0x3b0 [ 631.863924][T14697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.863958][T14697] RIP: 0033:0x7f8a447ecdd9 [ 631.863980][T14697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.864077][T14697] RSP: 002b:00007f8a43205028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 631.864160][T14697] RAX: ffffffffffffffda RBX: 00007f8a44a66180 RCX: 00007f8a447ecdd9 [ 631.864178][T14697] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 631.864195][T14697] RBP: 00007f8a44882d69 R08: 0000000000000000 R09: 0000000000000000 [ 631.864211][T14697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.864227][T14697] R13: 00007f8a44a66218 R14: 00007f8a44a66180 R15: 00007fff970b4f88 [ 631.864251][T14697] [ 631.864347][T14697] memory: usage 307200kB, limit 307200kB, failcnt 2371 [ 632.141725][T14712] netlink: 'syz.0.2755': attribute type 1 has an invalid length. [ 632.194703][T14697] memory+swap: usage 181376kB, limit 9007199254740988kB, failcnt 0 [ 632.213024][T14697] kmem: usage 165984kB, limit 9007199254740988kB, failcnt 0 [ 632.216914][T14712] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2755'. [ 632.225904][T14697] Memory cgroup stats for [ 632.229395][T14712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2755'. [ 632.233194][T14697] /syz1: [ 632.253860][T14697] cache 4096 [ 632.258319][T14709] xfrm0 speed is unknown, defaulting to 1000 [ 632.265420][T14697] rss 4096 [ 632.273491][T14697] shmem 0 [ 632.279829][T14697] mapped_file 4096 [ 632.288026][T14697] dirty 0 [ 632.293167][T14697] writeback 0 [ 632.300120][T14709] lo speed is unknown, defaulting to 1000 [ 632.300741][T14697] workingset_refault_anon 3098 [ 632.320919][T14697] workingset_refault_file 4059 [ 632.346840][T14697] swap 1347584 [ 632.353592][T14697] swapcached 22740992 [ 632.362159][T14697] pgpgin 528608 [ 632.369318][T14717] x_tables: duplicate underflow at hook 3 [ 632.375899][T14697] pgpgout 528606 [ 632.383971][T14697] pgfault 553428 [ 632.391216][T14697] pgmajfault 2633 [ 632.396264][T14697] inactive_anon 0 [ 632.400301][T14697] active_anon 4096 [ 632.404196][T14697] inactive_file 0 [ 632.408439][T14697] active_file 4096 [ 632.412330][T14697] unevictable 0 [ 632.415829][T14697] hierarchical_memory_limit 314572800 [ 632.421769][T14697] hierarchical_memsw_limit 9223372036854771712 [ 632.428275][T14697] total_cache 4096 [ 632.432078][T14697] total_rss 4096 [ 632.435689][T14697] total_shmem 0 [ 632.439491][T14697] total_mapped_file 4096 [ 632.443835][T14697] total_dirty 0 [ 632.447660][T14697] total_writeback 0 [ 632.451573][T14697] total_workingset_refault_anon 3098 [ 632.460841][T14697] total_workingset_refault_file 4059 [ 632.467209][T14697] total_swap 1347584 [ 632.472531][T14697] total_swapcached 22740992 [ 632.477893][T14697] total_pgpgin 528608 [ 632.483175][T14697] total_pgpgout 528606 [ 632.487678][T14697] total_pgfault 553428 [ 632.493030][T14697] total_pgmajfault 2633 [ 632.498230][T14697] total_inactive_anon 0 [ 632.503590][T14697] total_active_anon 4096 [ 632.508217][T14697] total_inactive_file 0 [ 632.513523][T14697] total_active_file 4096 [ 632.528259][T14697] total_unevictable 0 [ 632.534117][T14709] lo speed is unknown, defaulting to 1000 [ 632.539487][T14697] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2747,pid=14685,uid=0 [ 632.573842][T14697] Memory cgroup out of memory: Killed process 14685 (syz.1.2747) total-vm:96348kB, anon-rss:1232kB, file-rss:22404kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 633.395071][T14727] netlink: 'syz.2.2759': attribute type 1 has an invalid length. [ 633.426896][T14727] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2759'. [ 633.435985][T14727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2759'. [ 633.756087][T14738] x_tables: duplicate underflow at hook 3 [ 633.891487][T14737] veth0_vlan: left promiscuous mode [ 633.968190][T14737] veth0_vlan: entered promiscuous mode [ 635.670767][T14754] loop5: detected capacity change from 0 to 512 [ 635.683319][T14754] EXT4-fs: Ignoring removed oldalloc option [ 635.704176][T14754] EXT4-fs: Ignoring removed nomblk_io_submit option [ 635.731911][T14754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 635.765811][T14754] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 635.805602][T14754] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 635.842369][T14754] EXT4-fs (loop5): orphan cleanup on readonly fs [ 635.879495][T14754] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 635.928176][T14754] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 635.981755][T14754] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 636.006231][T14754] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2769: bg 0: block 40: padding at end of block bitmap is not set [ 636.142933][T14754] loop5: lost filesystem error report for type 5 error -117 [ 636.143089][T14754] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 636.150441][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 636.150469][ C0] EXT4-fs (loop5): initial error at time 2000000042: ext4_validate_block_bitmap:441 [ 636.150495][ C0] EXT4-fs (loop5): last error at time 2000000042: ext4_validate_block_bitmap:441 [ 636.237921][T14754] loop5: lost filesystem error report for type 5 error -117 [ 636.238117][T14754] EXT4-fs (loop5): 1 truncate cleaned up [ 636.279047][T14754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 636.298537][T14754] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.2769: bad symlink. [ 636.314982][T14754] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.2769: bad symlink. [ 636.346780][ T28] audit: type=1400 audit(2000000042.770:5248): avc: denied { read } for pid=14753 comm="syz.5.2769" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 636.539597][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.785062][T14779] loop5: detected capacity change from 0 to 512 [ 636.815666][T14782] xfrm0 speed is unknown, defaulting to 1000 [ 636.919373][T14779] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2775: inode has both inline data and extents flags [ 636.935820][T14782] lo speed is unknown, defaulting to 1000 [ 636.936788][T14756] xfrm0 speed is unknown, defaulting to 1000 [ 636.961458][T14779] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 636.965403][T14779] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2775: couldn't read orphan inode 15 (err -117) [ 636.974906][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 636.975158][ C1] EXT4-fs (loop5): initial error at time 2000000043: ext4_orphan_get:1397: inode 15 [ 636.975379][ C1] EXT4-fs (loop5): last error at time 2000000043: ext4_orphan_get:1397: inode 15 [ 637.058512][T14782] lo speed is unknown, defaulting to 1000 [ 637.080008][T14779] loop5: lost filesystem error report for type 5 error -117 [ 637.091200][T14779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.157944][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.161034][T14756] lo speed is unknown, defaulting to 1000 [ 637.209045][T14791] veth0_vlan: entered allmulticast mode [ 637.215359][T14791] veth0_vlan: left promiscuous mode [ 637.227976][T14791] veth0_vlan: entered promiscuous mode [ 637.420821][T14793] x_tables: duplicate underflow at hook 3 [ 637.464378][T14756] lo speed is unknown, defaulting to 1000 [ 638.104936][T14802] loop5: detected capacity change from 0 to 1764 [ 638.265600][T14810] netlink: 'syz.1.2783': attribute type 1 has an invalid length. [ 638.307889][T14810] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2783'. [ 638.317288][T14810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2783'. [ 638.514962][T14811] loop5: detected capacity change from 0 to 4096 [ 638.642203][T14811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.664457][ T28] audit: type=1400 audit(2000000045.130:5249): avc: denied { write } for pid=14801 comm="syz.5.2781" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 638.863979][T14811] ================================================================== [ 638.872218][T14811] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 638.879640][T14811] [ 638.881983][T14811] read-write to 0xffff88811af00908 of 8 bytes by task 4511 on cpu 0: [ 638.890060][T14811] __xa_clear_mark+0xf5/0x1e0 [ 638.894753][T14811] __folio_end_writeback+0xf4/0x360 [ 638.900055][T14811] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 638.906325][T14811] folio_end_writeback+0x1c/0x70 [ 638.911291][T14811] ext4_finish_bio+0x450/0x760 [ 638.916080][T14811] ext4_release_io_end+0x9f/0x1f0 [ 638.921125][T14811] ext4_end_io_end+0x18d/0x240 [ 638.925903][T14811] ext4_end_io_rsv_work+0x15b/0x1f0 [ 638.931119][T14811] process_scheduled_works+0x4f0/0x9c0 [ 638.936598][T14811] worker_thread+0x58a/0x780 [ 638.941207][T14811] kthread+0x22a/0x280 [ 638.945371][T14811] ret_from_fork+0x146/0x330 [ 638.949982][T14811] ret_from_fork_asm+0x1a/0x30 [ 638.954763][T14811] [ 638.957092][T14811] read to 0xffff88811af00908 of 8 bytes by task 14811 on cpu 1: [ 638.964730][T14811] xas_find_marked+0x213/0x620 [ 638.969514][T14811] filemap_get_folios_tag+0xfa/0x430 [ 638.974824][T14811] file_write_and_wait_range+0x20c/0x2f0 [ 638.980472][T14811] mmb_fsync_noflush+0x48/0x140 [ 638.985331][T14811] ext4_sync_file+0x1f1/0x6b0 [ 638.990019][T14811] vfs_fsync_range+0xc5/0xe0 [ 638.994621][T14811] ext4_buffered_write_iter+0x447/0x4c0 [ 639.000209][T14811] ext4_file_write_iter+0xbff/0xfa0 [ 639.005429][T14811] do_iter_readv_writev+0x4fd/0x5a0 [ 639.010645][T14811] vfs_writev+0x2e1/0x900 [ 639.014979][T14811] __se_sys_pwritev2+0xfc/0x1c0 [ 639.019847][T14811] __x64_sys_pwritev2+0x67/0x80 [ 639.024720][T14811] x64_sys_call+0xe07/0x3020 [ 639.029330][T14811] do_syscall_64+0x12c/0x3b0 [ 639.033934][T14811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.039848][T14811] [ 639.042178][T14811] value changed: 0xfffffffffffffffe -> 0xfffffffffff00000 [ 639.049288][T14811] [ 639.051618][T14811] Reported by Kernel Concurrency Sanitizer on: [ 639.057776][T14811] CPU: 1 UID: 0 PID: 14811 Comm: syz.5.2781 Tainted: G W syzkaller #0 PREEMPT(full) [ 639.068751][T14811] Tainted: [W]=WARN [ 639.072646][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 639.082705][T14811] ================================================================== [ 639.114583][T14816] netlink: 'syz.0.2785': attribute type 1 has an invalid length. [ 639.127161][T14816] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2785'. [ 639.136344][T14816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2785'. [ 639.193737][ T7993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.