last executing test programs: 17m36.426499652s ago: executing program 32 (id=126): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b8008000a"], 0x184}}, 0x0) (async) r2 = syz_io_uring_setup(0x1efb, &(0x7f0000000140)={0x0, 0x729, 0x3010, 0x0, 0x1}, &(0x7f0000000100), &(0x7f0000000480)) (async) r3 = epoll_create(0xaf2) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) epoll_pwait(r3, &(0x7f00000002c0)=[{}], 0x1, 0x80000001, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000200f}) 17m13.099790939s ago: executing program 33 (id=376): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0xfffd, 0xa, 0x20, 0x30, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@remote, 0x4, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x3}}, 0xe8) sendmmsg$inet6(r1, &(0x7f00000090c0)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet6(r1, &(0x7f00000090c0)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) (async) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000400)="a6c68f1b", 0x4}, {0x0}], 0x2) (async) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000400)="a6c68f1b", 0x4}, {0x0}], 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000080)=0x1) (async) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000080)=0x1) 17m10.111768074s ago: executing program 34 (id=408): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x2) (fail_nth: 1) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0x0) 17m6.555960309s ago: executing program 35 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) 17m6.023132236s ago: executing program 36 (id=439): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) r9 = eventfd(0x3ff) io_submit(r8, 0x7, &(0x7f0000001a00)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0xfffd, r6, 0x0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f0000000240)="29c6254f565f4fcbcdc6a3a5ddd70a31832751d1519127a8eac2", 0x1a, 0x9, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x4, r6, &(0x7f00000005c0)="abc49d2718b9fc533f02d93cd2f9f8754fd6e743e78068ed3ce81d130014cdcda0b7db16d1af3be6695eff466c8f669f23", 0x31, 0x8000, 0x0, 0x3, r9}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, r3, &(0x7f00000006c0)="3437e7a06daa6b557c850184dc46aa47225ef38b1b86965e3a348cf049b01ac20d662c8847265335ac1d31e33e7c016ab8f78d97abbf3912dee9fb71ccb5a2a4cf9d9098da1036b9750bbdc6445dbccda29b0d457974e0712d9fd578ebb634136fb463edb49de167097ff2ee49cb797b69ffe0bb2b182329834ff9e752d3ba0568c88606ee8b6121a511ba60718b0c573059c1b2daa01c1a98fbbf4e0e89837852255e819d9f0b754a", 0xa9, 0x0, 0x0, 0x3, r9}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, &(0x7f0000000800)="d11cc99011643ea7c4d59c544405327f68cb9f046991dece140e3feb50971a", 0x1f, 0x7, 0x0, 0x1}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f0000000880)="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", 0x1000, 0x7, 0x0, 0x1}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x3ff, r9, &(0x7f0000001a40)="74f0f28abae241f1d2e82d9eaca27c593275ddea9124b3a74eab030a55e4e7dd438435bd2e6767fc8b224387488d7609389dc4205a0a7796f00c59d895599a8f4990a0573de33aa72294912d01904b19174fac3528e36c1c737e220931cc311e61ac7581556f9f035288a8b80d316d402d57fb1569eeb2da10826ea88786fc2dbcbbb3136b555c67a40913bbed464489c9ff4d435ee502c71cbd752cfb8c6561e6c949d24bbc974a785285305d3be9d963a1", 0xb2, 0x1, 0x0, 0x2, r9}]) write(r6, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0) connect$unix(r7, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0x6, 0xb}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x48, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x1ff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x5}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x3ff}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x78}}, 0x8000) sendto$packet(r10, &(0x7f0000000440)="bad330752181510000316f3a277f953286ddd1dc9119f98ce83de525e4a40e81692d09dc", 0x5ea, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @remote}, 0x14) 16m59.457378588s ago: executing program 37 (id=502): r0 = io_uring_setup(0x1684, &(0x7f0000000200)={0x0, 0x3a2b, 0x8, 0x4, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)=""/102, 0x66}], 0x0, 0x1}, 0x20) 16m55.966794128s ago: executing program 38 (id=530): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000003000004000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x54d, &(0x7f0000000540)={0x0, 0x735d, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd_index=0x6, 0xffffffffffffff7f, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x118, 0x0, 0x0, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8936, 0x0) 16m50.40488359s ago: executing program 39 (id=584): socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write(r1, &(0x7f00000002c0)="fe", 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x503, &(0x7f0000000740)="$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") setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 16m38.287145704s ago: executing program 40 (id=674): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xfffc, 0x400}, 0x90) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv4={0x800, @icmp={{0x1c, 0x4, 0x1, 0x2, 0x78, 0x66, 0x0, 0x40, 0x1, 0x0, @loopback, @local, {[@generic={0x89, 0x11, "f2872af1a41e1d84d5ea679f1d214b"}, @ssrr={0x89, 0xb, 0xe6, [@multicast2, @local]}, @timestamp_prespec={0x44, 0x34, 0x4b, 0x3, 0x0, [{@multicast2, 0xfffffffe}, {@multicast1, 0x7}, {@private=0xa010102}, {@multicast2}, {@broadcast, 0x2}, {@private=0xa010102, 0x5}]}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, @address_reply={0x12, 0x0, 0x0, 0x8}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000340)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x4000084, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x7}, 0x50) fallocate(r0, 0x6, 0x9, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) 14m13.067761682s ago: executing program 41 (id=2203): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}}, 0xc, 0x4, 0x3, 0xd, 0x2, 0xd9}, &(0x7f00000002c0)=0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x5, 0x800e, 0x1000, 0x10000, r1}, 0x10) symlink(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x78}, 0x1, 0xffffffff00000003}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_ACTIVATE(r3, 0x5606, 0xe06) umount2(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) r4 = socket$kcm(0x29, 0x7, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000340), 0x4) sendmmsg$inet(r0, &(0x7f0000002dc0)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000800)=[{&(0x7f00000003c0)="eb57fd", 0x3}], 0x1}}], 0x1, 0x0) 13m18.144232239s ago: executing program 42 (id=2605): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) epoll_create1(0x80000) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x1fc5ad4a, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)='^', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) io_uring_setup(0x652c, &(0x7f0000000380)={0x0, 0x3566, 0x4, 0x3, 0x128}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 10m30.796008388s ago: executing program 43 (id=3702): r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10088}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x12000) (async) r3 = inotify_init1(0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000340)={0x6, r3, 'id1\x00'}) (async) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001c00108008000340000000090800024000000001080001"], 0x54}, 0x1, 0x0, 0x0, 0x8c04}, 0x40c0) (async) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x801750, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") 10m21.188984598s ago: executing program 44 (id=3778): r0 = epoll_create1(0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'security.', '*\x1d\v\x00'}, &(0x7f0000000080)=""/136, 0x88) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106452, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) r2 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x6}, 0x410, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca48de2c8afc31232034c834cdc4586231d4cd7fcc6c6ad00"}, 0x48}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) r3 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r3}) io_uring_enter(r3, 0x66ab, 0x4, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0xc, 0xd, 0xd, 0x40, 0x0, 0xfffffffffffffff9, 0xd42, 0xd, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x1000, 0x8000000000000000, 0x7ff, 0x1, 0x8, 0x6, 0xf90, 0x0, 0x3, 0x0, 0x2}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0xfffffe23, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 10m12.405325657s ago: executing program 45 (id=3832): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc1, &(0x7f000000cf3d)=""/193, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) lsetxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@md5={0x1, "69d6f82d661898c80003c7cf41365dbb"}, 0x11, 0x3) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) setxattr$incfs_metadata(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x0, 0x2) syz_emit_ethernet(0x26, &(0x7f00000000c0)={@random="e904a200", @remote, @val={@void, {0x8100, 0x5, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x3, 0x14, 0x68, 0x0, 0x5, 0x3c, 0x0, @local, @empty}}}}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) ppoll(&(0x7f0000000200)=[{r1, 0x2100}, {r0, 0x48}, {r1, 0xa08a}, {r0, 0x14}], 0x4, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x3]}, 0x8) 10m12.26309988s ago: executing program 46 (id=3834): unshare(0x6060600) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x82) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000005, 0x8031, r2, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4e, 0x10000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) 10m11.193059405s ago: executing program 47 (id=3840): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @mcast1, 0x7}]}, &(0x7f0000000180)=0x10) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x10) 10m2.726314095s ago: executing program 48 (id=3885): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r0 = io_uring_setup(0x516, &(0x7f0000000540)={0x0, 0x7dc6, 0x1, 0x503fa, 0x8100014a}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = epoll_create1(0x0) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000340)={0x90000019}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) migrate_pages(0x0, 0x8, &(0x7f0000000040)=0x35f4, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000980)=@newtaction={0x48, 0x32, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x30}}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}}, 0x4000) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x4008032, 0xffffffffffffffff, 0xb89de000) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_driver={0x7e4f, 0x1000, &(0x7f0000000200)="787bf4aefd6dc37416e778875e3af3ed958ab8701972a3e9392ae666493a4ffa117701c05a7eee1f0bfb1cfa"}) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r4, &(0x7f0000000040)=""/148, 0xffffff96) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000b0000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000031d4f162000000000000000000"], 0x48) (async) socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 9m47.196079091s ago: executing program 1 (id=3957): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000540)='io.pressure\x00', 0x2, 0x0) splice(r0, &(0x7f0000000500)=0x3, r1, &(0x7f0000000580)=0x539, 0xa197, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x19) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x3, 0xf3, 0x6, 0x3}, {0xc, 0x6, 0x8, 0x4000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x1d, r5}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)={0x7, 0x20, 0x4b084d61, {}, {r6, r7/1000+10000}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1}, 0x39, 0x7, 0x0, 0x0, "c2b0557c76482c2714019881343bd2579b26b34084af8621559f5e22ed49dae5c9d04351deb4ecf9f6c0c27b935ac4bcfa5986e5e956e44e89671f03df7e6aa7"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20040084) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r4, 0x0, 0x0) r8 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffa000/0x3000)=nil) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) shmctl$IPC_RMID(r8, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 9m47.052229504s ago: executing program 1 (id=3960): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, r0}}, 0x48) 9m46.928066305s ago: executing program 1 (id=3961): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = dup(0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x74) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) fcntl$setown(r1, 0x8, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x1, 0x0, 0x10000, 0x2, 0x4, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xdfffffffffffffff, r3, 0x1) socket$kcm(0x29, 0x2, 0x0) 9m45.598282582s ago: executing program 1 (id=3963): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x20000801) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES8=r0], 0x68}, 0x1, 0x0, 0x0, 0x4840}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c48, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x1, &(0x7f0000000180)=ANY=[@ANYRES16=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x207, &(0x7f0000000000), 0x1, 0x471, &(0x7f0000000580)="$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") r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 9m45.054272751s ago: executing program 1 (id=3964): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x165) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) syz_emit_ethernet(0x140, &(0x7f0000000280)={@multicast, @random="002fc8304208", @val={@void, {0x8100, 0x3, 0x1}}, {@mpls_mc={0x8848, {[{0x5}, {0x7, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x9, 0x0, 0x1}], @ipv4=@dccp={{0x11, 0x4, 0x2, 0x35, 0x11e, 0x66, 0x0, 0xc, 0x21, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0xb4, 0x0, 0xc, [0xff2, 0x3, 0x3, 0x0, 0x5]}, @rr={0x7, 0xf, 0xf, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {{0x4e24, 0x4e23, 0x4, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, "a66ace", 0x4, "67d69f"}, "a2f58184fcb57893328e07837c3e06004e2a8aadf37abc891a36f15f20b240dcc1ac754469134c2abb10e81a0413ae8b331cb13fc885f9b7ce0b7887dc60ac2fdc779211f112dccca4894412088cf2fe0c1ec1bf70ed188a6a93f68cda9766470dd54a2843dad3576420b6336fc73949a7c9f6db870e0b311f963460997ed3d167f25524d75598e8bd73655c1d37fc3629a47f6941bc212cd8eeffde04d82a4e9d423d586a9fcbc0580dfba7383d49948628db99f21ee0a3cb0a46b456f08234527c9371166eecd43356"}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, '\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0xfff, 0x6, 0x2, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x800) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) r9 = accept4$x25(r3, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x1800) fcntl$dupfd(r3, 0x406, r9) openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) 9m44.320133325s ago: executing program 1 (id=3973): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0)={[{@init_itable_val={'init_itable', 0x3d, 0xe94}}, {@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0xb}}, {@errors_remount}]}, 0x2, 0x571, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x42, 0x151) 9m44.298305538s ago: executing program 49 (id=3973): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0)={[{@init_itable_val={'init_itable', 0x3d, 0xe94}}, {@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0xb}}, {@errors_remount}]}, 0x2, 0x571, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x42, 0x151) 5m22.400648955s ago: executing program 6 (id=5944): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x32, 0x1a, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) bpf$MAP_CREATE(0x0, 0x0, 0x0) acct(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00') socketpair(0x8, 0x2, 0xffffffff, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x3c}}, 0x0) 5m22.082256052s ago: executing program 6 (id=5950): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x334, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0xf, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149", 0x13) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1203, 0x48a4d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) unshare(0x2040400) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x1b3, 0x0) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x98, &(0x7f0000000080)={0xffffffff, 0x0, 0xa}}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') getdents64(r8, &(0x7f0000002f40)=""/4098, 0x1002) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 5m21.117376958s ago: executing program 6 (id=5960): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x10, 0x9}, {}, {0xfe}, @raw32}], 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) 5m21.018150687s ago: executing program 6 (id=5961): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5m21.017949527s ago: executing program 6 (id=5962): socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) unshare(0x2040600) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x408cd, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00') lseek(r1, 0x339, 0x4000000) 5m20.692752926s ago: executing program 6 (id=5964): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x44000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x3, 0x7}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x3, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) shmctl$IPC_RMID(0x0, 0x0) 5m20.660774109s ago: executing program 50 (id=5964): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x44000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x3, 0x7}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x3, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) shmctl$IPC_RMID(0x0, 0x0) 4m17.495426106s ago: executing program 4 (id=6700): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x0, 0x80ffffff, [@sadb_x_sec_ctx={0x1, 0x18, 0x9f, 0x6}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x800, @empty, 0x1}}]}, 0x40}, 0x1, 0x7}, 0x0) 4m17.440077811s ago: executing program 4 (id=6703): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="f6ac50b8785adb2f7ccddb98b56a2bba2d1d927ff3eaf66b401dc88b625f28211c728cbe64b519be24354d208cd25758d7d675a90857236facc694bf54f400ab43fc62fd263278819684d15ac75bdd97038b6c066dcba44f409cb3815ba7b763722399b7cede88f822659b2526dbdb7409b5a52ed3cd71093cc4331baeb7c2bfa868f82c27dc60abaf9e67c55453640753b36d7c4eb505b1258e80ac1529248e2400d23ed5a82543345cdbf10422aa32f2bc762bc452cd10d14b67a8226a43f3d3a4146a9fe94327acb809f40aec7269d7f66c7b7d92c7fffcb5ee3ae1eb15317f31db0ab5936f4098f0b6b5448ce643cdc353", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000,\x00']) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRES16=r1], 0x15) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000044) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = epoll_create1(0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000001c0)={0x60000015}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000000)={0x0, 0x100000000000}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x4000891) 4m17.414942143s ago: executing program 4 (id=6704): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000000)=[{r0, 0x2210}], 0x1, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$read(0xb, r5, &(0x7f0000000200)=""/4, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) unshare(0x2040680) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="070000010000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window], 0x5) 4m16.447977048s ago: executing program 4 (id=6709): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x32000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc408, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7010008d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec59c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f5", @ANYRESDEC, @ANYRES64], 0x0, 0x310, &(0x7f00000003c0)="$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") r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0x60}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3f}}}}]}]}, 0x84}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000700)={0x0, 0x5, 0xfffffffa}, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c040000", @ANYRES16=r4, @ANYBLOB="bbfb2bbd7000fddbdf25670000000c009900cb000000370000000800c300ffffffff2400c5007214418875c9eeafd2baa423f4edf3922705e9a8b86536965e65b36cac050a60"], 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x80) 4m15.991070919s ago: executing program 4 (id=6717): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000a6d7721600000000ff00000085000000a00000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000002000000850000001700000095"], 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0xfffff3ff, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c7ffffc826a8", 0x0, 0x3a, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = epoll_create(0x7fffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x6, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = io_uring_setup(0x177f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) write$tcp_mem(r5, &(0x7f0000000340)={0x0, 0x2d, 0x1, 0x3a, 0x5, 0x2c}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$poke(0x4212, r8, &(0x7f0000000140), 0x200000000001) sched_getscheduler(r8) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) read(r7, &(0x7f0000000300)=""/207, 0xfdef) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x62, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1002, 0x7cf}, 0x0, 0x0, 0x0, 0x8, 0x802, 0x7fffff7f, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ptrace$peeksig(0x4209, r8, &(0x7f00000000c0)={0x1, 0x0, 0x3}, &(0x7f0000000440)=[{}, {}, {}]) 4m15.504139862s ago: executing program 4 (id=6734): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x239, &(0x7f0000000040)={0x0, 0x7b3c, 0x10100, 0x700}, &(0x7f00000002c0), &(0x7f0000000000)) 4m15.503871802s ago: executing program 51 (id=6734): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x239, &(0x7f0000000040)={0x0, 0x7b3c, 0x10100, 0x700}, &(0x7f00000002c0), &(0x7f0000000000)) 1m53.136465888s ago: executing program 5 (id=8977): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x20000080) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000180)={0x0, 0x47, 0xa}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) 1m53.043647696s ago: executing program 5 (id=8981): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) 1m53.011407349s ago: executing program 5 (id=8983): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000068000100000000000000000002000000000000000c000880050005000000000008000500", @ANYRES32=0x0, @ANYBLOB="060007"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m52.979906931s ago: executing program 5 (id=8985): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0x5e, &(0x7f0000001040)=ANY=[@ANYBLOB="6eeb31c8b175546c79cb678cb171ca2161336068a37944f7441dc11279427a0ccc044d5d5d8304d32d5934346966b778c0f6d8b092eddef350a6e992b6e5d8b5577aa4985cabcb5a023ba90124a568164d6a3e3a1b44c293a55c4daac659d27303bb6e71163f184b22c33dc561d1bc44249c478235ce2f60dfadccbfed808dbf5651110fb2c9d47404513856638b4d7ad756f8c7b3d9c16cc4ce40e9ff3ac458168fdd740edb3149c78bc7ba22494f1a747156327cc3bbc36ade2ec75b96dafe8dc983e1f4a531f779d26a40e7", @ANYRES64=r1, @ANYBLOB="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", @ANYRES64=r1, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m52.786431559s ago: executing program 5 (id=8991): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x400) ioctl$KDADDIO(r1, 0x4b34, 0x2) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m52.155473845s ago: executing program 5 (id=9006): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x8402, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x100328, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000100db07000000000000420866"], 0x2c}}, 0x24004040) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 1m52.136993487s ago: executing program 52 (id=9006): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x8402, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x100328, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000100db07000000000000420866"], 0x2c}}, 0x24004040) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 20.014411627s ago: executing program 9 (id=10275): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000240)=0x1, 0x4) 19.657026619s ago: executing program 9 (id=10284): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x22020400) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x781c81, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000080)={{r2}, 0x8, 0x0, 0x1}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xe80a1, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$KDFONTOP_COPY(r4, 0x4b72, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89fb, &(0x7f00000000c0)={'bond0\x00', @random="0600002000"}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$nfc_llcp(r9, 0x118, 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd0, 0x0, 0x0) 19.42369144s ago: executing program 9 (id=10286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 19.421515501s ago: executing program 9 (id=10287): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0000007f0d000004000000ff00000010200000", @ANYRES32=0x1, @ANYBLOB="c30b000000000002000023000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000500"/28], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f0000000c00)="$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") r1 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="240000000000000001"], 0x28}}], 0x1, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x42000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ee47f54a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000080000aa850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sync_file_range(r2, 0x9, 0x40000fe, 0x7) setresuid(0xee01, 0xee00, 0x0) unshare(0x6020480) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f0000000600)) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 19.255130936s ago: executing program 9 (id=10288): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000004000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x1100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r1], 0x1}, 0x58) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x42000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000330], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0xfffff9, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="00820101050000008520000004000000185a0000100000000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff181600004015cca5de5f0274c72cc17be31f8f79acaec5c0dd87b0b7f0d7ed085df3c2d35b9a", @ANYRES32=r3, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r3, r3, r3, r3, 0xffffffffffffffff, r3], 0x0, 0x10, 0xfffffffe}, 0xc3) r4 = io_uring_setup(0x1692, &(0x7f0000000080)={0x0, 0x94d7, 0x0, 0x4, 0x94}) socket$kcm(0xa, 0x922000000003, 0x11) r5 = socket$kcm(0x10, 0x2, 0x4) setresuid(0xee00, 0xee00, 0xee01) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setreuid(0xffffffffffffffff, 0xee01) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) setresuid(0x0, 0xee00, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000005000)=""/4119, 0x3f5d9f}], 0x100000000000011a) open(&(0x7f0000000080)='./file0\x00', 0x60400, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp(0x2, 0x2, 0x73) 18.873683731s ago: executing program 9 (id=10293): r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0xa000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='(\"@]K@{.\"\x00') 18.812787186s ago: executing program 53 (id=10293): r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0xa000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='(\"@]K@{.\"\x00') 3.083867229s ago: executing program 0 (id=10531): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050009000000000005002000010000000500080000000000"], 0x7c}}, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 2.971753789s ago: executing program 0 (id=10534): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2711}, 0x10) r1 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@noacl}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@sysvgroups}]}, 0x7e, 0x44e, &(0x7f0000000900)="$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") creat(&(0x7f0000000080)='./bus\x00', 0x89) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a0004aa"], 0x68}}, 0x64000004) r4 = syz_io_uring_setup(0x7ca0, &(0x7f00000000c0)={0x0, 0xf561, 0x2, 0x8000, 0xc00251}, &(0x7f0000000240), &(0x7f0000000300)) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2.910661065s ago: executing program 2 (id=10535): syz_emit_ethernet(0x68, &(0x7f0000000280)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x2]}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}, 0x1, {0x1000000}}}}}}}}, 0x0) 2.874538338s ago: executing program 2 (id=10536): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 2.840828461s ago: executing program 2 (id=10537): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f73794", 0x0, 0x0, 0x0, 0x6}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, 0x0, 0x0}, 0x20) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0xffffffff, {0x2, 0x0, 0x0, 0x0, {0x4}, {0x5, 0x1}, {0x0, 0x8}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0x1fc, 0x80000a, 0x0, 0x1, 0x400}}, {0x4}}, {{0x1c, 0x1, {0x8, 0xc, 0x1c, 0xd, 0x1, 0xa, 0xffffffff}}, {0x4}}]}]}, 0x68}}, 0x0) r2 = syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x1000, 0x1, 0x69}, &(0x7f0000000500)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x22, 0x0, @fd_index=0x8, 0x1, 0x0, 0xf4, 0x0, 0x1, {0x0, r6}}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0) 2.74413247s ago: executing program 2 (id=10538): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0x1, 0x5516, 0x205}) 2.699170924s ago: executing program 2 (id=10540): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_emit_ethernet(0x16, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@llc={0x4, {@snap={0x0, 0x1, "7f", "7252eb", 0xd}}}}}, 0x0) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a006003bbbbbbbbbbbbffffffffffff86dd6738960c00103c00fe8000000000000000000100000000aafc0100000000000000000000000000002c000000000000003300000000000000"], 0x4a) stat(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r1) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) syz_emit_ethernet(0x16, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@llc={0x4, {@snap={0x0, 0x1, "7f", "7252eb", 0xd}}}}}, 0x0) (async) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a006003bbbbbbbbbbbbffffffffffff86dd6738960c00103c00fe8000000000000000000100000000aafc0100000000000000000000000000002c000000000000003300000000000000"], 0x4a) (async) stat(0x0, 0x0) (async) 2.606981203s ago: executing program 8 (id=10541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xfffffff8}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x7ffffffe, 0x0, 0x0, 0x8840}, 0x0) 2.52410148s ago: executing program 2 (id=10542): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x7, 0x0, 0xfffffffffffffffc, 0x5, 0x2000000001a0, 0x1], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRES8, @ANYBLOB="03181de0a7c35b8456f0328e08fc363ec3be717d452c9784e63dba8e5fc13958fdfa98cfe345645d11bc2f14dec76d7a5ea5a349c5b83e8387192d740caf6be9073416d9aa86b2b3593a00ba49aa4382e97a9d424f78e8b4ff734ccb3d1873f1febc7fc10ca2d0da59a1cc819962657360e6dc419793a105600792d475ea85ede57e86871d6aca9bf2d7dd9704043e5dc1cbeada28"]}, 0x12d) fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x800) rt_sigqueueinfo(r1, 0x2c, &(0x7f0000000580)={0x37, 0x1005, 0x9}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x39000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = openat$cgroup_ro(r6, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000200)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x8, @private2, 0x2}], 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 2.52388548s ago: executing program 8 (id=10543): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000380)={0x0, @rand_addr=0x64010100, 0x4e23, 0x2, 'none\x00', 0xe, 0xb6c, 0x2d}, 0x2c) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x42, 0x2}, 0x4) 2.063735062s ago: executing program 0 (id=10550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x35, &(0x7f00000a2000)={0x0, 0x0}, 0x8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) poll(&(0x7f0000000100)=[{r0, 0x8020}, {0xffffffffffffffff, 0x2}, {r0, 0x40}, {r1, 0x100}, {r3, 0x7000}, {r0, 0x4010}, {r4, 0x3014}, {r5, 0x8000}], 0x8, 0x7) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) 1.951596593s ago: executing program 3 (id=10552): pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000180)="440dc3e4", 0x4}], 0x1, 0x7800, 0xfffffffe, 0xb) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={r0, &(0x7f0000000000)='quota', 0x20200, &(0x7f0000000100)={@align=0x9, {0x8, 0x7, 0x1, 0x1}}, 0xc, &(0x7f0000000140), &(0x7f00000001c0)=0xfffffff9}) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000007c0)={0x6, &(0x7f0000000780)=[{0x80, 0x4}, {0x80, 0x8}, {0x1000, 0x5}, {0x75, 0x5}, {0x7, 0x6}, {0x467}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, &(0x7f0000000080)) socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x60, &(0x7f0000000280)=ANY=[@ANYBLOB="d504ff5880ffffff0180c2000020e53a5ef6b30d09eed979f00008004903005200650000fa06907800000000000000004410754e00000005000004010000e5060a00000000004e6300200001000000000000"], 0x0) 1.911753166s ago: executing program 0 (id=10553): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000280)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000600)=0x7fff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x102880, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) r6 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000300)=0x10, 0x80000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x70bd28, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, 0xc568}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0x1}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c041}, 0x200088c4) poll(&(0x7f0000000340)=[{r4, 0x4691}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x1080}, {r5, 0x41d0}, {r5, 0x2}, {r1, 0x10010}, {r6, 0x300}], 0x7, 0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002dc0)=[{{&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x40, &(0x7f0000001a00)=[{&(0x7f0000000500)=""/234, 0xea}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000002f40)=""/260, 0xfe}, {&(0x7f0000000700)=""/145, 0x9c}, {&(0x7f0000001ac0)=""/186, 0xba}, {&(0x7f0000000880)=""/139, 0x8b}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/37, 0x25}, {&(0x7f0000001940)=""/137, 0x89}], 0x9, &(0x7f0000002e40)=""/207, 0xcf}, 0xfffffffd}, {{&(0x7f0000001bc0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000000480)=""/8, 0x8}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/66, 0x42}, {&(0x7f0000002cc0)}, {&(0x7f0000002d00)=""/56, 0x38}], 0x5}, 0x49}], 0x2, 0x10041, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 1.86753233s ago: executing program 3 (id=10554): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000300)={0xa, 0x0, 0xa, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="3d4ce5", 0x3}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0x1, @private1, 0x2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)}], 0x1}}], 0x2, 0x4011) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) statx(r2, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) 1.752817501s ago: executing program 3 (id=10557): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050009000000000005002000010000000500080000000000"], 0x7c}}, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 1.635650401s ago: executing program 3 (id=10558): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8000}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) eventfd(0x1) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.635128921s ago: executing program 8 (id=10559): r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x40000c) ioctl$int_out(r1, 0x2, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendto(r2, &(0x7f0000000540)="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", 0x1000, 0x80, &(0x7f00000002c0)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80) sendto(r3, &(0x7f00000000c0)="d7c248c48bed629ce2f2ba33343369985657a3f8b689acb944fdbf1cc9570b1562aad73b58adec8199d2516735b1a74cbe8f61b318f4c9f47d52e6adc1cd84", 0x3f, 0x40005, &(0x7f0000000180)=@generic={0x22, "238ee8dc0e2c2fd669786513b4388841dc1a6a7c9915c419ff4e74e6a0ea94adb042bf21f53e76790ebc0063cc65b7eac24db44b5ef33a90b1e50cd732df3c7c22cbe7cde64f086940b984325717cabde223e9995196d51d75abd5ac00826da6fcc7d37c5fdc2fb3e80f1714fe168dd0492a81a0be0b96063c6013aa7d28"}, 0x80) 1.596726865s ago: executing program 3 (id=10560): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2711}, 0x10) r1 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@noacl}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@sysvgroups}]}, 0x7e, 0x44e, &(0x7f0000000900)="$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") creat(&(0x7f0000000080)='./bus\x00', 0x89) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r3 = dup3(r1, r1, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a0004aa"], 0x68}}, 0x64000004) r4 = syz_io_uring_setup(0x7ca0, &(0x7f00000000c0)={0x0, 0xf561, 0x2, 0x8000, 0xc00251}, &(0x7f0000000240), &(0x7f0000000300)) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.340062228s ago: executing program 7 (id=10566): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$setsig(r1, 0xa, 0x3b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1c010000060a010400000000000000000a0000030900010073797a310000000028000480240001800a000100717565756500000014000280060001400008000006000240000000000900020073797a32"], 0x144}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000040), &(0x7f00000001c0)=0x4) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) 1.339906468s ago: executing program 7 (id=10567): unshare(0x2a060400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4}) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.32081055s ago: executing program 7 (id=10568): mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.299249942s ago: executing program 7 (id=10569): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703, 0xfeff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x2f, 0x5, 0xe, 0x8001, 0x1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x9, 0x101}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @remote}, 0x14) (async) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @remote}, 0x14) syz_emit_ethernet(0x6c, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00080045907800000001e000000124808100000000001000050110000800ff2f000086dd080088be81000004100000000100000000000000080022ebfffffffd200000020200000000000000000000000800655800000001000000000000000000"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x403, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x4, r3, 0x7b864, 0x2a704}}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) (async) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x403, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x4, r3, 0x7b864, 0x2a704}}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 1.168086563s ago: executing program 7 (id=10570): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000380)={0x0, @rand_addr=0x64010100, 0x4e23, 0x2, 'none\x00', 0xe, 0xb6c, 0x2d}, 0x2c) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x42, 0x2}, 0x4) 942.778505ms ago: executing program 0 (id=10571): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f14, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'hsr0\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000000340)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@commit={'commit', 0x3d, 0x6}}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f8, &(0x7f0000001340)="$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") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="01", @ANYRES32=r2], 0x64}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x208000400, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) lsm_get_self_attr(0x65, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400006785305be2800d04ef00100001000000000000000000030000000100000a0427f62074a270000057cb318aba920e01c059c40d3b2475aee0a5d699d15878a824f25585aa659c"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x2404c084) unshare(0x600) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x20880, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f00000002c0)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x5, 0x4c, 0xf3, 0x2, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) 838.155554ms ago: executing program 0 (id=10572): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1d}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20010) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) mount$9p_unix(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x10002, &(0x7f00000002c0)) r7 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xc00) sendto$inet6(r7, &(0x7f00000000c0)="dc6e4ee4b758631efb26d4f3441acc46bcff6e6af400b7971e4e885f05df60012eb1241b4ed0809c4367406d873b30faa2470aac93d0ede7eadea202f08a72e99840b1411ddca6ef26ce69d5c867d817c317e353b3e862804abe94dec659cb96bd15fee1459119f74a29e8a534d3856d5f45c457efbb86ccdf5138828aeb4d53bb5bad635a22d9f57e86b2f80eb55ee98c53e98135a3cd61db492b35bae9c0aba0aa05c7cf49c0bc", 0xa8, 0x800, &(0x7f0000000180)={0xa, 0x4e20, 0xa, @mcast2, 0xfffffff7}, 0x1c) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000001c0)="f1bd3c7ddd2e29e630377071f3a63fb38a045f851c2786862b386c1d2822ddb79b8b455cc0dc52a33a33d7a86978ee88122654c933608706", 0x38}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000000b000000000000080000000058000000000000002900000036000000f5fd000000000000c20400000003c91020010000000000000000000000000001c20400000006040181c910fe80000000000000000000000000000d0001000502000000020002000088000000000000002900000039000000730e008100000000000000000000000094fcba600000ffff6401010120010000000000000000000000000002fc000000000000000000000000000000ff010000000000000000000000000001fe800000"], 0xf8}}], 0x2, 0x0) shutdown(r1, 0x1) setsockopt(r1, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) syz_io_uring_setup(0x4c82, &(0x7f0000000340)={0x0, 0x4156, 0x200, 0x2, 0x55, 0x0, r1}, &(0x7f00000003c0), &(0x7f0000000400)) connect$can_bcm(r0, &(0x7f0000000180), 0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r8, 0x1, 0x23, &(0x7f0000000040)=0x9, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004500005c00000000002f90780000000000000000248065580000000010000800000086dd00000002080088be0000000010b200000100000000000000080022eb0000000020000000020000000000000000000000080065580000000023ddc41b1157639130588cb4b85ea790b58da9ef30817259125d6e73f0bf6bd22e73d677d7125a3bff9ddc92264c788d26f26684"], 0x0) 665.681349ms ago: executing program 8 (id=10573): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44011}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xffffffffffffff81) 665.3635ms ago: executing program 3 (id=10574): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000001b00)="$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") socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) inotify_init1(0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181243, 0x19c) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000080)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x2000000) 665.12315ms ago: executing program 8 (id=10575): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x1, 0x7f, 0x9, 0x2, 0x9}, {0xfe, 0x0, 0xa, 0x4, 0xf338, 0x59}, 0x4, 0x7, 0x6c5}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x100000000000000) 109.92187ms ago: executing program 7 (id=10576): memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15720}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010025bd7000fbdb5f251c208008ff01ff0a001ef83708000100"], 0x24}, 0x1, 0x0, 0x0, 0x4c25}, 0x400c020) 0s ago: executing program 8 (id=10577): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4400, &(0x7f00000005c0)=ANY=[], 0xfc, 0x2e2, &(0x7f0000000940)="$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") mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) r0 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) unshare(0x400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) readahead(r1, 0x6, 0x221d45e7) link(&(0x7f0000000600)='./file0\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): ing already freed block (bit 9); block bitmap corrupt. [ 1047.508901][ T8729] netlink: 'syz.3.9882': attribute type 16 has an invalid length. [ 1047.517167][ T8729] netlink: 'syz.3.9882': attribute type 17 has an invalid length. [ 1047.530085][ T8667] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #13: comm syz.9.9868: corrupted inode contents [ 1047.571024][ T8667] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1047.571339][ T8667] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #13: comm syz.9.9868: mark_inode_dirty error [ 1047.601270][ T8667] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1047.601492][ T8667] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #13: comm syz.9.9868: corrupted inode contents [ 1047.626097][ T8667] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1047.626367][ T8667] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #13: comm syz.9.9868: mark_inode_dirty error [ 1047.644939][ T8730] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 1047.675669][ T8729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1047.691808][ T8667] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #13: comm syz.9.9868: corrupted inode contents [ 1047.704737][ T8730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1047.736661][ T8667] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 1047.778358][ T8667] loop9: lost filesystem error report for type 5 error -117 [ 1047.778602][ T8667] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #13: comm syz.9.9868: corrupted inode contents [ 1047.819419][ T8667] EXT4-fs error (device loop9): ext4_truncate:4587: inode #13: comm syz.9.9868: mark_inode_dirty error [ 1047.840301][ T8739] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9886'. [ 1047.849682][ T8667] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 1047.860237][ T8667] loop9: lost filesystem error report for type 5 error -117 [ 1047.860667][ T8667] EXT4-fs (loop9): 1 truncate cleaned up [ 1047.874436][ T8741] loop7: detected capacity change from 0 to 1024 [ 1047.879076][ T8667] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1047.882453][ T8741] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1047.906501][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9886'. [ 1047.931290][ T8741] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1047.963023][ T8741] EXT4-fs error (device loop7): ext4_get_journal_inode:5865: inode #32: comm syz.7.9883: iget: special inode unallocated [ 1047.977799][ T8667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.996596][ T8741] EXT4-fs (loop7): Remounting filesystem read-only [ 1048.003243][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1048.003261][ C0] EXT4-fs (loop7): initial error at time 2000017044: ext4_get_journal_inode:5865: inode 32 [ 1048.003285][ C0] EXT4-fs (loop7): last error at time 2000017044: ext4_get_journal_inode:5865: inode 32 [ 1048.031038][ T8741] EXT4-fs (loop7): no journal found [ 1048.050986][ T8741] EXT4-fs (loop7): can't get journal size [ 1048.051724][ T8747] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9889'. [ 1048.057442][ T8741] EXT4-fs (loop7): filesystem is read-only [ 1048.072248][ T8741] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1048.095204][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9883'. [ 1048.166387][ T5696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.225637][ T8757] loop3: detected capacity change from 0 to 256 [ 1048.257477][ T8757] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1048.842205][ T8771] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1048.854057][ T8771] EXT4-fs (loop9): 1 truncate cleaned up [ 1048.860648][ T8771] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1048.991199][ T8795] syz.8.9896: attempt to access beyond end of device [ 1048.991199][ T8795] loop8: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 1049.006296][ T8795] syz.8.9896: attempt to access beyond end of device [ 1049.006296][ T8795] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1049.024435][ T8795] syz.8.9896: attempt to access beyond end of device [ 1049.024435][ T8795] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1049.050598][ T8795] syz.8.9896: attempt to access beyond end of device [ 1049.050598][ T8795] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 1049.268771][ T8302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.420688][ T8854] EXT4-fs: Ignoring removed bh option [ 1049.440344][ T8854] EXT4-fs: inline encryption not supported [ 1049.456339][ T8854] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1049.465907][ T8854] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 1049.476506][ T8854] EXT4-fs (loop3): group descriptors corrupted! [ 1049.547955][ T8868] /dev/sg0: Can't lookup blockdev [ 1049.561336][ T8868] netlink: 'syz.0.9908': attribute type 1 has an invalid length. [ 1049.624404][ T8878] netlink: 'syz.3.9910': attribute type 16 has an invalid length. [ 1049.653080][ T8878] netlink: 'syz.3.9910': attribute type 17 has an invalid length. [ 1049.694268][ T8878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1049.733634][ T8878] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 1049.743276][ T8883] set_capacity_and_notify: 3 callbacks suppressed [ 1049.743293][ T8883] loop9: detected capacity change from 0 to 256 [ 1049.777650][ T8878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1049.797558][ T8883] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1049.933293][ T8887] sctp: [Deprecated]: syz.3.9914 (pid 8887) Use of int in max_burst socket option. [ 1049.933293][ T8887] Use struct sctp_assoc_value instead [ 1050.006292][ T8852] loop8: detected capacity change from 0 to 2048 [ 1050.063844][ T8852] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1050.101257][ T8852] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.188295][T24495] Process accounting resumed [ 1050.197808][ T8840] loop8: detected capacity change from 0 to 1024 [ 1050.226200][ T8840] __quota_error: 30 callbacks suppressed [ 1050.227147][ T8840] Quota error (device loop8): do_check_range: Getting block 64 out of range 1-5 [ 1050.242485][ T8840] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1050.254953][ T8840] EXT4-fs error (device loop8): ext4_acquire_dquot:7003: comm syz.8.9903: Failed to acquire dquot type 0 [ 1050.266527][ T8840] loop8: lost filesystem error report for type 5 error -117 [ 1050.267548][ T8840] EXT4-fs error (device loop8): mb_free_blocks:2047: group 0, [ 1050.275119][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1050.275163][ C1] EXT4-fs (loop8): initial error at time 2000017558: ext4_acquire_dquot:7003 [ 1050.275187][ C1] EXT4-fs (loop8): last error at time 2000017558: ext4_acquire_dquot:7003 [ 1050.306737][ T8840] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1050.316071][ T8840] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #13: comm syz.8.9903: corrupted inode contents [ 1050.328372][ T8840] fserror_report: 5 callbacks suppressed [ 1050.328386][ T8840] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1050.334509][ T8840] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #13: comm syz.8.9903: mark_inode_dirty error [ 1050.356145][ T8840] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1050.356436][ T8840] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #13: comm syz.8.9903: corrupted inode contents [ 1050.387065][ T8840] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1050.387725][ T8840] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #13: comm syz.8.9903: mark_inode_dirty error [ 1050.409340][ T8840] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1050.409621][ T8840] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #13: comm syz.8.9903: corrupted inode contents [ 1050.431608][ T8840] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1050.431800][ T8840] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 1050.452518][ T8840] loop8: lost filesystem error report for type 5 error -117 [ 1050.452796][ T8840] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #13: comm syz.8.9903: corrupted inode contents [ 1050.485607][ T8840] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1050.485829][ T8840] EXT4-fs error (device loop8): ext4_truncate:4587: inode #13: comm syz.8.9903: mark_inode_dirty error [ 1050.513687][ T8840] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1050.513885][ T8840] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 1050.533097][ T8840] loop8: lost filesystem error report for type 5 error -117 [ 1050.534383][ T8840] EXT4-fs (loop8): 1 truncate cleaned up [ 1050.552918][ T8840] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.567125][ T8840] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.730919][ T28] audit: type=1400 audit(2000017815.028:5233): avc: denied { kexec_image_load } for pid=8911 comm="syz.7.9921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1050.842220][ T8930] netlink: 'syz.8.9924': attribute type 16 has an invalid length. [ 1050.861009][ T8930] netlink: 'syz.8.9924': attribute type 17 has an invalid length. [ 1050.920981][ T8936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1050.934944][ T8930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1050.956484][ T8937] __nla_validate_parse: 7 callbacks suppressed [ 1050.956501][ T8937] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9927'. [ 1051.041284][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9927'. [ 1051.182959][ T8941] loop8: detected capacity change from 0 to 512 [ 1051.208476][ T8941] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 1051.230402][ T8941] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 1051.251705][ T8941] EXT4-fs (loop8): 1 truncate cleaned up [ 1051.257864][ T8941] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.338962][ T8941] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #2: block 4: comm syz.8.9928: lblock 0 mapped to illegal pblock 4 (length 1) [ 1051.366677][ T8941] EXT4-fs (loop8): Remounting filesystem read-only [ 1051.445684][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9928'. [ 1051.497815][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9928'. [ 1051.858117][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9939'. [ 1051.929468][ T8990] netlink: 48 bytes leftover after parsing attributes in process `syz.8.9928'. [ 1052.024709][ T8992] loop3: detected capacity change from 0 to 256 [ 1052.047579][ T8992] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1052.266122][ T8998] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9945'. [ 1052.510204][ T7920] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.601383][ T28] audit: type=1400 audit(2000018328.835:5234): avc: denied { write } for pid=9011 comm="syz.8.9950" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1052.677138][ T28] audit: type=1400 audit(2000018328.872:5235): avc: denied { setattr } for pid=9011 comm="syz.8.9950" name="ns" dev="proc" ino=145571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1052.721187][ T9014] loop9: detected capacity change from 0 to 512 [ 1052.731861][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9952'. [ 1052.758992][ T9014] EXT4-fs: journaled quota format not specified [ 1052.871523][ T9025] netlink: 'syz.9.9955': attribute type 16 has an invalid length. [ 1052.884891][ T9025] netlink: 'syz.9.9955': attribute type 17 has an invalid length. [ 1052.941156][ T9028] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 1052.971690][ T9028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1052.979044][ T9028] IPv6: NLM_F_CREATE should be set when creating new route [ 1052.986305][ T9028] IPv6: NLM_F_CREATE should be set when creating new route [ 1052.993626][ T9028] IPv6: NLM_F_CREATE should be set when creating new route [ 1053.015713][ T9025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1053.097534][ T9032] loop3: detected capacity change from 0 to 512 [ 1053.130609][ T9032] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1053.177313][ T9032] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size [ 1053.281524][ T9042] loop0: detected capacity change from 0 to 512 [ 1053.326045][ T9042] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1053.367436][ T9042] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 1053.401231][ T9042] EXT4-fs (loop0): 1 truncate cleaned up [ 1053.412072][ T9042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.453979][ T9042] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #2: block 4: comm syz.0.9959: lblock 0 mapped to illegal pblock 4 (length 1) [ 1053.485347][ T9042] EXT4-fs (loop0): Remounting filesystem read-only [ 1053.529863][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9959'. [ 1053.555315][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9959'. [ 1053.605142][ T9059] loop3: detected capacity change from 0 to 512 [ 1053.632232][ T9059] EXT4-fs: journaled quota format not specified [ 1053.649679][ T9061] loop7: detected capacity change from 0 to 256 [ 1053.675574][ T9061] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1054.082886][ T9085] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1054.120853][ T9085] EXT4-fs (loop8): bad geometry: first data block is 0 with a 1k block and cluster size [ 1054.359919][ T4519] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.456034][ T28] audit: type=1326 audit(2000018842.563:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.0.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe677e0c629 code=0x7ffc0000 [ 1054.482766][ T28] audit: type=1326 audit(2000018842.572:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.0.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe677e0c629 code=0x7ffc0000 [ 1054.482891][ T9] IPVS: starting estimator thread 0... [ 1054.506720][ T28] audit: type=1326 audit(2000018842.572:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.0.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe677e0c629 code=0x7ffc0000 [ 1054.536828][ T28] audit: type=1326 audit(2000018842.572:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.0.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe677e0c629 code=0x7ffc0000 [ 1054.560784][ T28] audit: type=1326 audit(2000018842.572:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.0.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe677e0c629 code=0x7ffc0000 [ 1054.693987][ T9101] IPVS: using max 2400 ests per chain, 120000 per kthread [ 1054.873865][ T9130] FAULT_INJECTION: forcing a failure. [ 1054.873865][ T9130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.889762][ T9131] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1054.935149][ T9131] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size [ 1054.938082][ T9130] CPU: 1 UID: 0 PID: 9130 Comm: syz.8.9987 Tainted: G W syzkaller #0 PREEMPT(full) [ 1054.938127][ T9130] Tainted: [W]=WARN [ 1054.938135][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1054.938148][ T9130] Call Trace: [ 1054.938155][ T9130] [ 1054.938162][ T9130] __dump_stack+0x1d/0x30 [ 1054.938191][ T9130] dump_stack_lvl+0x95/0xd0 [ 1054.938281][ T9130] dump_stack+0x15/0x1b [ 1054.938374][ T9130] should_fail_ex+0x263/0x280 [ 1054.938425][ T9130] should_fail+0xb/0x20 [ 1054.938443][ T9130] should_fail_usercopy+0x1a/0x20 [ 1054.938469][ T9130] _copy_to_user+0x20/0xa0 [ 1054.938495][ T9130] simple_read_from_buffer+0xb5/0x130 [ 1054.938518][ T9130] proc_fail_nth_read+0x10e/0x150 [ 1054.938548][ T9130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1054.938616][ T9130] vfs_read+0x1ab/0x7f0 [ 1054.938693][ T9130] ? __rcu_read_unlock+0x4e/0x70 [ 1054.938768][ T9130] ? __fget_files+0x184/0x1c0 [ 1054.938803][ T9130] ? mutex_lock+0x57/0x90 [ 1054.938830][ T9130] ksys_read+0xdc/0x1a0 [ 1054.938861][ T9130] __x64_sys_read+0x40/0x50 [ 1054.938908][ T9130] x64_sys_call+0x2886/0x3020 [ 1054.938957][ T9130] do_syscall_64+0x12c/0x370 [ 1054.938991][ T9130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.939014][ T9130] RIP: 0033:0x7f771927cece [ 1054.939030][ T9130] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1054.939126][ T9130] RSP: 002b:00007f7717d16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1054.939148][ T9130] RAX: ffffffffffffffda RBX: 00007f7717d176c0 RCX: 00007f771927cece [ 1054.939163][ T9130] RDX: 000000000000000f RSI: 00007f7717d170a0 RDI: 0000000000000004 [ 1054.939176][ T9130] RBP: 00007f7717d17090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.939209][ T9130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.939222][ T9130] R13: 00007f7719536038 R14: 00007f7719535fa0 R15: 00007fffdfe54168 [ 1054.939242][ T9130] [ 1054.971862][ T9135] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1055.756876][ T9158] set_capacity_and_notify: 4 callbacks suppressed [ 1055.756912][ T9158] loop7: detected capacity change from 0 to 2048 [ 1055.800036][ T9158] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1055.817092][ T9158] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.932112][ T3545] Process accounting resumed [ 1055.942673][ T9155] loop7: detected capacity change from 0 to 1024 [ 1055.982043][ T9165] loop8: detected capacity change from 0 to 512 [ 1055.988532][ T9155] __quota_error: 21 callbacks suppressed [ 1055.988548][ T9155] Quota error (device loop7): do_check_range: Getting block 64 out of range 1-5 [ 1056.003377][ T9155] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 1056.012973][ T9155] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.9994: Failed to acquire dquot type 0 [ 1056.024519][ T9155] loop7: lost filesystem error report for type 5 error -117 [ 1056.030284][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1056.044160][ C1] EXT4-fs (loop7): initial error at time 2000018844: ext4_acquire_dquot:7003 [ 1056.053212][ C1] EXT4-fs (loop7): last error at time 2000018844: ext4_acquire_dquot:7003 [ 1056.062515][ T9155] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1056.066840][ T9165] EXT4-fs: journaled quota format not specified [ 1056.077080][ T9155] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #13: comm syz.7.9994: corrupted inode contents [ 1056.095227][ T9155] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1056.122418][ T9155] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #13: comm syz.7.9994: mark_inode_dirty error [ 1056.204150][ T9155] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1056.204344][ T9155] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #13: comm syz.7.9994: corrupted inode contents [ 1056.247578][ T9155] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1056.247739][ T9155] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #13: comm syz.7.9994: mark_inode_dirty error [ 1056.276573][ T9175] netlink: 'syz.8.9999': attribute type 16 has an invalid length. [ 1056.287188][ T9155] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1056.287447][ T9155] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #13: comm syz.7.9994: corrupted inode contents [ 1056.307528][ T9175] netlink: 'syz.8.9999': attribute type 17 has an invalid length. [ 1056.311200][ T9155] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1056.318975][ T9155] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 1056.362407][ T9181] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 1056.387163][ T9183] loop3: detected capacity change from 0 to 1024 [ 1056.394527][ T9183] ext4: Unknown parameter 'uid>00000000000000060928' [ 1056.422580][ T9175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1056.440487][ T9155] loop7: lost filesystem error report for type 5 error -117 [ 1056.441449][ T9155] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #13: comm syz.7.9994: corrupted inode contents [ 1056.478860][ T9155] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1056.488984][ T9155] EXT4-fs error (device loop7): ext4_truncate:4587: inode #13: comm syz.7.9994: mark_inode_dirty error [ 1056.524162][ T9155] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1056.524445][ T9155] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 1056.545876][ T9193] sch_fq: defrate 512 ignored. [ 1056.564988][ T9155] loop7: lost filesystem error report for type 5 error -117 [ 1056.565796][ T9155] EXT4-fs (loop7): 1 truncate cleaned up [ 1056.579485][ T9155] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.593376][ T9155] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.634392][ T9196] __nla_validate_parse: 6 callbacks suppressed [ 1056.634528][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10004'. [ 1057.118862][ T9204] FAULT_INJECTION: forcing a failure. [ 1057.118862][ T9204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.135271][ T9206] loop7: detected capacity change from 0 to 256 [ 1057.141624][ T9204] CPU: 0 UID: 0 PID: 9204 Comm: syz.0.10008 Tainted: G W syzkaller #0 PREEMPT(full) [ 1057.141660][ T9204] Tainted: [W]=WARN [ 1057.141696][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1057.141707][ T9204] Call Trace: [ 1057.141714][ T9204] [ 1057.141722][ T9204] __dump_stack+0x1d/0x30 [ 1057.141791][ T9204] dump_stack_lvl+0x95/0xd0 [ 1057.141810][ T9204] dump_stack+0x15/0x1b [ 1057.141829][ T9204] should_fail_ex+0x263/0x280 [ 1057.141926][ T9204] should_fail+0xb/0x20 [ 1057.141945][ T9204] should_fail_usercopy+0x1a/0x20 [ 1057.141967][ T9204] _copy_from_user+0x1c/0xb0 [ 1057.142001][ T9204] ___sys_sendmsg+0xc1/0x1e0 [ 1057.142111][ T9204] __x64_sys_sendmsg+0xd4/0x160 [ 1057.142158][ T9204] x64_sys_call+0x194c/0x3020 [ 1057.142183][ T9204] do_syscall_64+0x12c/0x370 [ 1057.142216][ T9204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.142306][ T9204] RIP: 0033:0x7fe677e0c629 [ 1057.142323][ T9204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.142342][ T9204] RSP: 002b:00007fe676867028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1057.142377][ T9204] RAX: ffffffffffffffda RBX: 00007fe678085fa0 RCX: 00007fe677e0c629 [ 1057.142389][ T9204] RDX: 0000000000040814 RSI: 0000200000000240 RDI: 0000000000000003 [ 1057.142416][ T9204] RBP: 00007fe676867090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.142428][ T9204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.142440][ T9204] R13: 00007fe678086038 R14: 00007fe678085fa0 R15: 00007ffe7f930858 [ 1057.142503][ T9204] [ 1057.314162][ T9207] loop9: detected capacity change from 0 to 512 [ 1057.320976][ T9207] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1057.330888][ T9207] EXT4-fs (loop9): bad geometry: first data block is 0 with a 1k block and cluster size [ 1057.345355][ T9206] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1057.473777][ T9213] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10012'. [ 1057.631159][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10012'. [ 1057.791409][ T9225] loop3: detected capacity change from 0 to 512 [ 1057.834592][ T9229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10016'. [ 1057.856467][ T9225] EXT4-fs: journaled quota format not specified [ 1057.889933][ T9231] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1058.030314][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10020'. [ 1058.043810][ T9245] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10021'. [ 1058.097060][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10021'. [ 1058.264512][ T9260] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 1058.292194][ T9234] loop0: detected capacity change from 0 to 2048 [ 1058.308542][ T9260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1058.315844][ T9260] IPv6: NLM_F_CREATE should be set when creating new route [ 1058.323155][ T9260] IPv6: NLM_F_CREATE should be set when creating new route [ 1058.330400][ T9260] IPv6: NLM_F_CREATE should be set when creating new route [ 1058.444330][ T9234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1058.466687][ T9274] netlink: 'syz.8.10029': attribute type 21 has an invalid length. [ 1058.481720][ T9275] loop7: detected capacity change from 0 to 512 [ 1058.512352][ T9274] netlink: 164 bytes leftover after parsing attributes in process `syz.8.10029'. [ 1058.530340][ T9275] EXT4-fs: journaled quota format not specified [ 1058.548064][ T9234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.699094][ T9289] loop8: detected capacity change from 0 to 256 [ 1058.711466][ T9289] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1058.724175][ T6258] Process accounting resumed [ 1058.766566][ T9229] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 1058.813227][ T9229] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1058.833753][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10035'. [ 1058.845833][ T9229] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.10016: Failed to acquire dquot type 0 [ 1058.872964][ T9229] loop0: lost filesystem error report for type 5 error -117 [ 1058.873498][ T9229] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, [ 1058.880943][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1058.880967][ C1] EXT4-fs (loop0): initial error at time 2000019102: ext4_acquire_dquot:7003 [ 1058.880992][ C1] EXT4-fs (loop0): last error at time 2000019102: ext4_acquire_dquot:7003 [ 1058.892213][ T9298] tmpfs: Too small a size for current use [ 1058.895363][ T9229] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1058.926077][ T9298] binfmt_misc: register: failed to install interpreter file ./file0 [ 1058.928797][ T9229] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.10016: corrupted inode contents [ 1058.957602][ T9229] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1058.957814][ T9229] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #13: comm syz.0.10016: mark_inode_dirty error [ 1058.994901][ T9229] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1058.995169][ T9229] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.10016: corrupted inode contents [ 1059.021455][ T9302] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10038'. [ 1059.023515][ T9229] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1059.031233][ T9229] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.10016: mark_inode_dirty error [ 1059.053732][ T9229] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.10016: corrupted inode contents [ 1059.067018][ T9229] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1059.075811][ T9229] loop0: lost filesystem error report for type 5 error -117 [ 1059.076498][ T9308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1059.081297][ T9229] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.10016: corrupted inode contents [ 1059.103902][ T9229] EXT4-fs error (device loop0): ext4_truncate:4587: inode #13: comm syz.0.10016: mark_inode_dirty error [ 1059.104591][ T9308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1059.115346][ T9229] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1059.139651][ T9229] loop0: lost filesystem error report for type 5 error -117 [ 1059.155748][ T9229] EXT4-fs (loop0): 1 truncate cleaned up [ 1059.169375][ T9229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1059.183192][ T9229] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.256659][ T9316] EXT4-fs: journaled quota format not specified [ 1059.342119][ T9322] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1059.355483][ T9322] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1059.388187][ T8302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.746981][ T28] audit: type=1400 audit(2000019103.514:5262): avc: denied { create } for pid=9348 comm="syz.8.10053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1059.842888][ T9357] ext2: Unknown parameter 'uid' [ 1059.877626][ T28] audit: type=1400 audit(2000019103.635:5263): avc: denied { nlmsg_read } for pid=9356 comm="syz.8.10055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1059.984763][ T9361] EXT4-fs: journaled quota format not specified [ 1060.017884][ T28] audit: type=1400 audit(2000019103.766:5264): avc: denied { write } for pid=9362 comm="syz.3.10057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1060.089366][ T28] audit: type=1400 audit(2000019103.813:5265): avc: denied { read write } for pid=4842 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1060.151835][ T28] audit: type=1400 audit(2000019103.813:5266): avc: denied { open } for pid=4842 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1060.220103][ T28] audit: type=1400 audit(2000019103.813:5267): avc: denied { ioctl } for pid=4842 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1060.263440][ T9376] netlink: 'syz.0.10061': attribute type 16 has an invalid length. [ 1060.300180][ T9376] netlink: 'syz.0.10061': attribute type 17 has an invalid length. [ 1060.318412][ T9379] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 1060.373612][ T9376] ip6gretap0: left promiscuous mode [ 1060.424289][ T9376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1060.619028][ T9358] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1060.646221][ T9358] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.692322][ T3545] Process accounting resumed [ 1060.706650][ T9353] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.10054: Failed to acquire dquot type 0 [ 1060.718110][ T9353] loop7: lost filesystem error report for type 5 error -117 [ 1060.722134][ T9353] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, [ 1060.729484][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1060.729502][ C1] EXT4-fs (loop7): initial error at time 2000019360: ext4_acquire_dquot:7003 [ 1060.729522][ C1] EXT4-fs (loop7): last error at time 2000019360: ext4_acquire_dquot:7003 [ 1060.761609][ T9353] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1060.815781][ T9353] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #13: comm syz.7.10054: corrupted inode contents [ 1060.839646][ T9406] bridge0: entered promiscuous mode [ 1060.847750][ T9353] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #13: comm syz.7.10054: mark_inode_dirty error [ 1060.861113][ T9353] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #13: comm syz.7.10054: corrupted inode contents [ 1060.868267][ T9406] bridge0: port 3(macsec1) entered blocking state [ 1060.875396][ T9353] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #13: comm syz.7.10054: mark_inode_dirty error [ 1060.879893][ T9406] bridge0: port 3(macsec1) entered disabled state [ 1060.891748][ T9353] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #13: comm syz.7.10054: corrupted inode contents [ 1060.909833][ T9405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9405 comm=syz.0.10067 [ 1060.910075][ T9406] macsec1: entered allmulticast mode [ 1060.927966][ T9406] bridge0: entered allmulticast mode [ 1060.933485][ T9353] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 1060.942238][ T9353] loop7: lost filesystem error report for type 5 error -117 [ 1060.942472][ T9353] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #13: comm syz.7.10054: corrupted inode contents [ 1060.942563][ T9406] macsec1: left allmulticast mode [ 1060.950463][ T9353] EXT4-fs error (device loop7): ext4_truncate:4587: inode #13: comm syz.7.10054: mark_inode_dirty error [ 1060.961868][ T9406] bridge0: left allmulticast mode [ 1060.968642][ T9353] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 1060.992860][ T9406] bridge0: left promiscuous mode [ 1060.999725][ T9353] loop7: lost filesystem error report for type 5 error -117 [ 1061.000216][ T9353] EXT4-fs (loop7): 1 truncate cleaned up [ 1061.028035][ T9353] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1061.042016][ T9353] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.055609][ T9409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1061.072987][ T9409] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.125316][ T9413] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1061.135727][ T4842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.215397][ T9418] netlink: 'syz.0.10074': attribute type 21 has an invalid length. [ 1061.325121][ T9429] set_capacity_and_notify: 9 callbacks suppressed [ 1061.325135][ T9429] loop0: detected capacity change from 0 to 512 [ 1061.354088][ T9429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1061.413641][ T9429] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.451208][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 1061.451224][ T28] audit: type=1400 audit(2000019617.113:5336): avc: denied { connect } for pid=9428 comm="syz.0.10076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1061.490407][ T9429] x_tables: duplicate underflow at hook 2 [ 1061.501617][ T9438] loop7: detected capacity change from 0 to 512 [ 1061.534322][ T28] audit: type=1400 audit(2000019617.188:5337): avc: denied { write } for pid=9428 comm="syz.0.10076" path="socket:[146282]" dev="sockfs" ino=146282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1061.570680][ T9438] EXT4-fs: Ignoring removed bh option [ 1061.576101][ T9438] EXT4-fs: inline encryption not supported [ 1061.587266][ T4519] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.606160][ T9438] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1061.645014][ T9438] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1061.672579][ T9438] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10077: bg 0: block 248: padding at end of block bitmap is not set [ 1061.673687][ T28] audit: type=1400 audit(2000019617.319:5338): avc: denied { getopt } for pid=9449 comm="syz.0.10080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1061.691314][ T9438] loop7: lost filesystem error report for type 5 error -117 [ 1061.708070][ T9438] Quota error (device loop7): write_blk: dquota write failed [ 1061.708123][ T9438] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1061.708151][ T9438] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.10077: Failed to acquire dquot type 1 [ 1061.708175][ T9438] loop7: lost filesystem error report for type 5 error -117 [ 1061.708594][ T9438] EXT4-fs (loop7): 1 truncate cleaned up [ 1061.708973][ T9438] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1061.794592][ T28] audit: type=1400 audit(2000019617.431:5339): avc: denied { create } for pid=9451 comm="syz.8.10081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1061.852111][ T28] audit: type=1400 audit(2000019617.459:5340): avc: denied { getopt } for pid=9451 comm="syz.8.10081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1061.873698][ T5696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1061.884416][ T28] audit: type=1400 audit(2000019617.459:5341): avc: denied { ioctl } for pid=9451 comm="syz.8.10081" path="socket:[145319]" dev="sockfs" ino=145319 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1061.913798][ T9467] netlink: 'syz.3.10086': attribute type 21 has an invalid length. [ 1061.936666][ T28] audit: type=1326 audit(2000019617.562:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.8.10087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77192bc629 code=0x7ffc0000 [ 1061.967442][ T28] audit: type=1326 audit(2000019617.562:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.8.10087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77192bc629 code=0x7ffc0000 [ 1062.188596][ T9489] __nla_validate_parse: 18 callbacks suppressed [ 1062.188654][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10084'. [ 1062.219486][ T9487] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10091'. [ 1062.308969][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10091'. [ 1062.390475][ T9498] loop0: detected capacity change from 0 to 2048 [ 1062.524869][ T9498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.538803][ T9498] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1062.558818][ T9498] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10093: bg 0: block 345: padding at end of block bitmap is not set [ 1062.609318][ T9498] EXT4-fs (loop0): Remounting filesystem read-only [ 1062.645270][ T9498] netlink: 'syz.0.10093': attribute type 3 has an invalid length. [ 1062.678683][ T4519] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.850813][ T9512] loop0: detected capacity change from 0 to 512 [ 1062.895766][ T9512] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1062.905167][ T9512] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 1062.917601][ T9512] EXT4-fs (loop0): 1 truncate cleaned up [ 1062.923672][ T9512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.932301][ T9518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1062.944930][ T9512] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #2: block 4: comm syz.0.10095: lblock 0 mapped to illegal pblock 4 (length 1) [ 1062.976868][ T9512] EXT4-fs (loop0): Remounting filesystem read-only [ 1062.984190][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10095'. [ 1062.993681][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10095'. [ 1063.015728][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10099'. [ 1063.251451][ T9541] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10104'. [ 1063.287124][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10104'. [ 1063.334125][ T9552] xt_time: unknown flags 0xc [ 1063.752349][ T4519] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.776105][ T9574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1063.885326][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10116'. [ 1063.904424][ T9585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10117'. [ 1063.990268][ T9591] syzkaller0: entered promiscuous mode [ 1063.996139][ T9591] syzkaller0: entered allmulticast mode [ 1064.159605][ T9603] loop8: detected capacity change from 0 to 512 [ 1064.167062][ T9603] EXT4-fs: Ignoring removed bh option [ 1064.175806][ T9603] EXT4-fs: Ignoring removed oldalloc option [ 1064.182460][ T9603] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1064.222988][ T9603] EXT4-fs (loop8): 1 truncate cleaned up [ 1064.252788][ T9603] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1064.318132][ T9611] netlink: 'syz.7.10126': attribute type 9 has an invalid length. [ 1064.328896][ T9611] netlink: 'syz.7.10126': attribute type 6 has an invalid length. [ 1064.415151][ T7920] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.485073][ T9632] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 1064.505169][ T9632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1064.546841][ T9633] netlink: 'syz.3.10135': attribute type 16 has an invalid length. [ 1064.561475][ T9633] netlink: 'syz.3.10135': attribute type 17 has an invalid length. [ 1064.620898][ T9633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1064.668061][ T9644] loop0: detected capacity change from 0 to 128 [ 1064.702520][ T9644] vfat: Unknown parameter '0xffffffffffffffff' [ 1064.725472][ T9644] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1064.757745][ T9633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1064.827170][ T9653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1064.890256][ T9661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.899524][ T9661] bond1: (slave bond0): making interface the new active one [ 1064.908558][ T9661] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1065.697414][ T9670] loop8: detected capacity change from 0 to 2048 [ 1065.744210][ T9699] netlink: 'syz.0.10158': attribute type 5 has an invalid length. [ 1065.784482][ T9670] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1065.852028][ T9670] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.906403][ T3545] Process accounting resumed [ 1065.926046][ T9667] loop8: detected capacity change from 0 to 1024 [ 1065.940846][ T9667] EXT4-fs error (device loop8): ext4_acquire_dquot:7003: comm syz.8.10147: Failed to acquire dquot type 0 [ 1065.957212][ T9667] loop8: lost filesystem error report for type 5 error -117 [ 1065.968334][ T9667] EXT4-fs error (device loop8): mb_free_blocks:2047: group 0, [ 1065.975814][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1065.975838][ C1] EXT4-fs (loop8): initial error at time 2000020645: ext4_acquire_dquot:7003 [ 1065.975857][ C1] EXT4-fs (loop8): last error at time 2000020645: ext4_acquire_dquot:7003 [ 1066.007561][ T9667] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1066.053611][ T9667] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #13: comm syz.8.10147: corrupted inode contents [ 1066.069165][ T9667] fserror_report: 11 callbacks suppressed [ 1066.069183][ T9667] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1066.076216][ T9667] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #13: comm syz.8.10147: mark_inode_dirty error [ 1066.097202][ T9667] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1066.097429][ T9667] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #13: comm syz.8.10147: corrupted inode contents [ 1066.119802][ T9667] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1066.119984][ T9667] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #13: comm syz.8.10147: mark_inode_dirty error [ 1066.141906][ T9667] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1066.142081][ T9667] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #13: comm syz.8.10147: corrupted inode contents [ 1066.142445][ T9715] 9p: Bad value for 'wfdno' [ 1066.154182][ T9667] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1066.170157][ T9667] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 1066.212312][ T9667] loop8: lost filesystem error report for type 5 error -117 [ 1066.212477][ T9667] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #13: comm syz.8.10147: corrupted inode contents [ 1066.232404][ T9667] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1066.232611][ T9667] EXT4-fs error (device loop8): ext4_truncate:4587: inode #13: comm syz.8.10147: mark_inode_dirty error [ 1066.249687][ T9722] loop9: detected capacity change from 0 to 128 [ 1066.253589][ T9667] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1066.259565][ T9667] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 1066.280865][ T9667] loop8: lost filesystem error report for type 5 error -117 [ 1066.281499][ T9667] EXT4-fs (loop8): 1 truncate cleaned up [ 1066.295062][ T9667] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.345021][ T9667] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.345420][ T9722] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1066.393116][ T9715] tap0: tun_chr_ioctl cmd 1074025677 [ 1066.511771][ T9722] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1066.582953][ T9715] tap0: linktype set to 778 [ 1066.592338][ T9731] dvmrp0: entered allmulticast mode [ 1066.658822][ T9733] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #2: comm syz.9.10165: No space for directory leaf checksum. Please run e2fsck -D. [ 1066.696037][ T9733] EXT4-fs error (device loop9): htree_dirblock_to_tree:1051: inode #2: comm syz.9.10165: Directory block failed checksum [ 1066.860792][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 1066.860854][ T28] audit: type=1400 audit(2000020646.162:5425): avc: denied { shutdown } for pid=9721 comm="syz.9.10165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1067.010254][ T8302] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1067.060969][ T9739] netlink: 'syz.9.10169': attribute type 5 has an invalid length. [ 1067.156225][ T28] audit: type=1326 audit(2000020646.442:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.8.10171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77192bc629 code=0x7ffc0000 [ 1067.197851][ T28] audit: type=1326 audit(2000020646.470:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.8.10171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f77192bc629 code=0x7ffc0000 [ 1067.238316][ T9725] dvmrp0: left allmulticast mode [ 1067.241397][ T28] audit: type=1326 audit(2000020646.470:5428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.8.10171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77192bc629 code=0x7ffc0000 [ 1067.267652][ T28] audit: type=1326 audit(2000020646.470:5429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.8.10171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77192bc629 code=0x7ffc0000 [ 1067.361907][ T28] audit: type=1326 audit(2000020902.639:5430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.8.10174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77192bc629 code=0x7ffc0000 [ 1067.411484][ T28] audit: type=1326 audit(2000020902.639:5431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.8.10174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f77192bc629 code=0x7ffc0000 [ 1067.446415][ T28] audit: type=1326 audit(2000020902.639:5432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.8.10174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77192bc629 code=0x7ffc0000 [ 1067.509535][ T28] audit: type=1326 audit(2000020902.639:5433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.8.10174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77192bc629 code=0x7ffc0000 [ 1067.567539][ T9765] __nla_validate_parse: 18 callbacks suppressed [ 1067.567555][ T9765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10178'. [ 1067.610717][ T28] audit: type=1400 audit(2000020902.863:5434): avc: denied { create } for pid=9766 comm="syz.9.10179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1067.656839][ T9769] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10180'. [ 1067.677315][ T9769] gtp0: entered promiscuous mode [ 1067.682419][ T9769] gtp0: entered allmulticast mode [ 1067.995002][ T9772] loop0: detected capacity change from 0 to 2048 [ 1068.081973][ T9772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.167304][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10187'. [ 1068.191223][ T9772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.214065][ T9794] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 1068.266571][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10188'. [ 1068.335841][T24494] Process accounting resumed [ 1068.352732][ T9765] loop0: detected capacity change from 0 to 1024 [ 1068.362052][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10190'. [ 1068.364304][ T9765] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.10178: Failed to acquire dquot type 0 [ 1068.382784][ T9765] loop0: lost filesystem error report for type 5 error -117 [ 1068.383446][ T9804] hsr_slave_0: left promiscuous mode [ 1068.391483][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1068.391505][ C0] EXT4-fs (loop0): initial error at time 2000020903: ext4_acquire_dquot:7003 [ 1068.391537][ C0] EXT4-fs (loop0): last error at time 2000020903: ext4_acquire_dquot:7003 [ 1068.410708][ T9765] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1068.436371][ T9804] hsr_slave_1: left promiscuous mode [ 1068.447429][ T9765] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.10178: corrupted inode contents [ 1068.470776][ T9765] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1068.471525][ T9765] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #13: comm syz.0.10178: mark_inode_dirty error [ 1068.503804][ T9765] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1068.504045][ T9765] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.10178: corrupted inode contents [ 1068.526296][ T9765] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1068.526625][ T9765] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.10178: mark_inode_dirty error [ 1068.547664][ T9765] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.10178: corrupted inode contents [ 1068.561011][ T9765] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1068.569638][ T9765] loop0: lost filesystem error report for type 5 error -117 [ 1068.581837][ T9765] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.10178: corrupted inode contents [ 1068.607352][ T9765] EXT4-fs error (device loop0): ext4_truncate:4587: inode #13: comm syz.0.10178: mark_inode_dirty error [ 1068.639787][ T9765] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1068.652524][ T9765] loop0: lost filesystem error report for type 5 error -117 [ 1068.653031][ T9765] EXT4-fs (loop0): 1 truncate cleaned up [ 1068.669890][ T9765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1068.686889][ T9765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.945480][ T9831] loop3: detected capacity change from 0 to 1764 [ 1068.988338][ T9829] loop9: detected capacity change from 0 to 8192 [ 1069.058506][ T9829] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 1069.077151][ T9844] loop8: detected capacity change from 0 to 128 [ 1069.110223][ T9829] FAT-fs (loop9): Filesystem has been set read-only [ 1069.145914][ T9829] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 2068) [ 1069.156333][ T9854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10207'. [ 1069.222701][ T9829] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 2068) [ 1069.544571][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.553493][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.728468][ T9857] loop0: detected capacity change from 0 to 2048 [ 1069.799190][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.817489][ T9857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1069.844628][ T9857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.853553][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.946065][ T5332] Process accounting resumed [ 1069.954835][ T9854] loop0: detected capacity change from 0 to 1024 [ 1069.996160][ T9854] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.10207: Failed to acquire dquot type 0 [ 1070.001953][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10214'. [ 1070.008242][ T9854] loop0: lost filesystem error report for type 5 error -117 [ 1070.032155][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10214'. [ 1070.037981][ T9854] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, [ 1070.039606][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1070.048627][ T9854] inode 13: [ 1070.056115][ C1] EXT4-fs (loop0): initial error at time 2000021161: ext4_acquire_dquot:7003 [ 1070.062566][ T9854] block 144: [ 1070.065717][ C1] [ 1070.065727][ C1] EXT4-fs (loop0): last error at time 2000021161: ext4_acquire_dquot:7003 [ 1070.074579][ T9854] freeing already freed block (bit 9); block bitmap corrupt. [ 1070.077802][ C1] [ 1070.106740][ T9854] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.10207: corrupted inode contents [ 1070.153336][ T9854] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #13: comm syz.0.10207: mark_inode_dirty error [ 1070.177365][ T9854] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.10207: corrupted inode contents [ 1070.233895][ T9854] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.10207: mark_inode_dirty error [ 1070.245649][ T9854] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.10207: corrupted inode contents [ 1070.266840][ T9854] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1070.275775][ T9854] loop0: lost filesystem error report for type 5 error -117 [ 1070.276043][ T9854] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.10207: corrupted inode contents [ 1070.296162][ T9854] EXT4-fs error (device loop0): ext4_truncate:4587: inode #13: comm syz.0.10207: mark_inode_dirty error [ 1070.307996][ T9854] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1070.317483][ T9854] loop0: lost filesystem error report for type 5 error -117 [ 1070.317949][ T9854] EXT4-fs (loop0): 1 truncate cleaned up [ 1070.350504][ T9854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1070.381425][ T9854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.625971][ T9894] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1070.833443][ T9903] loop7: detected capacity change from 0 to 2048 [ 1070.869460][ T9903] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1070.947319][T31379] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1070.963542][T31379] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 1070.996757][T31379] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1070.996757][T31379] [ 1071.014578][T31379] EXT4-fs (loop7): Total free blocks count 0 [ 1071.029509][T31379] EXT4-fs (loop7): Free/Dirty block details [ 1071.035918][T31379] EXT4-fs (loop7): free_blocks=2415919504 [ 1071.050435][T31379] EXT4-fs (loop7): dirty_blocks=16 [ 1071.072817][T31379] EXT4-fs (loop7): Block reservation details [ 1071.091610][T31379] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 1071.099225][ T5696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.183602][ T9924] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10227'. [ 1071.886014][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10230'. [ 1071.911520][ T9933] veth1_macvtap: left promiscuous mode [ 1071.955850][ T9933] macsec0: entered promiscuous mode [ 1071.986865][ T9925] loop8: detected capacity change from 0 to 2048 [ 1072.023597][ T9946] loop9: detected capacity change from 0 to 128 [ 1072.030563][ T9946] EXT4-fs: inline encryption not supported [ 1072.089417][ T9946] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1072.130688][ T9946] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.254235][ T9946] EXT4-fs error (device loop9): ext4_validate_block_bitmap:423: comm syz.9.10232: bg 0: bad block bitmap checksum [ 1072.278275][ T9925] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1072.358665][ T9925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.386484][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 1072.386576][ T28] audit: type=1400 audit(2000021163.331:5510): avc: denied { block_suspend } for pid=9955 comm="syz.7.10235" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1072.427475][ T8302] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1072.508436][ T5332] Process accounting resumed [ 1072.557599][ T9924] Quota error (device loop8): do_check_range: Getting block 64 out of range 1-5 [ 1072.616477][ T9924] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1072.686329][ T9924] EXT4-fs error (device loop8): ext4_acquire_dquot:7003: comm syz.8.10227: Failed to acquire dquot type 0 [ 1072.715382][ T9965] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #3: comm syz.7.10237: corrupted inode contents [ 1072.751739][ T9924] loop8: lost filesystem error report for type 5 error -117 [ 1072.761082][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1072.774842][ C1] EXT4-fs (loop8): initial error at time 2000021163: ext4_acquire_dquot:7003 [ 1072.783654][ C1] EXT4-fs (loop8): last error at time 2000021163: ext4_acquire_dquot:7003 [ 1072.805927][ T9965] fserror_report: 11 callbacks suppressed [ 1072.805943][ T9965] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1072.825221][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1072.840706][ C1] EXT4-fs (loop7): initial error at time 2000021163: ext4_do_update_inode:5569: inode 3 [ 1072.850454][ C1] EXT4-fs (loop7): last error at time 2000021163: ext4_do_update_inode:5569: inode 3 [ 1072.899825][ T9971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1073.019374][ T9924] EXT4-fs error (device loop8): mb_free_blocks:2047: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1073.035807][ T9965] EXT4-fs (loop7): Remounting filesystem read-only [ 1073.042566][ T9924] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #13: comm syz.8.10227: corrupted inode contents [ 1073.055471][ T9965] Quota error (device loop7): write_blk: dquota write failed [ 1073.060659][ T9924] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1073.063336][ T9965] Quota error (device loop7): qtree_write_dquot: Error -30 occurred while creating quota [ 1073.064351][ T9924] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #13: comm syz.8.10227: mark_inode_dirty error [ 1073.073151][ T9965] EXT4-fs (loop7): 1 truncate cleaned up [ 1073.100411][ T9924] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1073.100512][ T9965] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1073.100615][ T9924] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #13: comm syz.8.10227: corrupted inode contents [ 1073.119426][ T9965] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.156831][ T9924] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1073.157035][ T9924] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #13: comm syz.8.10227: mark_inode_dirty error [ 1073.171633][ T28] audit: type=1400 audit(2000021164.061:5511): avc: denied { shutdown } for pid=9958 comm="syz.7.10237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1073.198474][ T9924] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1073.198978][ T9924] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #13: comm syz.8.10227: corrupted inode contents [ 1073.222908][ T9924] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1073.223093][ T9924] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 1073.241362][ T9924] loop8: lost filesystem error report for type 5 error -117 [ 1073.241834][ T9924] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #13: comm syz.8.10227: corrupted inode contents [ 1073.265180][ T9924] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1073.265396][ T9924] EXT4-fs error (device loop8): ext4_truncate:4587: inode #13: comm syz.8.10227: mark_inode_dirty error [ 1073.286158][ T9924] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1073.286368][ T9924] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 1073.304682][ T9924] loop8: lost filesystem error report for type 5 error -117 [ 1073.305193][ T9924] EXT4-fs (loop8): 1 truncate cleaned up [ 1073.319087][ T9924] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1073.333051][ T9924] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.677682][ T5696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.755121][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10243'. [ 1075.874396][T10002] set_capacity_and_notify: 2 callbacks suppressed [ 1075.874413][T10002] loop3: detected capacity change from 0 to 1024 [ 1075.892198][T10002] EXT4-fs: Ignoring removed oldalloc option [ 1075.898875][T10002] EXT4-fs: Ignoring removed bh option [ 1075.933025][T10002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1075.994695][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10247'. [ 1075.996665][ T28] audit: type=1400 audit(2000021166.708:5512): avc: denied { ioctl } for pid=10014 comm="syz.8.10251" path="socket:[149850]" dev="sockfs" ino=149850 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1076.046821][ T28] audit: type=1400 audit(2000021166.727:5513): avc: denied { write } for pid=10001 comm="syz.3.10247" lport=57590 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1076.072505][ T28] audit: type=1400 audit(2000021166.727:5514): avc: denied { getopt } for pid=10001 comm="syz.3.10247" lport=57590 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1076.120246][ T28] audit: type=1400 audit(2000021166.727:5515): avc: denied { setopt } for pid=10001 comm="syz.3.10247" lport=57590 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1076.126579][T10024] lo speed is unknown, defaulting to 1000 [ 1076.152054][T10024] lo speed is unknown, defaulting to 1000 [ 1076.162190][T10008] syzkaller1: entered promiscuous mode [ 1076.167689][T10008] syzkaller1: entered allmulticast mode [ 1076.462088][T10029] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10255'. [ 1076.841853][ T4842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.941758][T10042] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10258'. [ 1076.987265][T10034] loop9: detected capacity change from 0 to 2048 [ 1077.021564][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10260'. [ 1077.093113][T10060] netlink: 'syz.7.10266': attribute type 2 has an invalid length. [ 1077.101140][T10034] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1077.118654][T10060] netlink: 'syz.7.10266': attribute type 11 has an invalid length. [ 1077.131863][T10062] loop3: detected capacity change from 0 to 512 [ 1077.141940][T10034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.152555][T10060] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10266'. [ 1077.166643][T10062] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1077.200550][T10062] EXT4-fs (loop3): 1 orphan inode deleted [ 1077.206354][T10062] EXT4-fs (loop3): 1 truncate cleaned up [ 1077.236764][ T5989] Bluetooth: hci0: Frame reassembly failed (-84) [ 1077.243645][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10267'. [ 1077.271208][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10267'. [ 1077.353522][T24494] Process accounting resumed [ 1077.359945][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10267'. [ 1077.369970][T10029] loop9: detected capacity change from 0 to 1024 [ 1077.379547][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10267'. [ 1077.401651][T10029] EXT4-fs error (device loop9): ext4_acquire_dquot:7003: comm syz.9.10255: Failed to acquire dquot type 0 [ 1077.438200][T10029] loop9: lost filesystem error report for type 5 error -117 [ 1077.438532][T10029] EXT4-fs error (device loop9): mb_free_blocks:2047: group 0, [ 1077.445889][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1077.445911][ C0] EXT4-fs (loop9): initial error at time 2000021168: ext4_acquire_dquot:7003 [ 1077.445937][ C0] EXT4-fs (loop9): last error at time 2000021168: ext4_acquire_dquot:7003 [ 1077.477501][T10029] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1077.526474][T10029] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #13: comm syz.9.10255: corrupted inode contents [ 1077.539428][T10029] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1077.555809][T10060] loop7: detected capacity change from 0 to 512 [ 1077.571697][T10029] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #13: comm syz.9.10255: mark_inode_dirty error [ 1077.583911][T10029] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1077.584135][T10029] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #13: comm syz.9.10255: corrupted inode contents [ 1077.606899][T10029] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #13: comm syz.9.10255: mark_inode_dirty error [ 1077.627815][T10029] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #13: comm syz.9.10255: corrupted inode contents [ 1077.640218][T10029] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 1077.656580][T10029] loop9: lost filesystem error report for type 5 error -117 [ 1077.656843][T10029] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #13: comm syz.9.10255: corrupted inode contents [ 1077.676896][T10029] EXT4-fs error (device loop9): ext4_truncate:4587: inode #13: comm syz.9.10255: mark_inode_dirty error [ 1077.690862][T10029] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 1077.700034][T10029] loop9: lost filesystem error report for type 5 error -117 [ 1077.700550][T10029] EXT4-fs (loop9): 1 truncate cleaned up [ 1077.756869][T10060] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.803191][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1077.803209][ T28] audit: type=1400 audit(2000021168.401:5520): avc: denied { remove_name } for pid=10059 comm="syz.7.10266" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1077.832548][ T28] audit: type=1400 audit(2000021168.401:5521): avc: denied { unlink } for pid=10059 comm="syz.7.10266" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1077.905150][ T28] audit: type=1400 audit(2000021168.504:5522): avc: denied { read } for pid=10085 comm="syz.8.10273" path="socket:[150788]" dev="sockfs" ino=150788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1077.935520][ T28] audit: type=1400 audit(2000021168.504:5523): avc: denied { ioctl } for pid=10085 comm="syz.8.10273" path="socket:[150788]" dev="sockfs" ino=150788 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1078.063909][ T28] audit: type=1400 audit(2000021168.644:5524): avc: denied { getopt } for pid=10098 comm="syz.7.10277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1078.092298][T10101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.136022][T10101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.165590][T10108] netlink: 'syz.7.10281': attribute type 2 has an invalid length. [ 1078.192958][T10101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.210484][ T28] audit: type=1400 audit(2000021168.784:5525): avc: denied { read } for pid=10109 comm="syz.7.10282" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1078.233756][ T28] audit: type=1400 audit(2000021168.784:5526): avc: denied { open } for pid=10109 comm="syz.7.10282" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1078.315990][T10101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.331191][ T28] audit: type=1400 audit(2000021168.897:5527): avc: denied { bind } for pid=10109 comm="syz.7.10282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1078.373838][ T28] audit: type=1400 audit(2000021168.897:5528): avc: denied { write } for pid=10109 comm="syz.7.10282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1078.414734][T31379] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.429262][T31379] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.455969][T31379] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.456685][ T28] audit: type=1400 audit(2000021169.018:5529): avc: denied { getopt } for pid=10115 comm="syz.9.10284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1078.483883][T31379] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.567051][T10122] loop3: detected capacity change from 0 to 512 [ 1078.612796][T10122] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1078.654339][T10124] loop9: detected capacity change from 0 to 4096 [ 1078.667996][T10122] EXT4-fs (loop3): 1 truncate cleaned up [ 1078.748643][ T8302] EXT4-fs error (device loop9): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 1078.803155][ T8302] EXT4-fs error (device loop9): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 1078.829541][T10117] loop8: detected capacity change from 0 to 2048 [ 1078.981907][T24495] Process accounting resumed [ 1078.999374][T10113] loop8: detected capacity change from 0 to 1024 [ 1079.027083][T10113] EXT4-fs error (device loop8): ext4_acquire_dquot:7003: comm syz.8.10283: Failed to acquire dquot type 0 [ 1079.038800][T10113] loop8: lost filesystem error report for type 5 error -117 [ 1079.039247][T10113] EXT4-fs error (device loop8): mb_free_blocks:2047: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1079.061429][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1079.061454][ C0] EXT4-fs (loop8): initial error at time 2000021169: ext4_acquire_dquot:7003 [ 1079.061481][ C0] EXT4-fs (loop8): last error at time 2000021169: ext4_acquire_dquot:7003 [ 1079.088571][T10113] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #13: comm syz.8.10283: corrupted inode contents [ 1079.101387][T10113] fserror_report: 5 callbacks suppressed [ 1079.101439][T10113] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1079.107491][T10113] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #13: comm syz.8.10283: mark_inode_dirty error [ 1079.129952][T10113] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1079.135820][T10113] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #13: comm syz.8.10283: corrupted inode contents [ 1079.157782][T10113] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1079.158116][T10113] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #13: comm syz.8.10283: mark_inode_dirty error [ 1079.179673][T10113] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1079.180663][T10144] netlink: 'syz.7.10294': attribute type 25 has an invalid length. [ 1079.186469][T10113] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #13: comm syz.8.10283: corrupted inode contents [ 1079.212081][T10113] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1079.218425][T10113] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 1079.237466][T31379] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.238261][T10113] loop8: lost filesystem error report for type 5 error -117 [ 1079.248393][T10113] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #13: comm syz.8.10283: corrupted inode contents [ 1079.268538][T10113] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1079.268828][T10113] EXT4-fs error (device loop8): ext4_truncate:4587: inode #13: comm syz.8.10283: mark_inode_dirty error [ 1079.289393][T10113] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1079.289604][T10113] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 1079.295232][T10144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.299356][T10113] loop8: lost filesystem error report for type 5 error -117 [ 1079.317572][T10113] EXT4-fs (loop8): 1 truncate cleaned up [ 1079.344356][T10154] tipc: Can't bind to reserved service type 2 [ 1079.352132][T31379] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.384859][T16362] Bluetooth: hci0: command 0x1003 tx timeout [ 1079.391178][ T3562] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1079.416345][T31379] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.511007][T31379] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.528502][T10147] lo speed is unknown, defaulting to 1000 [ 1079.544130][T10147] lo speed is unknown, defaulting to 1000 [ 1079.663127][T31379] bridge_slave_1: left allmulticast mode [ 1079.669227][T31379] bridge_slave_1: left promiscuous mode [ 1079.675124][T31379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.693302][T31379] bridge_slave_0: left allmulticast mode [ 1079.703410][T31379] bridge_slave_0: left promiscuous mode [ 1079.717020][T31379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.824058][T31379] bond1 (unregistering): (slave bond0): Releasing active interface [ 1079.834531][T31379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1079.852709][T31379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.866596][T31379] bond0 (unregistering): Released all slaves [ 1079.875290][T31379] bond1 (unregistering): Released all slaves [ 1079.952070][T31379] hsr_slave_0: left promiscuous mode [ 1079.958576][T31379] hsr_slave_1: left promiscuous mode [ 1079.964703][T31379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1079.973026][T31379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.984012][T31379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.991698][T31379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1080.005039][T31379] veth0_macvtap: left promiscuous mode [ 1080.010889][T31379] veth1_vlan: left promiscuous mode [ 1080.016312][T31379] veth0_vlan: left promiscuous mode [ 1080.099961][T31379] team0 (unregistering): Port device team_slave_1 removed [ 1080.102563][T10201] loop8: detected capacity change from 0 to 256 [ 1080.114721][T10201] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1080.128472][T31379] team0 (unregistering): Port device team_slave_0 removed [ 1080.240768][T10147] chnl_net:caif_netlink_parms(): no params data found [ 1080.377595][T10147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.400635][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.417106][T10147] bridge_slave_0: entered allmulticast mode [ 1080.423826][T10147] bridge_slave_0: entered promiscuous mode [ 1080.442920][T10147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.451303][T10147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.460079][T10236] xt_limit: Overflow, try lower: 2147483649/3300 [ 1080.466948][T10147] bridge_slave_1: entered allmulticast mode [ 1080.476125][T10147] bridge_slave_1: entered promiscuous mode [ 1080.529784][T10147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.540779][T10147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.582217][T10147] team0: Port device team_slave_0 added [ 1080.594026][T10147] team0: Port device team_slave_1 added [ 1080.611619][T10147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1080.619233][T10147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.660580][T10147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1080.681232][T10147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1080.695582][T10147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.724666][T10147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.776024][T10147] hsr_slave_0: entered promiscuous mode [ 1080.785069][T10147] hsr_slave_1: entered promiscuous mode [ 1080.791648][T10147] debugfs: 'hsr0' already exists in 'hsr' [ 1080.797482][T10147] Cannot create hsr debugfs directory [ 1080.903889][T31379] vlan0: left promiscuous mode [ 1080.909254][T31379] bridge0: port 3(vlan0) entered disabled state [ 1080.916201][T31379] bridge_slave_1: left allmulticast mode [ 1080.929099][T31379] bridge_slave_1: left promiscuous mode [ 1080.938822][T31379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.971869][T31379] bridge_slave_0: left promiscuous mode [ 1080.977636][T31379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.001298][T31379] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 1081.155243][T31379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1081.168242][T31379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1081.179204][T31379] bond0 (unregistering): Released all slaves [ 1081.187228][T31379] bond1 (unregistering): Released all slaves [ 1081.196215][T31379] bond2 (unregistering): Released all slaves [ 1081.287753][T31379] tipc: Left network mode [ 1081.331052][T31379] hsr_slave_0: left promiscuous mode [ 1081.349007][T31379] hsr_slave_1: left promiscuous mode [ 1081.368337][T31379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.421834][T31379] team0 (unregistering): Port device team_slave_1 removed [ 1081.432693][T31379] team0 (unregistering): Port device team_slave_0 removed [ 1081.477110][T10292] __nla_validate_parse: 15 callbacks suppressed [ 1081.477207][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10321'. [ 1081.594035][T10314] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10322'. [ 1081.692501][T10332] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 1081.713123][T10332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1081.764137][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10326'. [ 1081.836346][T10147] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1081.845834][T10147] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1081.867217][T10147] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1081.878756][T10147] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1081.951838][T10147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.968955][T10147] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.976233][T10367] loop3: detected capacity change from 0 to 8192 [ 1081.987659][T31046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.994736][T31046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.020797][T10376] loop8: detected capacity change from 0 to 256 [ 1082.021062][T31046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.034252][T31046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.034612][T10376] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1082.071669][T31379] IPVS: stop unused estimator thread 0... [ 1082.082405][T10147] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1082.117685][T10147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1082.246764][T10147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.351521][T10391] loop3: detected capacity change from 0 to 2048 [ 1082.382229][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10330'. [ 1082.411848][T10147] veth0_vlan: entered promiscuous mode [ 1082.437981][T10147] veth1_vlan: entered promiscuous mode [ 1082.486203][T10147] veth0_macvtap: entered promiscuous mode [ 1082.498483][T10147] veth1_macvtap: entered promiscuous mode [ 1082.537538][T10147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.557559][T10147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.576493][T31379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.585255][T31379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.597711][T12084] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.619744][T12084] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.677382][T10441] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10333'. [ 1082.775203][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10336'. [ 1082.928355][T10479] lo speed is unknown, defaulting to 1000 [ 1082.948686][T10479] lo speed is unknown, defaulting to 1000 [ 1083.158429][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 1083.158445][ T28] audit: type=1326 audit(2000021941.416:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.0.10341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fe677e0c629 code=0x7ffc0000 [ 1083.415045][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10352'. [ 1083.425845][ T28] audit: type=1400 audit(2000021941.659:5636): avc: denied { create } for pid=10480 comm="syz.7.10342" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1083.459489][T10541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.477079][T10542] loop3: detected capacity change from 0 to 512 [ 1083.514886][ T28] audit: type=1400 audit(2000021941.659:5637): avc: denied { write } for pid=10480 comm="syz.7.10342" name="file0" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1083.538416][T10542] EXT4-fs: Ignoring removed oldalloc option [ 1083.555465][T10541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.559565][ T28] audit: type=1400 audit(2000021941.659:5638): avc: denied { open } for pid=10480 comm="syz.7.10342" path="/209/file0" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1083.565888][T10542] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1083.599910][ T28] audit: type=1400 audit(2000021941.659:5639): avc: denied { ioctl } for pid=10480 comm="syz.7.10342" path="/209/file0" dev="tmpfs" ino=1150 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1083.614305][T10542] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.10354: bg 0: block 337: padding at end of block bitmap is not set [ 1083.653791][T10542] loop3: lost filesystem error report for type 5 error -117 [ 1083.654855][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1083.668780][ C0] EXT4-fs (loop3): initial error at time 2000021941: ext4_validate_block_bitmap:441 [ 1083.678255][ C0] EXT4-fs (loop3): last error at time 2000021941: ext4_validate_block_bitmap:441 [ 1083.687832][T10542] EXT4-fs (loop3): Remounting filesystem read-only [ 1083.694923][T10542] EXT4-fs (loop3): 1 truncate cleaned up [ 1083.701671][T10542] EXT4-fs mount: 14 callbacks suppressed [ 1083.701682][T10542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1083.729873][ T4842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.752267][T10563] loop3: detected capacity change from 0 to 256 [ 1083.775324][T10563] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1083.860795][ T28] audit: type=1400 audit(2000021942.070:5640): avc: denied { unlink } for pid=5696 comm="syz-executor" name="file0" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1083.934150][T10580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10359'. [ 1083.992732][T10588] loop0: detected capacity change from 0 to 256 [ 1084.089160][T10575] loop7: detected capacity change from 0 to 1024 [ 1084.121242][T10604] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 1084.180746][T10575] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 1084.200637][T10575] System zones: 0-1, 3-36 [ 1084.224544][T10575] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.10358: bad orphan inode 134217728 [ 1084.241015][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10365'. [ 1084.246377][ T28] audit: type=1400 audit(2000021942.435:5641): avc: denied { mount } for pid=10619 comm="syz.8.10365" name="/" dev="autofs" ino=152090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1084.272224][T10575] loop7: lost filesystem error report for type 5 error -117 [ 1084.287779][T10620] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10365'. [ 1084.296781][T10575] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1084.346265][ T28] audit: type=1400 audit(2000021942.473:5642): avc: denied { mounton } for pid=10619 comm="syz.8.10365" path="/file0" dev="autofs" ino=152091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 1084.410146][ T28] audit: type=1400 audit(2000021942.585:5643): avc: denied { getopt } for pid=10574 comm="syz.7.10358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1084.413612][T10631] netlink: 'syz.8.10368': attribute type 7 has an invalid length. [ 1084.477817][ T28] audit: type=1400 audit(2000021942.641:5644): avc: denied { read } for pid=10574 comm="syz.7.10358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1084.633104][T10651] loop2: detected capacity change from 0 to 1024 [ 1084.651918][T10651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1084.670195][T10651] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1084.757435][T10659] program syz.3.10377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1084.779249][T10147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.828594][ T5696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.838150][T10664] netlink: 'syz.3.10379': attribute type 4 has an invalid length. [ 1084.856635][T10664] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1084.993227][T10684] loop3: detected capacity change from 0 to 256 [ 1085.009335][T10684] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1085.027866][T10686] loop6: detected capacity change from 0 to 7 [ 1085.058999][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.068612][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.076611][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.086436][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.098959][T10686] loop6: unable to read partition table [ 1085.117093][T10686] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1085.126918][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1085.142696][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.152572][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.152832][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.152879][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.153017][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.153041][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.153137][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.153160][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.153297][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.153326][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1085.192921][T10697] SELinux: failed to load policy [ 1085.261178][T10703] xt_TCPMSS: Only works on TCP SYN packets [ 1085.376526][T10708] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.399059][ T5696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.535532][T10725] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 1085.605538][T10730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1085.771677][T10737] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1085.802033][T10737] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size [ 1086.012689][T10752] usb usb1: check_ctrlrecip: process 10752 (syz.8.10409) requesting ep 01 but needs 81 [ 1086.026397][T10752] usb usb1: usbfs: process 10752 (syz.8.10409) did not claim interface 0 before use [ 1086.162436][T10766] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1086.208664][T10766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1086.224846][T10766] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1086.280884][T10778] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1086.311780][T10147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.575080][T10808] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1086.605465][T10808] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1086.634024][T10808] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1086.654993][T10808] System zones: 0-1, 3-36 [ 1086.667469][T10808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1086.865248][T10147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.137629][T10829] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 1087.155862][T10831] usb usb1: check_ctrlrecip: process 10831 (syz.3.10437) requesting ep 01 but needs 81 [ 1087.182785][T10831] usb usb1: usbfs: process 10831 (syz.3.10437) did not claim interface 0 before use [ 1087.199704][T10832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1087.207385][T10832] IPv6: NLM_F_CREATE should be set when creating new route [ 1087.214644][T10832] IPv6: NLM_F_CREATE should be set when creating new route [ 1087.221957][T10832] IPv6: NLM_F_CREATE should be set when creating new route [ 1087.342306][T10838] __nla_validate_parse: 8 callbacks suppressed [ 1087.342321][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10439'. [ 1087.781669][T10861] set_capacity_and_notify: 6 callbacks suppressed [ 1087.781688][T10861] loop7: detected capacity change from 0 to 512 [ 1087.872227][T10861] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1087.895399][T10861] EXT4-fs (loop7): filesystem is read-only [ 1087.909439][T10861] EXT4-fs (loop7): failed to initialize system zone (-117) [ 1087.917082][T10861] EXT4-fs (loop7): mount failed [ 1088.129737][T10870] loop2: detected capacity change from 0 to 1024 [ 1088.155350][T10872] loop7: detected capacity change from 0 to 512 [ 1088.345239][T10864] geneve2: entered promiscuous mode [ 1088.402021][T10872] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.10448: inode has both inline data and extents flags [ 1088.418780][T10872] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1088.419761][T10870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.428959][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1088.428984][ C0] EXT4-fs (loop7): initial error at time 2000022202: ext4_orphan_get:1391: inode 15 [ 1088.429015][ C0] EXT4-fs (loop7): last error at time 2000022202: ext4_orphan_get:1391: inode 15 [ 1088.469763][T10872] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.10448: couldn't read orphan inode 15 (err -117) [ 1088.504539][T10872] loop7: lost filesystem error report for type 5 error -117 [ 1088.504998][T10872] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.528125][T10870] netlink: 404 bytes leftover after parsing attributes in process `syz.2.10447'. [ 1088.533337][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 1088.533354][ T28] audit: type=1400 audit(2000022202.438:5661): avc: denied { setopt } for pid=10868 comm="syz.2.10447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1088.593824][T10870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10447'. [ 1088.602952][T10870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10447'. [ 1088.618231][ T28] audit: type=1400 audit(2000022202.438:5662): avc: denied { read } for pid=10868 comm="syz.2.10447" lport=61173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1088.626466][T10870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10447'. [ 1088.650518][ T28] audit: type=1400 audit(2000022202.522:5663): avc: denied { create } for pid=10871 comm="syz.7.10448" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1088.693628][T10884] loop3: detected capacity change from 0 to 512 [ 1088.729817][ T5696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.733289][ T28] audit: type=1400 audit(2000022202.560:5664): avc: denied { read } for pid=10871 comm="syz.7.10448" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1088.799306][T10884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.827041][T10884] ext4 filesystem being mounted at /309/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1088.852715][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10452'. [ 1088.864693][ T28] audit: type=1400 audit(2000022458.756:5665): avc: denied { mounton } for pid=10883 comm="syz.3.10450" path="/309/file2/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1088.911156][T10901] loop8: detected capacity change from 0 to 512 [ 1088.920411][T10901] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1088.932190][T10901] EXT4-fs (loop8): 1 truncate cleaned up [ 1088.940086][T10901] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.944335][ T28] audit: type=1326 audit(2000022458.830:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="syz.3.10450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4c35c629 code=0x7ffc0000 [ 1088.983569][ T28] audit: type=1326 audit(2000022458.830:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="syz.3.10450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4c35c629 code=0x7ffc0000 [ 1089.007385][ T28] audit: type=1326 audit(2000022458.830:5668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="syz.3.10450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4c35c629 code=0x7ffc0000 [ 1089.031128][ T28] audit: type=1326 audit(2000022458.830:5669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="syz.3.10450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdb4c35c629 code=0x7ffc0000 [ 1089.058878][ T28] audit: type=1326 audit(2000022458.830:5670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="syz.3.10450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4c35c629 code=0x7ffc0000 [ 1089.083870][T10884] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #4: comm syz.3.10450: corrupted inode contents [ 1089.096154][T10884] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #4: comm syz.3.10450: mark_inode_dirty error [ 1089.115897][T10906] 9p: Bad value for 'rfdno' [ 1089.124225][T10906] program syz.8.10455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1089.134366][T10905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10456'. [ 1089.151152][T10147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.160417][T10908] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 1089.173427][T10884] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #4: comm syz.3.10450: corrupted inode contents [ 1089.185799][T10884] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #4: comm syz.3.10450: mark_inode_dirty error [ 1089.200011][T10884] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.10450: Failed to acquire dquot type 1 [ 1089.217207][T10884] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 1089.226811][T10912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1089.227550][T10884] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #4: comm syz.3.10450: ES cache extent failed: add [2,1,44,0x1] conflict with existing [2,327680,576460752303423487,0x18] [ 1089.227550][T10884] [ 1089.321937][ T7920] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.355748][ T4842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.438614][T10921] dummy0: entered allmulticast mode [ 1089.566167][T10933] netlink: 100 bytes leftover after parsing attributes in process `syz.3.10462'. [ 1089.742293][T10913] loop0: detected capacity change from 0 to 2048 [ 1089.949601][T10949] netlink: 88 bytes leftover after parsing attributes in process `syz.8.10467'. [ 1090.295998][T10913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1090.356895][T10913] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.675131][ T6258] Process accounting resumed [ 1090.814628][T10974] loop0: detected capacity change from 0 to 1024 [ 1090.929172][T10974] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.10456: Failed to acquire dquot type 0 [ 1090.982447][T10978] bond0: (slave bond_slave_1): Releasing backup interface [ 1090.993850][T10974] loop0: lost filesystem error report for type 5 error -117 [ 1090.994266][T10974] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, [ 1091.001596][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1091.001618][ C1] EXT4-fs (loop0): initial error at time 2000022716: ext4_acquire_dquot:7003 [ 1091.001647][ C1] EXT4-fs (loop0): last error at time 2000022716: ext4_acquire_dquot:7003 [ 1091.033619][T10974] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1091.080268][T10984] loop3: detected capacity change from 0 to 512 [ 1091.097355][T10984] EXT4-fs: journaled quota format not specified [ 1091.099397][T10974] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.10456: corrupted inode contents [ 1091.127789][T10986] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 1091.156467][T10974] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1091.156637][T10974] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #13: comm syz.0.10456: mark_inode_dirty error [ 1091.191271][T10989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1091.210030][T10974] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1091.210261][T10974] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.10456: corrupted inode contents [ 1091.240499][T10974] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1091.240810][T10974] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.10456: mark_inode_dirty error [ 1091.262364][T10974] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1091.266910][T10974] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.10456: corrupted inode contents [ 1091.291449][T10974] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1091.291657][T10974] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1091.352952][T10974] loop0: lost filesystem error report for type 5 error -117 [ 1091.353232][T10974] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.10456: corrupted inode contents [ 1091.440740][ T3562] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1091.583039][T10974] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1091.583267][T10974] EXT4-fs error (device loop0): ext4_truncate:4587: inode #13: comm syz.0.10456: mark_inode_dirty error [ 1091.607723][T10974] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1091.607921][T10974] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1091.626372][T10974] loop0: lost filesystem error report for type 5 error -117 [ 1091.626738][T10974] EXT4-fs (loop0): 1 truncate cleaned up [ 1091.640578][T10974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1091.660961][T10974] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.879688][T11010] loop8: detected capacity change from 0 to 512 [ 1091.891912][T11010] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1092.448966][T11049] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 1092.515320][T11052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1093.072687][T11056] netlink: 'syz.0.10502': attribute type 13 has an invalid length. [ 1093.105854][T11060] loop7: detected capacity change from 0 to 512 [ 1093.118598][T11060] EXT4-fs: journaled quota format not specified [ 1093.387568][T11076] loop8: detected capacity change from 0 to 4096 [ 1093.431952][T11080] loop7: detected capacity change from 0 to 128 [ 1093.432601][T11080] FAT-fs (loop7): bogus logical sector size 2134 [ 1093.432619][T11080] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1093.492937][T11076] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1093.533948][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10512'. [ 1093.653750][T11094] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10508'. [ 1093.675507][T11094] vlan2: entered allmulticast mode [ 1093.680656][T11094] macsec0: entered allmulticast mode [ 1093.718555][T11100] FAULT_INJECTION: forcing a failure. [ 1093.718555][T11100] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.720739][T11094] veth1_macvtap: entered allmulticast mode [ 1093.854983][T11100] CPU: 1 UID: 0 PID: 11100 Comm: syz.0.10516 Tainted: G W syzkaller #0 PREEMPT(full) [ 1093.855034][T11100] Tainted: [W]=WARN [ 1093.855040][T11100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1093.855051][T11100] Call Trace: [ 1093.855057][T11100] [ 1093.855066][T11100] __dump_stack+0x1d/0x30 [ 1093.855094][T11100] dump_stack_lvl+0x95/0xd0 [ 1093.855119][T11100] dump_stack+0x15/0x1b [ 1093.855197][T11100] should_fail_ex+0x263/0x280 [ 1093.855221][T11100] should_failslab+0x8c/0xb0 [ 1093.855255][T11100] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1093.855289][T11100] ? __alloc_skb+0x2d6/0x690 [ 1093.855363][T11100] __alloc_skb+0x2d6/0x690 [ 1093.855385][T11100] ? __alloc_skb+0x200/0x690 [ 1093.855408][T11100] netlink_alloc_large_skb+0xbf/0xf0 [ 1093.855432][T11100] netlink_sendmsg+0x40c/0x6f0 [ 1093.855503][T11100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1093.855534][T11100] ____sys_sendmsg+0x5af/0x600 [ 1093.855689][T11100] ___sys_sendmsg+0x195/0x1e0 [ 1093.855729][T11100] __x64_sys_sendmsg+0xd4/0x160 [ 1093.855842][T11100] x64_sys_call+0x194c/0x3020 [ 1093.855922][T11100] do_syscall_64+0x12c/0x370 [ 1093.855956][T11100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.855979][T11100] RIP: 0033:0x7fe677e0c629 [ 1093.855996][T11100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.856026][T11100] RSP: 002b:00007fe676867028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1093.856048][T11100] RAX: ffffffffffffffda RBX: 00007fe678085fa0 RCX: 00007fe677e0c629 [ 1093.856064][T11100] RDX: 00000000200080c0 RSI: 0000200000000000 RDI: 0000000000000003 [ 1093.856078][T11100] RBP: 00007fe676867090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.856141][T11100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.856152][T11100] R13: 00007fe678086038 R14: 00007fe678085fa0 R15: 00007ffe7f930858 [ 1093.856169][T11100] [ 1094.072662][T11114] loop0: detected capacity change from 0 to 512 [ 1094.073973][T11110] Invalid option length (6669) for dns_resolver key [ 1094.080079][T11114] EXT4-fs: journaled quota format not specified [ 1094.097962][T11113] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 1094.122419][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10518'. [ 1094.143244][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10518'. [ 1094.161860][T11119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1094.222111][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 1094.222125][ T28] audit: type=1400 audit(2000023231.767:5774): avc: denied { connect } for pid=11123 comm="syz.7.10523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1094.270618][ T28] audit: type=1400 audit(2000023231.767:5775): avc: denied { ioctl } for pid=11123 comm="syz.7.10523" path="socket:[153901]" dev="sockfs" ino=153901 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1094.322866][T11128] loop2: detected capacity change from 0 to 128 [ 1094.344901][T11130] bridge0: entered allmulticast mode [ 1094.351180][T11130] bridge_slave_1: left allmulticast mode [ 1094.355099][T11128] syz.2.10525: attempt to access beyond end of device [ 1094.355099][T11128] loop2: rw=2049, sector=154, nr_sectors = 16 limit=128 [ 1094.357015][T11130] bridge_slave_1: left promiscuous mode [ 1094.377192][T11130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.392944][T11128] syz.2.10525: attempt to access beyond end of device [ 1094.392944][T11128] loop2: rw=2049, sector=186, nr_sectors = 16 limit=128 [ 1094.395654][ T28] audit: type=1400 audit(2000023231.926:5776): avc: denied { watch watch_reads } for pid=11131 comm="syz.7.10528" path="/237" dev="tmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1094.436290][ T7920] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.441057][T11133] netlink: 'syz.0.10526': attribute type 7 has an invalid length. [ 1094.453767][T11130] bridge_slave_0: left allmulticast mode [ 1094.459409][T11130] bridge_slave_0: left promiscuous mode [ 1094.465553][T11128] syz.2.10525: attempt to access beyond end of device [ 1094.465553][T11128] loop2: rw=2049, sector=218, nr_sectors = 16 limit=128 [ 1094.491856][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10527'. [ 1094.495854][T11133] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10526'. [ 1094.501206][T11130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.517950][T11128] syz.2.10525: attempt to access beyond end of device [ 1094.517950][T11128] loop2: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 1094.533171][T11128] syz.2.10525: attempt to access beyond end of device [ 1094.533171][T11128] loop2: rw=2049, sector=234, nr_sectors = 16 limit=128 [ 1094.535318][ T28] audit: type=1326 audit(2000023232.057:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.0.10526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe677e0c629 code=0x7ffc0000 [ 1094.547002][T11128] syz.2.10525: attempt to access beyond end of device [ 1094.547002][T11128] loop2: rw=2049, sector=202, nr_sectors = 16 limit=128 [ 1094.572531][ T28] audit: type=1326 audit(2000023232.057:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.0.10526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe677e0c629 code=0x7ffc0000 [ 1094.608426][T11128] syz.2.10525: attempt to access beyond end of device [ 1094.608426][T11128] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 1094.609606][ T28] audit: type=1326 audit(2000023232.057:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.0.10526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe677e0c629 code=0x7ffc0000 [ 1094.647651][ T28] audit: type=1326 audit(2000023232.057:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.0.10526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe677e0c629 code=0x7ffc0000 [ 1094.671874][ T28] audit: type=1326 audit(2000023232.057:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.0.10526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe677e0c629 code=0x7ffc0000 [ 1094.695831][ T28] audit: type=1326 audit(2000023232.057:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.0.10526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe677e0c629 code=0x7ffc0000 [ 1094.707024][T11134] syz.2.10525: attempt to access beyond end of device [ 1094.707024][T11134] loop2: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 1094.722508][ T28] audit: type=1326 audit(2000023232.057:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.0.10526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe677e0c629 code=0x7ffc0000 [ 1094.733179][T11134] syz.2.10525: attempt to access beyond end of device [ 1094.733179][T11134] loop2: rw=2049, sector=234, nr_sectors = 2 limit=128 [ 1094.772816][T11137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.787493][T11137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.886090][T11146] loop8: detected capacity change from 0 to 1024 [ 1094.899472][T11146] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.000115][T31046] kworker/u8:1: attempt to access beyond end of device [ 1095.000115][T31046] loop2: rw=8388609, sector=154, nr_sectors = 2 limit=128 [ 1095.025893][T31046] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 1095.054507][T11169] loop0: detected capacity change from 0 to 512 [ 1095.067805][T11169] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1095.077428][T11169] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 1095.097566][T11169] EXT4-fs (loop0): 1 truncate cleaned up [ 1095.103648][T11169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.174857][T11169] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #2: block 4: comm syz.0.10534: lblock 0 mapped to illegal pblock 4 (length 1) [ 1095.206982][T11169] EXT4-fs (loop0): Remounting filesystem read-only [ 1095.232874][T11181] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.10538' sets config #1 [ 1095.255856][ T7920] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.272440][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10534'. [ 1095.281498][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10534'. [ 1095.505303][T11184] lo speed is unknown, defaulting to 1000 [ 1095.513005][T11213] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 1095.520579][T11184] lo speed is unknown, defaulting to 1000 [ 1095.527627][T11215] netlink: 'syz.7.10544': attribute type 12 has an invalid length. [ 1095.574787][T11219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.667575][T11225] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=11225 comm=syz.7.10546 [ 1095.667877][T11224] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=11224 comm=syz.7.10546 [ 1095.813566][T11244] netlink: 'syz.7.10548': attribute type 1 has an invalid length. [ 1095.831430][T11244] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10548'. [ 1095.939351][ T4519] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.025804][T11258] loop3: detected capacity change from 0 to 512 [ 1096.040080][T11258] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1096.061699][T11258] EXT4-fs (loop3): 1 orphan inode deleted [ 1096.067891][T11258] EXT4-fs (loop3): 1 truncate cleaned up [ 1096.074026][T11258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1096.135590][ T4842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.279406][T11272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10557'. [ 1096.316271][T11275] loop7: detected capacity change from 0 to 512 [ 1096.334578][T11275] EXT4-fs: journaled quota format not specified [ 1096.414497][T11283] loop3: detected capacity change from 0 to 512 [ 1096.437334][T11286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4125 sclass=netlink_route_socket pid=11286 comm=syz.7.10561 [ 1096.462578][T11283] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1096.470692][T11283] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 1096.477894][T11262] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1096.488755][T11283] EXT4-fs (loop3): 1 truncate cleaned up [ 1096.504472][T11283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1096.522159][T11283] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 4: comm syz.3.10560: lblock 0 mapped to illegal pblock 4 (length 1) [ 1096.536555][T11283] EXT4-fs (loop3): Remounting filesystem read-only [ 1096.600969][T11297] tmpfs: Unknown parameter ' ' [ 1096.717384][T11305] dummy0: entered promiscuous mode [ 1096.723035][T11305] macsec1: entered allmulticast mode [ 1096.728467][T11305] dummy0: entered allmulticast mode [ 1096.735461][T11305] dummy0: left allmulticast mode [ 1096.741413][T11305] dummy0: left promiscuous mode [ 1096.811650][T11309] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 1097.076528][T11326] loop0: detected capacity change from 0 to 512 [ 1097.095091][T11326] EXT4-fs: journaled quota format not specified [ 1097.315306][ T4842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.409625][T11339] 9pnet_fd: p9_fd_create_unix (11339): problem connecting socket: ./file1: -1 [ 1097.899635][T11335] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1097.923798][T11335] FAT-fs (loop3): Filesystem has been set read-only [ 1097.977667][T11344] FAT-fs (loop8): Directory bread(block 524322) failed [ 1097.988150][T11344] FAT-fs (loop8): Directory bread(block 524323) failed [ 1097.995523][T11344] FAT-fs (loop8): Directory bread(block 524324) failed [ 1098.002959][T11344] FAT-fs (loop8): Directory bread(block 524325) failed [ 1098.009915][T11344] FAT-fs (loop8): Directory bread(block 524326) failed [ 1098.017339][T11344] FAT-fs (loop8): Directory bread(block 524327) failed [ 1098.024590][T11344] FAT-fs (loop8): Directory bread(block 524328) failed [ 1098.031669][T11344] FAT-fs (loop8): Directory bread(block 524329) failed [ 1098.047180][T11344] FAT-fs (loop8): Directory bread(block 524322) failed [ 1098.105944][ T4519] ================================================================== [ 1098.114062][ T4519] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 1098.121686][ T4519] [ 1098.124108][ T4519] read-write to 0xffff88814fb69848 of 8 bytes by task 11340 on cpu 1: [ 1098.132348][ T4519] inode_add_bytes+0x47/0xe0 [ 1098.136954][ T4519] __dquot_alloc_space+0x180/0x8a0 [ 1098.142088][ T4519] shmem_inode_acct_blocks+0x125/0x230 [ 1098.147753][ T4519] shmem_get_folio_gfp+0x5b2/0xd60 [ 1098.153673][ T4519] shmem_write_begin+0xfc/0x1f0 [ 1098.158568][ T4519] generic_perform_write+0x183/0x490 [ 1098.163916][ T4519] shmem_file_write_iter+0xc5/0xf0 [ 1098.169048][ T4519] __kernel_write_iter+0x319/0x590 [ 1098.174273][ T4519] dump_user_range+0xa7d/0xdb0 [ 1098.179055][ T4519] elf_core_dump+0x21a2/0x2330 [ 1098.183838][ T4519] coredump_write+0xacf/0xdf0 [ 1098.188605][ T4519] vfs_coredump+0x26c7/0x3130 [ 1098.193290][ T4519] get_signal+0xd80/0xf60 [ 1098.197646][ T4519] arch_do_signal_or_restart+0x96/0x450 [ 1098.203219][ T4519] irqentry_exit+0xf7/0x520 [ 1098.207824][ T4519] asm_exc_page_fault+0x26/0x30 [ 1098.212690][ T4519] [ 1098.215009][ T4519] read to 0xffff88814fb69848 of 8 bytes by task 4519 on cpu 0: [ 1098.222617][ T4519] generic_fillattr+0x27d/0x340 [ 1098.227479][ T4519] shmem_getattr+0x181/0x200 [ 1098.232255][ T4519] vfs_getattr_nosec+0x146/0x1e0 [ 1098.237288][ T4519] vfs_getattr+0x48/0x60 [ 1098.241707][ T4519] vfs_statx_path+0x28/0x140 [ 1098.246321][ T4519] vfs_statx+0xc4/0x170 [ 1098.250488][ T4519] vfs_fstatat+0x118/0x170 [ 1098.254920][ T4519] __se_sys_newfstatat+0x55/0x3e0 [ 1098.259957][ T4519] __x64_sys_newfstatat+0x55/0x70 [ 1098.265026][ T4519] x64_sys_call+0x2c64/0x3020 [ 1098.269886][ T4519] do_syscall_64+0x12c/0x370 [ 1098.274488][ T4519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.280382][ T4519] [ 1098.282695][ T4519] value changed: 0x0000000000020288 -> 0x00000000000202a0 [ 1098.289876][ T4519] [ 1098.292273][ T4519] Reported by Kernel Concurrency Sanitizer on: [ 1098.298418][ T4519] CPU: 0 UID: 0 PID: 4519 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 1098.309613][ T4519] Tainted: [W]=WARN [ 1098.313409][ T4519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1098.323637][ T4519] ================================================================== [ 1098.335203][T11344] FAT-fs (loop8): Directory bread(block 524323) failed