last executing test programs: 10m33.173079967s ago: executing program 32 (id=134): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x65, 0x0, 0x1, 0x0, 0x0, 0x5, 0x8040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22a0, 0x2, @perf_bp={&(0x7f0000000500), 0x5}, 0x1a, 0xfffffffffffffffd, 0x10000, 0x2, 0x3, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, r0, 0x9) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f0000000440)=0x1e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010", @ANYRES32=0x0, @ANYBLOB="7f5500000000000020001280080001006774700014000280050009000b"], 0x40}}, 0x20004050) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000b40)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000080000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c204000000050001000502000507180000000104080500018000000000000000040000000000000000"], 0x110}}], 0x1, 0xc0c0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRES32=r2], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) brk(0x800000) socket$key(0xf, 0x3, 0x2) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) brk(0xcd27) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000400)={0x0, &(0x7f00000003c0)}) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102170, 0x20000000010000, 0xb1, 0x1, 0x7, 0x3, 0xffff, 0x0, 0x17f7e833, 0x0, 0x2000000020000006}, 0x0, 0x5, r1, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r4], 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, 0x0, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f00000002c0)) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x5) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0xfffdfff7, 0x335, 0x8, 0x7, 0x0, "8c2a891528a2853a995200"}) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000ec0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@init_itable}, {@dioread_lock}, {@resgid}, {@data_ordered}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2604be0d8b76eb7d690c1e0000008314e2d784fbd5c27145f631cffea598fc060006004e2100"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x1) 10m24.780469726s ago: executing program 33 (id=191): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000002c0)='./file1\x00', 0x2480444, &(0x7f0000000ac0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r1, @ANYRES32=r1, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16=r1, @ANYRES64=r1, @ANYBLOB="a23b938eabd9436fab39ce57cea13a51c01bc66294352ad6bef3146e17bc31a3747487afeec021ffa241286224d8d7f7acaeb35caad3706b002845f7c1845411ea21248adb20921e0b92a930f3d70e26d279b8ee4a98ff473a41141674200dea402768967bc703cfef6f354f6770c8c9fde0d34d2072bd7ddcd262fbf1bbbf36045c00000000000000"], 0x1, 0x267, &(0x7f0000000740)="$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") r2 = socket$inet6(0xa, 0x800, 0x20000000) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x888) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) waitid(0x0, r8, &(0x7f0000000180), 0x2, &(0x7f0000000600)) socket(0x10, 0x2, 0x0) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900)}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x3, 0x8080) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) 10m14.481734115s ago: executing program 6 (id=193): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000300)='./file1\x00', 0x80000308) rename(&(0x7f0000000200)='./file3\x00', &(0x7f0000000240)='./file1\x00') 10m14.241745952s ago: executing program 6 (id=246): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_getoverrun(r0) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) timer_getoverrun(r0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m14.065408218s ago: executing program 6 (id=249): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2bdc, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfde01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x9, 0xfff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e5}, 0x24004814) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000440)="1a", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0x1c, r5, 0x1, 0xfc, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) 10m12.928457174s ago: executing program 6 (id=251): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x300001a, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xfc, 0x2c6, &(0x7f0000000240)="$eJzs3U9rY1UUAPDzkjR91UWKuFEEH+jCVZm6ddMqI4hdKRHUjcXpgCRloIWAI9iZ1XwCl+LXcOvOtd9AEHeCuxmkcuX9axKbzERNOzD+fpvc3nvPfSfvPNJVTj575Xh0604W9x/+HHmeRWcv9uJRFtvRida96AUA8Ox4lFL8niJio/47Wzmy17m6rACAq1T//6897VwAgOvx4cefvL9/cHDzg6LI46XBg8kwi4jjB5Nhvb5/O76IcRzFjRjEeUS6UI/ffe/gZvSK0na8fnw2GU7mzt//Lbaq+N0YxPbi+N2i1sQPI8rXjXguiti/vdEeNYgXF8e/uSA+hv1447WZ/HdiED99HndiHLeijJ3Gf71bFO+kbx5+9Wl5mTI+68Rws9rX2IpI3WsrCgAAAAAAAAAAAAAAAAAAAAAAz7ydosjq9j1V/55yqum/0z2v1neK1vZ8f546/qJfcN0fKEXToucsxbdtf50bRVGkZuM0vhcv9/ywAAAAAAAAAAAAAAAAAAAAAJROv7w7OhyPj07+86A7Ohy33QDar/X/2wP3ZmZejbujw+7yAzdXv9Zst4Ey18dujl4v1nBbnjyIH7bKfI5OTn+tZvK5Pd81+f7zkzenxf2oCW8Ls9Z38cLbFxkWzVJ7k0eH2ZOulbeF+352qR8rp5FlczNVbcdHJ6l6JM7TfE3zJTezv4a7UT6j/ecXLv2ZUlrtnLd+qWvUzGRVi43V0thoBkuflvxyLX5cfuDCj4s/UkrddXzuAAAAAAAAAAAAAAAAAAAAl81/cfpv7jev9xaGdq40MQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4RtPf/28HeUTMz1wanDXBj9vTDPpxcvqU3yIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/A38FAAD//+lWSxE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0xd) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x20, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x7ff, 0x1081, 0x72, 0x4, 0x1b, "d528bd09f4302ba065084d1be3b4df86f2ab5d"}) sendmsg$kcm(r2, &(0x7f0000002480)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x3, 0x3, 0x2, 0x3}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000540)="4eaef7806bde4f99288956c3a7e8b3eb9bedf517f310e1457df7d58bbdd2a2f39c5cbc5023c9f9e37e39921f1bea775100892247d1ec526a874f500867b81903b5a73113e337658c587badeeb8060dc83d419e9a9b3ade0e1bab978b04d58c6cad2ffc0609bec3278b93c58abd00b7cbe7f311d033158dbb0a400b8bbbfa98c163f98c93bca732abd581bc6029248030e72f389a017fc6b1479e997dc6d1476edbfce3d6d15c1f9a2e7208c24ca8ac7228200fe573fa6bc4956263a33749c6cab43e8627", 0xc4}, {&(0x7f0000000640)="4f9b58d8164129db783b31550ef1e6fce3b90de3a184589cc454aea6ae2ef1db31e65cc6fe3263546f725993c14027282df894378c4d4392a9cece97325c2a02f9dcd7376cf6fe0bcf96403b1d96aac81e94e8eb53de68d6ccedb5d4df6ce7e71c4d785d22d8ac0382eb87c98ff2ea2836ddd988a628c4665e2c43d0c5dfb908552f059c1fe027d5b379443a61d4d800f8632f5406ce3a0ccde5863d13dcfb4064000dcca23afeeef10f25b18fe7b8d7b88b2d941631b540789fdf183cf4a2bf2f2d02fa862ea89bd78043d3a0e8a178041318c381ddc78ba73e", 0xda}, {&(0x7f0000000740)="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", 0xfc}], 0x3, &(0x7f0000001280)=[{0xa0, 0x116, 0x0, "c9e8dc77013708fdde056e3f3c4c23ecd1c264bd68446febaa77f9804cc9fac8e1be9e99bd64fba4765c34afef893c82cce3de53b02b8d4a3fbc05d40fe67316cc9a60b4eb42421b967720cd011c8472a150eb9fce1f837d70122432926e6171f1452ff712ef2ef7a50a66c4898b4748237095fe375af060a5e1c49e77af8cc8ef59810ee53d64310bd8a9485b8275"}, {0xd0, 0x13e, 0x1000, "358c6c0057e7a7f2e5624147b2fdec7c67a3cee010d7cb3e2b1178d826ba9b82649d8e5a50074106116d0ed163c54e135d90b90b180bda8e35b9f87135795fdd12175a68be811778307bc5767368073483d28706a3319d3c4d1b9deb8814fb2595b9132b8ed9469000d4c7d5b694b8745026f054fd776cfdebd1117a3b3b15fbf773f4a5211c2877d80c10b101097267c1d6da8e60232bd17956badd982513020fb67f3c51a3925e577f87b1d6721a54a9ff5cded9059cf24aaf"}, {0x60, 0x88, 0x4, "923e68b166a0ed758f682cfdbacf7d65fb5b4a20ca3ef5684af4329ae3651a58d6c42ba918c787915c94f6ef0942448a4e8d3db85a13f4856048c80bcb32d0c773400264949af35dcbb7"}, {0x1010, 0xd1cc971203b1385a, 0x43, "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"}, {0x18, 0x88, 0xc7d, "6e7db6ec43e929"}], 0x11f8}, 0x14000) 10m12.832961757s ago: executing program 34 (id=251): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x300001a, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xfc, 0x2c6, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0xd) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x20, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x7ff, 0x1081, 0x72, 0x4, 0x1b, "d528bd09f4302ba065084d1be3b4df86f2ab5d"}) sendmsg$kcm(r2, &(0x7f0000002480)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x3, 0x3, 0x2, 0x3}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000540)="4eaef7806bde4f99288956c3a7e8b3eb9bedf517f310e1457df7d58bbdd2a2f39c5cbc5023c9f9e37e39921f1bea775100892247d1ec526a874f500867b81903b5a73113e337658c587badeeb8060dc83d419e9a9b3ade0e1bab978b04d58c6cad2ffc0609bec3278b93c58abd00b7cbe7f311d033158dbb0a400b8bbbfa98c163f98c93bca732abd581bc6029248030e72f389a017fc6b1479e997dc6d1476edbfce3d6d15c1f9a2e7208c24ca8ac7228200fe573fa6bc4956263a33749c6cab43e8627", 0xc4}, {&(0x7f0000000640)="4f9b58d8164129db783b31550ef1e6fce3b90de3a184589cc454aea6ae2ef1db31e65cc6fe3263546f725993c14027282df894378c4d4392a9cece97325c2a02f9dcd7376cf6fe0bcf96403b1d96aac81e94e8eb53de68d6ccedb5d4df6ce7e71c4d785d22d8ac0382eb87c98ff2ea2836ddd988a628c4665e2c43d0c5dfb908552f059c1fe027d5b379443a61d4d800f8632f5406ce3a0ccde5863d13dcfb4064000dcca23afeeef10f25b18fe7b8d7b88b2d941631b540789fdf183cf4a2bf2f2d02fa862ea89bd78043d3a0e8a178041318c381ddc78ba73e", 0xda}, {&(0x7f0000000740)="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", 0xfc}], 0x3, &(0x7f0000001280)=[{0xa0, 0x116, 0x0, "c9e8dc77013708fdde056e3f3c4c23ecd1c264bd68446febaa77f9804cc9fac8e1be9e99bd64fba4765c34afef893c82cce3de53b02b8d4a3fbc05d40fe67316cc9a60b4eb42421b967720cd011c8472a150eb9fce1f837d70122432926e6171f1452ff712ef2ef7a50a66c4898b4748237095fe375af060a5e1c49e77af8cc8ef59810ee53d64310bd8a9485b8275"}, {0xd0, 0x13e, 0x1000, "358c6c0057e7a7f2e5624147b2fdec7c67a3cee010d7cb3e2b1178d826ba9b82649d8e5a50074106116d0ed163c54e135d90b90b180bda8e35b9f87135795fdd12175a68be811778307bc5767368073483d28706a3319d3c4d1b9deb8814fb2595b9132b8ed9469000d4c7d5b694b8745026f054fd776cfdebd1117a3b3b15fbf773f4a5211c2877d80c10b101097267c1d6da8e60232bd17956badd982513020fb67f3c51a3925e577f87b1d6721a54a9ff5cded9059cf24aaf"}, {0x60, 0x88, 0x4, "923e68b166a0ed758f682cfdbacf7d65fb5b4a20ca3ef5684af4329ae3651a58d6c42ba918c787915c94f6ef0942448a4e8d3db85a13f4856048c80bcb32d0c773400264949af35dcbb7"}, {0x1010, 0xd1cc971203b1385a, 0x43, "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"}, {0x18, 0x88, 0xc7d, "6e7db6ec43e929"}], 0x11f8}, 0x14000) 10m11.441366432s ago: executing program 5 (id=260): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 10m11.440818081s ago: executing program 5 (id=261): socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x7, 0x3}, 0x20) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, 0x0, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x10}, @IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x240088c2) 10m11.291398896s ago: executing program 5 (id=264): sendmmsg$unix(0xffffffffffffffff, &(0x7f000000cc80)=[{{0x0, 0x0, &(0x7f0000003400)}}], 0x1, 0x24040080) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 10m11.157127451s ago: executing program 5 (id=265): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000140)) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0x9, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x4, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf7}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) r7 = dup2(r4, r5) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000040)='M', &(0x7f0000000080)='./file0\x00', r7) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x8, 0x20, 0x7, 0x8}, &(0x7f0000000880)=0x18) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000008c0)={r8, 0x5}, 0x8) 10m10.317834657s ago: executing program 5 (id=270): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffc65}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xffffffffffffffd9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2404c045) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r0}}, './file0/../file0\x00'}) r3 = io_uring_setup(0x7ff8, &(0x7f0000000040)={0x0, 0x100c89f, 0x8000, 0x7, 0x20002f9, 0x0, r2}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000cc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000d4864b043195a9ca9ac44d8356f6", @ANYRES32=0x1, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000400"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1a, 0xffffff6a, 0x1, 0x7, 0x481, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xe, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x4, 0x0, 0x7, 0x2, 0x9, 0x20}, @call={0x85, 0x0, 0x0, 0x14}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x9, 0x4, 0x7, 0x100, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000440)='syzkaller\x00', 0xffffffff, 0x13, &(0x7f0000000480)=""/19, 0x41000, 0x3, '\x00', r9, 0x25, r10, 0x8, &(0x7f0000000580)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x4, 0x7939b217, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff, r11, r12, r13, r14, 0x1], &(0x7f0000000ac0)=[{0x1, 0x2, 0x9}, {0x3, 0x2, 0xe, 0x3}], 0x10, 0xa}, 0x94) io_setup(0xe, &(0x7f00000000c0)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) 10m9.644040479s ago: executing program 5 (id=272): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x2, 0x6, 0x628, 0x488, 0x290, 0x488, 0x0, 0x0, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xff, 0xff000000, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x168, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x400, 0x5}}, @common=@srh1={{0x90}, {0x6, 0x81, 0x3, 0x1, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @private2, [0xffffff, 0xffffffff, 0xffffff00, 0xffffff00], [0xff, 0xffffffff, 0xff000000, 0xffffff00], [0xffffffff, 0xffff00, 0xff, 0xffffff00], 0x800, 0x2041}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x21}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0xffff, 0x44, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@loopback, 0x1, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a0500230800003c0012800b00010069703667726500002c0002801400060000000000000000000000ffffe0000002140007ffff000000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x8040, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4, 0x2}, 0xd) setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x8, 0xfff3}, {}, {0xf, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setrlimit(0x7, &(0x7f0000000140)={0x8}) 10m9.60645125s ago: executing program 35 (id=272): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x2, 0x6, 0x628, 0x488, 0x290, 0x488, 0x0, 0x0, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xff, 0xff000000, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x168, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x400, 0x5}}, @common=@srh1={{0x90}, {0x6, 0x81, 0x3, 0x1, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @private2, [0xffffff, 0xffffffff, 0xffffff00, 0xffffff00], [0xff, 0xffffffff, 0xff000000, 0xffffff00], [0xffffffff, 0xffff00, 0xff, 0xffffff00], 0x800, 0x2041}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x21}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0xffff, 0x44, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@loopback, 0x1, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a0500230800003c0012800b00010069703667726500002c0002801400060000000000000000000000ffffe0000002140007ffff000000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x8040, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4, 0x2}, 0xd) setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x8, 0xfff3}, {}, {0xf, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setrlimit(0x7, &(0x7f0000000140)={0x8}) 9m22.367602569s ago: executing program 7 (id=634): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0xfff0bdc1, 0xffffffffffffffff, 0x8000, 0x0, 0xffffffffffffffff, 0x7fff, 0x4, 0x100000000, 0xff, 0x0, 0xfffffffffffffffc, 0x618f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0xeff, 0x6, 0x679e, 0x0, 0x3, 0x6}) 9m22.3371677s ago: executing program 7 (id=635): syz_usb_connect$hid(0x2, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201100100000008ef17b560000000000001090224000100008000090400800903000100092108000001222800090581034000000bfe6faa3342e8fd27014ebda9aee23b99adc654986ebaae55e204d0c915e65a270259d2e51cf0e28d6cbd2ee1424d6699bf15afeecc25f4b68efcb6d8591fe6b2dbe51b949c401d06d155db2dd94b518ccfc7157b9c503d3eee674992c3cc4128c34c02ff7ec6804349d874"], 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x1, 0x26c, &(0x7f0000000340)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001900010900000000fbdbdf250218"], 0x48}}, 0x40810) prctl$PR_SET_THP_DISABLE(0x29, 0x0) io_setup(0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x45) 9m21.354444921s ago: executing program 7 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x3, 'geneve0\x00', {0xb0d6}, 0xfff7}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x1e0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x24, 0x0, &(0x7f0000001740)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000500)={0xe8be44185cf721a3, 0x80, 0x28, 0x1, 0x10, 0x0, 0x0, 0x100000002000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffd, 0xc}, 0x8312, 0x7, 0x0, 0x6, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, r1, 0x400000000, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x0, 0x4e}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='net/raw\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in=@remote}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f00000017c0)=0xe8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x381}) socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) 9m20.888935556s ago: executing program 7 (id=642): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x1d, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x102) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000a00)=""/4096) r4 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x200, 0x0, 0x0, 0x3, 0x8, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d14bf7966d61fdcf335263bd9bffbcc2542ded710382c807f1dde1a33200000000000000000000b500", "f28359738e229a4c66810000000000d306e6d602000000000000000000010001", [0x204, 0x3]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x102) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000039c0)={r6, 0xe0, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000036c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f0000003700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe8, &(0x7f00000037c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000003800), &(0x7f0000003840), 0x8, 0x84, 0x8, 0x8, &(0x7f0000003880)}}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000003b00)={r4, &(0x7f0000003a00)='\x00', 0x0, &(0x7f0000003a40)={@_ha_fsid={[0x9, 0x6]}, {0xe6b, 0x4, 0x2605, 0x1}}, 0x8, &(0x7f0000003a80)={@_ha_fsid}, &(0x7f0000003ac0)=0x2}) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003c00)=@o_path={&(0x7f0000003bc0)='./file0\x00', 0x0, 0x0, r4}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003cc0)=@bpf_ext={0x1c, 0x16, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x8, 0x8, 0x6, 0x3ff, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x8, 0x1000, &(0x7f00000026c0)=""/4096, 0x41100, 0x10, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000003b40)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000003b80)={0x2, 0x10, 0x7, 0x400}, 0x10, 0xd7ab, r10, 0x4, &(0x7f0000003c40)=[r7], &(0x7f0000003c80)=[{0x0, 0x4, 0xb, 0x3}, {0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xc}, {0x5, 0x1, 0xb, 0x2}], 0x10, 0x80000000}, 0x94) r11 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r11, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x2) fchdir(r12) r13 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r13, 0xc0189373, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x8004) fallocate(r5, 0x10, 0x3, 0x7c27) 9m19.955593746s ago: executing program 7 (id=649): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x19, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd29f, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc0}, @ldst={0x0, 0x1, 0x6, 0x5, 0x3, 0xfffffffffffffff8, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x326}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x3, 0x1, 0x3ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f00000003c0)=[{0x3, 0x4, 0x8, 0x7}, {0x1, 0x4, 0x7, 0xa}, {0x2, 0x2, 0x10, 0x7}], 0x10, 0x8}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x48c0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) recvmmsg(r4, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12112, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$getsig(0x4202, 0x0, 0x2, &(0x7f0000000040)) socket(0x21, 0x3, 0x0) unshare(0xc040400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/252, 0xfc, 0x0, &(0x7f0000000500)=""/1, 0x1}, &(0x7f0000000580)=0x40) sendmsg$nl_netfilter(r7, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002440)=ANY=[], 0x1088}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f00000003c0)=ANY=[@ANYRES16=r8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, r7}, 0x94) 9m19.624351047s ago: executing program 7 (id=652): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') (fail_nth: 9) 9m19.613473747s ago: executing program 36 (id=652): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') (fail_nth: 9) 9m13.768363743s ago: executing program 0 (id=684): syz_usbip_server_init(0x1) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000004c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x3723, 0xf080, 0xc, 0xa0002f5}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func={0xd, 0x0, 0x0, 0xc, 0x2}, @func={0x1, 0x0, 0x0, 0xc, 0x5}]}}, 0x0, 0x32, 0x0, 0x3}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x10000, 0x3) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) 9m12.920715791s ago: executing program 0 (id=687): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x40, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=[0x7], &(0x7f0000000180)=[0x2], 0x791c, 0x1, 0x1}}, 0x40) 9m11.895864204s ago: executing program 0 (id=695): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\n'], 0x27) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r3 = inotify_init1(0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x13, r3, 0xec779000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="15020000000010001c00128009000100766c616e0d02cb07845a866b73833b7e000000000c000280", @ANYRES32=r5, @ANYRESDEC=r1, @ANYRESDEC=r5, @ANYBLOB="844d03a6372cc44957b79fb805b3c6b6156b27d9de2d41af819fed2b8c094e5814783c6bf1be1042aab927e84e410063ea57108edd41ed2def15bd3a8cc3b30df96b89e92ba8fedfee33c32b198f23de4047ac7ef41bb5fe77447f5fbea2ca1229d88c875e6b0c70e154a8ac7da838a9929508c4d2a006458b3374b153d94034100df5153460ef02eb0b368886df9e16af30f60fee"], 0x4c}, 0x1, 0xba01}, 0x10) 9m11.821389886s ago: executing program 0 (id=697): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0108000400000000f7ff0a00000008", @ANYRES32], 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012005783000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}}, 0x800) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x16, 0x7f, 0x7, 0xffffe39f, 0x10020, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[], 0x208}, 0x40010) socket$kcm(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003200), 0x20500, 0x0) ioctl$TIOCCBRK(r5, 0x5428) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) 9m11.442545508s ago: executing program 0 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x80000, 0x0}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) 9m10.76553196s ago: executing program 0 (id=704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r2, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "1419bc9b0b455a8cf3"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "dcc4a5573e06870c"}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000000}, 0x40) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e1e, 0x3, 'sed\x00', 0x21, 0x2, 0x6e}, 0x2c) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r4, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4040) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 9m10.74920326s ago: executing program 37 (id=704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r2, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "1419bc9b0b455a8cf3"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "dcc4a5573e06870c"}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000000}, 0x40) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e1e, 0x3, 'sed\x00', 0x21, 0x2, 0x6e}, 0x2c) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r4, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4040) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6m54.654955157s ago: executing program 8 (id=1249): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x1, 0x26c, &(0x7f0000000340)="$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") r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000001900)={0x4, 0x80, 0x66, 0xc, 0x10, 0x6b, 0x0, 0xff, 0x200, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x10b5, 0x1c000}, 0x106800, 0x9, 0x2, 0x6, 0xef, 0xfffffff0, 0x9, 0x0, 0x4d1, 0x0, 0xf}) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = syz_io_uring_complete(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f00000018c0)={0xa2f4, 0x0, &(0x7f0000001840)=[{&(0x7f0000000600)=""/237, 0xed}, {&(0x7f0000000700)=""/209, 0xd1}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/1, 0x1}], &(0x7f0000001880)=[0x8000000000000001, 0x2, 0x7fffffffffffffff, 0x4, 0x5, 0x1], 0x4}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000200)=""/179, 0xb3) 6m53.904321131s ago: executing program 8 (id=1252): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x3, 'geneve0\x00', {0xb0d6}, 0xfff7}) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x1e0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x24, 0x0, &(0x7f0000001740)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000500)={0xe8be44185cf721a3, 0x80, 0x28, 0x1, 0x10, 0x0, 0x0, 0x100000002000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffd, 0xc}, 0x8312, 0x7, 0x0, 0x6, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, r1, 0x400000000, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x0, 0x4e}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='net/raw\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in=@remote}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f00000017c0)=0xe8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x381}) socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) 6m53.442386725s ago: executing program 8 (id=1256): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x29, 0x17, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf3ac}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x201}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xffd, &(0x7f0000001cc0)=""/4093, 0x41100, 0x23}, 0x94) 6m53.280280241s ago: executing program 8 (id=1257): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0x100000a, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x1000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x2, 0x0) 6m53.035654199s ago: executing program 8 (id=1259): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00004459d36919c99e670000000000000000cc006ecc7304a675a4ecfa3f2c60e1648c9bdc64c43d3234c0c0901b08c36e664fa86deba5894d9b01cd781a92800ad5c3db05", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x2c040480) r1 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x100) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x38) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='2', 0x1}], 0x1, 0x7, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x20) ioctl$RTC_AIE_ON(r2, 0x7001) 6m52.248253374s ago: executing program 8 (id=1264): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff0000000000000000850000005600000085000000080000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) write$cgroup_devices(r4, &(0x7f0000000180)={'c', ' *:* ', 'rwm\x00'}, 0xa) syz_usb_connect$uac1(0x1, 0xc3, &(0x7f0000000540)=ANY=[@ANYBLOB="12010003000000ffcc178d0d4000010203010902b10003010d80070904000000010100000a2401070035000201020924030305040106ff1324060303060a0003000300040009000700030f240606020403000800040007009e0904010000010200000904010101010200000b2402017f040c016af71a09240201001004039b09240201070302049109240201020709018309050109ff030740031025010c2df7ff090402004cca4067f0272c8be8000001020000090402010101020000090500eb080725010402010000000000"], &(0x7f0000000500)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x0, 0x5, 0x9, 0x8, 0x9}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4c0a}}]}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='(()}^+&)\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r6, 0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000100000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m51.75278271s ago: executing program 38 (id=1264): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff0000000000000000850000005600000085000000080000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) write$cgroup_devices(r4, &(0x7f0000000180)={'c', ' *:* ', 'rwm\x00'}, 0xa) syz_usb_connect$uac1(0x1, 0xc3, &(0x7f0000000540)=ANY=[@ANYBLOB="12010003000000ffcc178d0d4000010203010902b10003010d80070904000000010100000a2401070035000201020924030305040106ff1324060303060a0003000300040009000700030f240606020403000800040007009e0904010000010200000904010101010200000b2402017f040c016af71a09240201001004039b09240201070302049109240201020709018309050109ff030740031025010c2df7ff090402004cca4067f0272c8be8000001020000090402010101020000090500eb080725010402010000000000"], &(0x7f0000000500)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x0, 0x5, 0x9, 0x8, 0x9}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4c0a}}]}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='(()}^+&)\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r6, 0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000100000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.576163436s ago: executing program 3 (id=2981): socket(0x6f824a14e8e8727a, 0x4, 0x85) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xffffffffffdffffd}, 0x40, 0x10001, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_clone(0x24800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@nomblk_io_submit}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) 9.393685412s ago: executing program 1 (id=2983): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) socket(0x2, 0x80805, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x0) 9.336220953s ago: executing program 9 (id=2984): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x403, 0x70b528, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0xba01, 0x0, 0x44004}, 0x810) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) 7.942645018s ago: executing program 1 (id=2987): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket(0x2, 0x80805, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x0) 7.705573225s ago: executing program 9 (id=2988): r0 = syz_io_uring_setup(0x10cd, &(0x7f0000000180)={0x0, 0x9bfd, 0x4, 0x20, 0x23f}, &(0x7f0000000200)=0x0, &(0x7f00000003c0), 0x0) r2 = syz_io_uring_setup(0x7d89, &(0x7f0000000240)={0x0, 0x8001, 0x200, 0x0, 0x2e6}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000540)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000080)=@ethtool_ts_info}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_io_uring_modify_offsets$generic(r3, r4, 0x2c, 0x10000) syz_io_uring_modify_offsets$flags(r1, r4, 0x38, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x4, &(0x7f0000000b80)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000400)="5e43c29c50ab9176b73290975cec48f4034f65bb9a9361fdc265fe699336725371d89693aa3b26962ffa9e2f9b666ffeb7c754bd0076520d337c6604cc9db3ec69d4b61001c649608bf23ca0b0c0a738e2f22f86743bb9361fc844fadd4cc1cec711a42203", 0x65, 0x3, 0x0, 0x2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0xd6, r2, &(0x7f0000000800)="9d09f558c19a44054a7e582f728dc5073e721e9316f6ec508ab4382fa79cd24e2f1e7e746f413534cf569e15165ede376108a474bbfe885e58f7a208c67be7cab1aff8d311008e3d211403d07e2679d5ad800bfbd8f8c2d8fa1a4f73fa2fe95cc3ccfa2953f9d575d5276bb43a2faad06bc76975ca9e3a850c77f90e55348280499e10e01630b8e65923064e3b0f0af1de7ec3facf397e67e836bcc43e7a86e945a683130815bc5273508384b3", 0xad, 0x2, 0x0, 0x981c840db83e60a}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000900)="c10364c061031b7a651164888d62337c69992bf91d89d53f1ae35ec66230b6dbeca0b529d76131a5b0b1fcebb9bbf7af27271000793a5710e451d9a273d3c8c7edf6283360311d1ddef9541ea1f574b68c18ef3de8c72a2d4703aa8a0b82c760722c57c3aeda56779ccf4e091fabebee3e0fad57ffd6546dbfbc8feb0f5fb9f9ab010bfa91e9394f4655056d1448dbe7331b7eab86e94d4c36a6600bf4c24ef667281b37a0e8ab92f433a35d7051a55d6678a9c1312d665a5afe68fbc65bb1f3d08dde34aa80fc5594961ffa8a2857f21279795bd0f3c47d5269e8c1c8e2a496", 0xe0, 0x2, 0x0, 0x3}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x5, 0x200, r6, &(0x7f0000000a40)="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", 0xfb, 0x0, 0x0, 0x1}]) syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[], 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='9', 0x20000108}]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e18, &(0x7f0000000080)={[{@nobarrier}, {@grpid}]}, 0x22, 0x655, &(0x7f00000012c0)="$eJzs3c9vG1kdAPDvjONskg2bLkKIjUBE4rAroU3jsmKBC93lQA8rsRJ7QIjDRk1Soro/lKQSLZVIJA4gFQkhrhXqAf4B7qh3bggJuHHhglQQKqIHqno1P9w4jh2nTWwnmc9HcvzmzdjvfT1+mfc8fp4AKmsh+5NGvBHx7OMkYq5j3WwUKxfK7R7/5+7l7JZEq/XdfyeRlHnt7ZPy/tVyYSoi/vR+xKdr+8vdvH3n6nKzVfhJxPmtazfPb96+8/b6teUrq1dWrzcufO2dd5e+3nin0VHRl5fVKavPpQ++8/lf/PSHX137c/PtJC7GR/Ufr0RXHMdlIRbiWRliZ/5ERLybJXq8LqfNGQih0mrl+7EeEZ+NuajlS4W5WL831soBQ9WqRbQOlgzaADitNG+oqnY/oD22P9w4+KN2oj68nsloPHqvGADtj3+i/MhhKg9y5nHSMTIqPks4dwzlZ2U8vTt1/+nd+fux53OIJ8/3zsQxlNPP9k5EfK5X/Elet3N5pFn86Z6xfhoRSxExWdbvW0eoQ9KRHsbnMAd5kfg790MW/8XyPst//yXL7/5Ya9TxA1BND98rD+Tb2dLu8S/re7T7P9Gj/zN79FMyua7nqI/6+Ne//9c+3k/l/Z60qx+W9Vk+7P2U+/rEf//5pV/1K7/o/83fb9+y8tt9wVF4tBMx3xX/z7Jgy/5PFn/SY/9nm3x8ce9zNfqMBr79l39d6lf+uONvPYh4s+f4Z7dXmqUOOD95fm29ubpU/O1Zxh/++IPf9Su/d/yvDCHS3rL9P9Mn/o79n3Y/LntNbvZ+yp3ujN9/+OBav/JnB+7/9J+TSTHenCxzfrSztbXRiJhMPig3KfOXt7Y2Lhwcb7HNk1Z+3yjif+tLvdv/nvd/V1TT7X+Zh3Dze1cf91v3Mu//jpPJz1qHrEM/Wfwrg/f/vvaf5f3ykGX87/u3vtBv3UHxTx8lMAAAAAAAAKigND8Hm6SLz9NpurhYzJf9TMykzRubW19eu3Hr+krEW/n3IetppEn+lZG5YjlZW2+uNsrvw7aXL3QtfyUiXo+IX9em8+XFyzeaK+MOHgAAAAAAAAAAAAAAAAAAAE6IV8v5/+3rVP+3Vsz/Bypi8AXm9l3/ATgjhnmBSeBky9v/QYf410ZXF2C0HP+hurR/qC7tH6pL+4fq0v6hurR/qK697f8f98ZWEWDkHP8BAAAA4Ex6/YsP/5ZExPY3pvNbZrJcVx9rzYBhe7E2XhtaPYDR06Khup6f+vcLP1A5h+j//3aquG+1hl4bYBySXpl556D8YdB+jf9hz0fu2jl63QAAAAAAAAAAAACAwptvmP8PVWXaH1TXEeb/++kAOOX89D9UlzE+MGAWf0z1WzFo/j8AAAAAAAAAAAAAcGxm81uSLpZzgWcjTRcXIz4VEeeinqytN1eXIuK1iPhrrf5KttwYd6UBAAAAAAAAAAAAAAAAAADgjNm8fefqcrO5utGZ+P++nLOdaF8FdfDGrUNsc2Dim/GCj4pk9C/LdESMfacMLTHRkZNEbGd7/kRUbGMzTkY18sSY/zEBAAAAAAAAAAAAAAAAAEAFdcw97m3+NyOuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM3u71/wckVmaKBxxq472JcccIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxOnwQAAP//+jg4qw==") socket$inet_mptcp(0x2, 0x1, 0x106) 7.701635625s ago: executing program 3 (id=2989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000340)={r0}) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r6 = socket(0x1d, 0x2, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x4c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3541}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x22004051) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r8, 0x6}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmmsg$inet(r6, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 7.538733821s ago: executing program 2 (id=2990): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900), 0xe0}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x3, 0x8080) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 7.503980102s ago: executing program 9 (id=2991): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900), 0xe0}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x3, 0x8080) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x0) 6.561505012s ago: executing program 1 (id=2993): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x4200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000, 0x0, 0x6, 0x7ffffffffffffffd, 0x0, 0x20}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x800, 0x9, 0x6, 0x4000, r1, 0x3e954ee, '\x00', r2, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) r4 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000180)=0x5) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', r2, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[], 0x0) r7 = syz_open_dev$hidraw(0x0, 0x0, 0x81) ioctl$HIDIOCSFEATURE(r7, 0xc0404806, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r0, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000a00)=[0x0, 0x0], &(0x7f0000000a40), 0x0, 0x41, &(0x7f0000000a80)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, &(0x7f0000000b00), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 6.538655382s ago: executing program 2 (id=2994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.328111019s ago: executing program 4 (id=2996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r6, 0x6}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) 6.208051783s ago: executing program 2 (id=2997): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) socket(0x2, 0x80805, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x0) 5.800179786s ago: executing program 1 (id=2998): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000340)={r0}) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x5d) r6 = socket(0x1d, 0x2, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x4c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3541}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x22004051) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmmsg$inet(r6, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) 5.558211973s ago: executing program 9 (id=2999): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x403, 0x70b528, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_MASTER={0x8, 0xa, r0}]}, 0x28}, 0x1, 0xba01, 0x0, 0x44004}, 0x810) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) 4.999936811s ago: executing program 4 (id=3000): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$802154_dgram(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, @short}, 0x14, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (fail_nth: 3) 4.548496436s ago: executing program 2 (id=3001): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket(0x2, 0x80805, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x0) 4.483670947s ago: executing program 4 (id=3002): syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000100)='./file1\x00', 0x1000000, &(0x7f0000000f40)=ANY=[], 0x25, 0x363, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000d7640026b91ce2ca156ef70000000000000000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) recvmmsg(r3, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/244, 0xf4}], 0x1}, 0x1}], 0x2, 0x40018022, 0x0) flock(r2, 0x2) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000400)=0x4, 0x4) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="88082dbd7000fbdbdf250b02000028006e80040001000400020004000100040300000000010004000200040017000000000008000100910b635c606183388cf15a24fe27f361e54b0085b7dc37ce176fe56219a095e91adfd079da9b04f568148d46101adf847da1198e2b5bf3"], 0x3c}}, 0x0) flock(r0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r7) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r8, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) close_range(r6, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) unshare(0x22020400) readahead(0xffffffffffffffff, 0x0, 0x81) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000306050000000000000000000a00000a05000100070000000900020073797a3100000000050001000700000009007a32000000000900020073797a3200"/84], 0x54}}, 0x20040050) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000040000efff00000a00000000"], 0x48) 4.482146258s ago: executing program 3 (id=3003): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket(0x2, 0x80805, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x0) 3.572105296s ago: executing program 2 (id=3004): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900), 0xe0}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x3, 0x8080) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 2.701974354s ago: executing program 1 (id=3005): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900), 0xe0}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x3, 0x8080) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 2.701365254s ago: executing program 4 (id=3006): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcbf2d02ce960ba19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=r3, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd, 0xd, 0x2, 0x4, 0x0, 0x2, 0x18090, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x100000001, 0x401}, 0x8200, 0x1606, 0xfffeffff, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x31, 0x0, 0x5}, 0x0, 0x7, r0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) io_setup(0x3ff, &(0x7f0000000500)=0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000880)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000080)=0xffff834b, 0x4) 2.566951738s ago: executing program 3 (id=3007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.392003954s ago: executing program 9 (id=3008): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r5, 0x0, 0x88000cc, 0x0) write$eventfd(r4, &(0x7f0000000240), 0xffffff14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f00000002c0)) sched_getaffinity(r0, 0x8, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="757466383d302c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c757466383d312c73686f72746e616d653d77696e39352c726f6469722c6e66733d6e6f7374616c655f726f2c726f6469722c757466383d312c73686f72746e616d653d77696e6e742c636865636b3d72656c617865642c00c63b831754d4eeec4cf38c28cf1e3409b9950bbab09abe8d407d1c7c935e034461a37ac3113829124efad15a202673b20ad011cb0f0cedb0cef9f6ec5e2634db26ef8581fd506844d0133ac021c0172b4b36a109949512e8dc6a8c7d603e3ef3cd57451eaee1b0e4804b9ea88fcad7afb59594dcfeaf8d34935fa0e54a36c57d964429e7ec869287810e5d97759017ace0c3f5", @ANYRESOCT, @ANYRES8=0x0, @ANYRESHEX], 0x6, 0x2c3, &(0x7f0000000900)="$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") 2.262527838s ago: executing program 2 (id=3009): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900), 0xe0}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x3, 0x8080) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 1.754257394s ago: executing program 4 (id=3010): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$eJzs3c1vVFUbAPDnTj9oKXk7kDcqLqSJMZAoLS1gGuMCtoY0+BE3urDSgkiBhtZo0YSS4MbEuDHGxJUL8b9QIltWunLhxpUhIWpYmjjmztxbOu1Mv2jnEu7vlwxz7zlze86lfeace+acOwGU1lD6TyVif0TMJhGDyeJSXndkmUON193/+5Mz6SOJWu31P5NIsrT89Un2PJAd3BcRP/+UxL6u1eXOLVy9MDkzM30l2x+Zvzg7Mrdw9fD5i5Pnps9NXxp7cWz8+LHj46NHtnRe11qknbrx/oeDn0289d03/ySj3/82kcSJeCV74fLz2C5DMVT/P0lWZw2Mb3dhBenK/k5qtVotT0u6i60TG5f//noi4skYjK548MsbjE9fLbRywI6qJY33bqCMEvEPJZX3A/Jr+5XXwZVCeiVAJ9w72RgAWB3/3Y2xweirjw3svp/E8mGdJCK2NjLXbE9E3Lk9cePs7YkbsUPjcEBri9cj4qlW8Z/U478afVGtx3+lKf7TfsHp7DlNf22L5a8cKhb/0DmN+O9bM/6jTfy/kz5fa8Twu1ssv/pg873+pvjv3+opAQAAAAAAQGndOhkRL7T6/L+yNP8nWsz/GYiIE9tQ/tCK/dWf/1fubkMxQAv3Tka83HL+byWf/VvtWraEtRo9ydnzM9NHIuJ/EXEoenal+6NrlHH4831ft8sbyub/5Y+0/DvZXMCsHne7dzUfMzU5P/kQpwxk7l2PeLrl/N9kqf1PWrT/6TvD7AbL2PfczdPt8taPf2Cn1L6NONiy/X9w14pk7ftzjNT7AyN5r2C1Zz7+4od25W81/t1iAh5e2v7vXjv+q8ny+/XMbb6MowvdtXZ5W+3/9yZv1O8q1JulfTQ5P39lNKI3OdWVpjalj22+zvA4yuMhj5c0/g89u/b4X6v+f39ELK742clfzWuKc0/8O/B7u/ro/0Nx0vif2lT7v/mNsZvVH9uVv7H2/1i9rT+UpRj/g4av8jDtbU5vEY7drbI6XV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBxUImJPJJXhpe1KZXg4YiAi/h+7KzOX5+afP3v5g0tTaV79+/8r+Tf9Djb2k/z7/6vL9sdW7B+NiL0R8WVXf31/+MzlmamiTx4AAAAAAAAAAAAAAAAAAAAeEQNt1v+n/ugqunbAjusuugJAYVrE/y9F1APoPO0/lJf4h/IS/1Be4h/KS/xDea0d/2+Pd6wiQMdp/6G8xD8AAAAAADxW9h649WsSEYsv9dcfqd4sr6fQmgE7rVJ0BYDCuMUPlJepP1BervGBZJ38vrYHrXfkWmbPPMTBAAAAAAAAAAAAAFA6B/db/w9lZf0/lJf1/1Be+fr/AwXXA+g81/hArLOSv+X6/3WPAgAAAAAAAAAAAAC209zC1QuTMzPTV2y8+WhUo5MbtVrtWvpX8KjUZ/s3kmyGekcKzafCd/5Mezdygvlav4395OLekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGb/BQAA//8wviV5") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r3 = dup2(r0, r1) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000040)='M', &(0x7f0000000080)='./file0\x00', r3) (fail_nth: 1) 1.660163017s ago: executing program 3 (id=3011): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000140)={[{@data_journal}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}, 0x3, 0x5ee, &(0x7f0000000d40)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xae) ioctl$TCSBRKP(r2, 0x5425, 0x8) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r4 = dup2(r0, r1) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='M', &(0x7f0000000080)='./file0\x00', r4) 1.282626789s ago: executing program 1 (id=3012): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) socket(0x2, 0x80805, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x0) 1.102181885s ago: executing program 3 (id=3013): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) socket(0x2, 0x80805, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x0) 361.743909ms ago: executing program 9 (id=3014): socket(0x6f824a14e8e8727a, 0x4, 0x85) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xffffffffffdffffd}, 0x40, 0x10001, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS2(r3, 0x5434, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_clone(0x24800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@nomblk_io_submit}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) 0s ago: executing program 4 (id=3015): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$char_usb(r0, &(0x7f0000000000)='-0', 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "eead00000000000000f46d7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1add0a80939a8ebf07cb417308a3d40aa1c788df600"}, 0xd8) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff00000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000400)=0x3, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000c, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) r6 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r6, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4", 0x12, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x4, 0x6, @local}, 0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = epoll_create(0x3ff) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000080)={0xa0000000, 0x1b54c8}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000440)={0x2000000}) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@initdev, @in=@initdev}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000580)=0xe8) kernel console output (not intermixed with test programs): red promiscuous mode [ 516.228015][T14663] syzkaller0: entered allmulticast mode [ 516.249734][T14662] 8021q: adding VLAN 0 to HW filter on device bond9 [ 517.033463][T14675] loop2: detected capacity change from 0 to 1024 [ 517.141022][T14675] EXT4-fs: quotafile must be on filesystem root [ 517.297249][T14675] __nla_validate_parse: 1 callbacks suppressed [ 517.297267][T14675] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2542'. [ 517.757350][T14685] loop3: detected capacity change from 0 to 512 [ 517.764266][T14685] EXT4-fs: Ignoring removed nomblk_io_submit option [ 517.781047][T14685] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 517.792842][T14685] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2545: corrupted in-inode xattr: e_value size too large [ 517.807169][T14685] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 517.807698][T14685] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2545: couldn't read orphan inode 15 (err -117) [ 517.817021][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 517.817043][ C1] EXT4-fs (loop3): initial error at time 1779062607: ext4_iget_extra_inode:5128: inode 15 [ 517.817077][ C1] EXT4-fs (loop3): last error at time 1779062607: ext4_iget_extra_inode:5128: inode 15 [ 517.855140][T14685] loop3: lost filesystem error report for type 5 error -117 [ 517.857396][T14685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.343161][ T9811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.409034][T14693] hsr0: entered promiscuous mode [ 519.101466][T14699] loop1: detected capacity change from 0 to 512 [ 519.108261][T14699] EXT4-fs: Ignoring removed nomblk_io_submit option [ 520.355710][T14705] loop3: detected capacity change from 0 to 512 [ 520.362470][T14705] EXT4-fs: Ignoring removed nomblk_io_submit option [ 520.471408][T14699] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 520.481407][T14699] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.2546: corrupted in-inode xattr: e_value size too large [ 520.495501][T14699] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 520.495704][T14699] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2546: couldn't read orphan inode 15 (err -117) [ 520.504850][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 520.504882][ C1] EXT4-fs (loop1): initial error at time 1779062610: ext4_iget_extra_inode:5128: inode 15 [ 520.504913][ C1] EXT4-fs (loop1): last error at time 1779062610: ext4_iget_extra_inode:5128: inode 15 [ 520.543206][T14699] loop1: lost filesystem error report for type 5 error -117 [ 520.545551][T14699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.548029][T14705] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 520.576233][T14705] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2548: corrupted in-inode xattr: e_value size too large [ 520.590546][T14705] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 520.591162][T14705] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2548: couldn't read orphan inode 15 (err -117) [ 520.600385][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 520.600408][ C1] EXT4-fs (loop3): initial error at time 1779062610: ext4_iget_extra_inode:5128: inode 15 [ 520.600446][ C1] EXT4-fs (loop3): last error at time 1779062610: ext4_iget_extra_inode:5128: inode 15 [ 520.638370][T14705] loop3: lost filesystem error report for type 5 error -117 [ 520.639083][T14705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.735299][ T7158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.944423][ T9811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.069638][T14714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2551'. [ 521.083365][T14693] loop4: detected capacity change from 0 to 2048 [ 521.376940][T14720] netlink: 'syz.3.2552': attribute type 1 has an invalid length. [ 521.449416][T14720] 8021q: adding VLAN 0 to HW filter on device bond10 [ 521.490250][T14693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.617280][T14693] hsr0: left promiscuous mode [ 521.635678][ T4240] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.692351][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2554'. [ 521.943047][T14729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2554'. [ 523.587101][T14745] netlink: 'syz.4.2557': attribute type 1 has an invalid length. [ 523.618472][T14745] 8021q: adding VLAN 0 to HW filter on device bond12 [ 525.780625][T14770] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2563'. [ 526.865766][T14773] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2563'. [ 527.432924][T14778] loop2: detected capacity change from 0 to 512 [ 527.440112][T14778] EXT4-fs: Ignoring removed nomblk_io_submit option [ 527.469351][T14778] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 527.479201][T14778] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2561: corrupted in-inode xattr: e_value size too large [ 527.493281][T14778] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 527.493818][T14778] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2561: couldn't read orphan inode 15 (err -117) [ 527.503120][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 527.503142][ C1] EXT4-fs (loop2): initial error at time 1779062617: ext4_iget_extra_inode:5128: inode 15 [ 527.503190][ C1] EXT4-fs (loop2): last error at time 1779062617: ext4_iget_extra_inode:5128: inode 15 [ 527.541504][T14778] loop2: lost filesystem error report for type 5 error -117 [ 527.548565][T14778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.796004][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2565'. [ 527.976199][T14782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2565'. [ 528.851659][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.407744][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2569'. [ 529.961054][T14803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2569'. [ 529.993085][T14805] loop2: detected capacity change from 0 to 1024 [ 530.001837][T14805] EXT4-fs: quotafile must be on filesystem root [ 530.021771][T14805] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2568'. [ 530.792886][T14809] loop4: detected capacity change from 0 to 256 [ 531.364731][T14816] netlink: 'syz.1.2572': attribute type 1 has an invalid length. [ 531.430348][T14816] 8021q: adding VLAN 0 to HW filter on device bond15 [ 533.139103][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2578'. [ 533.665588][T14838] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2578'. [ 536.008657][T14855] hsr0: entered promiscuous mode [ 536.764435][T14859] loop3: detected capacity change from 0 to 256 [ 537.380384][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 537.380403][ T28] audit: type=1400 audit(1779062627.462:3637): avc: denied { bind } for pid=14862 comm="syz.9.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 537.586654][T14868] netlink: 'syz.9.2586': attribute type 1 has an invalid length. [ 537.657669][T14866] loop2: detected capacity change from 0 to 8192 [ 537.739314][T14868] 8021q: adding VLAN 0 to HW filter on device bond6 [ 537.944167][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2589'. [ 538.108066][T14879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2589'. [ 538.361199][T14855] loop4: detected capacity change from 0 to 2048 [ 538.982896][T14896] loop3: detected capacity change from 0 to 512 [ 539.001974][T14855] EXT4-fs: error -4 creating inode table initialization thread [ 539.005935][T14896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 539.042282][T14855] EXT4-fs (loop4): mount failed [ 539.093537][T14896] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 539.115511][T14896] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2592: corrupted in-inode xattr: e_value size too large [ 539.132820][T14896] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 539.137916][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 539.160536][ C0] EXT4-fs (loop3): initial error at time 1779062629: ext4_iget_extra_inode:5128: inode 15 [ 539.174317][ C0] EXT4-fs (loop3): last error at time 1779062629: ext4_iget_extra_inode:5128: inode 15 [ 539.193527][T14896] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2592: couldn't read orphan inode 15 (err -117) [ 539.207191][T14896] loop3: lost filesystem error report for type 5 error -117 [ 539.231442][T14896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.262575][T14855] hsr0: left promiscuous mode [ 539.435290][T14904] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2594'. [ 539.474685][T14904] loop1: detected capacity change from 0 to 164 [ 539.499082][T14904] iso9660: Bad value for 'mode' [ 539.535072][ T9811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.827095][T14917] loop4: detected capacity change from 0 to 1024 [ 539.838198][T14919] netlink: 'syz.1.2598': attribute type 1 has an invalid length. [ 539.865427][T14917] EXT4-fs: quotafile must be on filesystem root [ 539.890918][T14917] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2595'. [ 539.908742][T14919] 8021q: adding VLAN 0 to HW filter on device bond16 [ 541.581606][T14932] loop3: detected capacity change from 0 to 256 [ 542.796731][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2602'. [ 543.049860][T14938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2602'. [ 543.787739][T14940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2603'. [ 544.222198][T14953] syzkaller0: entered promiscuous mode [ 544.238191][T14953] syzkaller0: entered allmulticast mode [ 544.246665][T14946] loop3: detected capacity change from 0 to 1024 [ 544.264390][T14946] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 544.296190][T14946] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 5: comm syz.3.2605: lblock 5 mapped to illegal pblock 5 (length 1) [ 544.312364][T14946] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 544.318231][T14946] Quota error (device loop3): write_blk: dquota write failed [ 544.334990][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 544.335075][ C1] EXT4-fs (loop3): initial error at time 1779062634: ext4_map_blocks:833: inode 3: block 5 [ 544.335285][ C1] EXT4-fs (loop3): last error at time 1779062634: ext4_map_blocks:833: inode 3: block 5 [ 544.368021][T14946] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 544.399583][T14946] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 544.410490][T14957] netlink: 'syz.2.2609': attribute type 1 has an invalid length. [ 544.430229][T14946] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2605: Failed to acquire dquot type 0 [ 544.461689][T14957] 8021q: adding VLAN 0 to HW filter on device bond15 [ 544.470024][T14946] loop3: lost filesystem error report for type 5 error -117 [ 544.470850][T14946] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 5: comm syz.3.2605: lblock 5 mapped to illegal pblock 5 (length 1) [ 544.494956][T14946] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 544.495555][T14946] Quota error (device loop3): do_insert_tree: Can't read tree quota block 5 [ 544.516854][T14946] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 544.527130][T14946] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2605: Failed to acquire dquot type 0 [ 544.538861][T14946] loop3: lost filesystem error report for type 5 error -117 [ 544.539522][T14946] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.2605: Freeing blocks not in datazone - block = 0, count = 4096 [ 544.560689][T14946] loop3: lost filesystem error report for type 5 error -117 [ 544.561692][T14946] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 5: comm syz.3.2605: lblock 5 mapped to illegal pblock 5 (length 1) [ 544.583896][T14946] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 544.585454][T14946] Quota error (device loop3): do_insert_tree: Can't read tree quota block 5 [ 544.608117][T14946] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 544.622456][T14946] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2605: Failed to acquire dquot type 0 [ 544.662142][T14946] loop3: lost filesystem error report for type 5 error -117 [ 544.664240][T14946] EXT4-fs (loop3): 1 orphan inode deleted [ 544.701888][T14946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.951480][ T28] audit: type=1400 audit(1779062635.022:3638): avc: denied { write } for pid=14945 comm="syz.3.2605" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 545.768787][T14946] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 5: comm syz.3.2605: lblock 5 mapped to illegal pblock 5 (length 1) [ 545.890997][T14946] Quota error (device loop3): do_insert_tree: Can't read tree quota block 5 [ 545.900990][T14946] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 545.911621][T14946] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2605: Failed to acquire dquot type 0 [ 546.008712][ T9811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.074622][T14973] syzkaller0: entered promiscuous mode [ 546.080492][T14973] syzkaller0: entered allmulticast mode [ 546.268765][T14977] syzkaller0: entered promiscuous mode [ 546.281378][T14977] syzkaller0: entered allmulticast mode [ 546.387808][T14981] program syz.3.2617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 546.476785][T14984] netlink: 'syz.1.2616': attribute type 8 has an invalid length. [ 547.328011][T14993] loop3: detected capacity change from 0 to 512 [ 547.370182][T14993] EXT4-fs: Ignoring removed nomblk_io_submit option [ 547.497257][T14993] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 547.518696][T14993] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2619: corrupted in-inode xattr: e_value size too large [ 547.536459][T14993] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 547.537968][T14998] netlink: 'syz.1.2620': attribute type 1 has an invalid length. [ 547.547920][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 547.561715][ C0] EXT4-fs (loop3): initial error at time 1779062637: ext4_iget_extra_inode:5128: inode 15 [ 547.571709][ C0] EXT4-fs (loop3): last error at time 1779062637: ext4_iget_extra_inode:5128: inode 15 [ 547.583483][T14993] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2619: couldn't read orphan inode 15 (err -117) [ 547.597633][T14993] loop3: lost filesystem error report for type 5 error -117 [ 547.639997][T14993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.657038][T14998] 8021q: adding VLAN 0 to HW filter on device bond17 [ 547.829473][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2622'. [ 547.930511][ T9811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.957096][T15006] loop4: detected capacity change from 0 to 1024 [ 548.106299][T15006] EXT4-fs: quotafile must be on filesystem root [ 548.113625][T15006] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2621'. [ 548.432680][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2622'. [ 549.040211][T15014] tipc: Failed to remove unknown binding: 66,0,0/0:3003137169/3003137170 [ 549.825756][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2627'. [ 550.143965][T15024] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2627'. [ 550.348565][T15026] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2628'. [ 550.597207][T15031] syzkaller0: entered promiscuous mode [ 550.629173][T15031] syzkaller0: entered allmulticast mode [ 550.812522][T15038] netlink: 'syz.1.2633': attribute type 1 has an invalid length. [ 550.844502][T15038] 8021q: adding VLAN 0 to HW filter on device bond18 [ 551.026220][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 551.026239][ T28] audit: type=1400 audit(1779062641.102:3640): avc: denied { create } for pid=15042 comm="syz.1.2634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 551.102663][ T28] audit: type=1400 audit(1779062641.182:3642): avc: denied { sys_admin } for pid=15042 comm="syz.1.2634" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 551.154492][ T28] audit: type=1400 audit(1779062641.182:3641): avc: denied { sys_admin } for pid=15042 comm="syz.1.2634" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 551.189124][T15043] Failed to initialize the IGMP autojoin socket (err -2) [ 551.206125][ T28] audit: type=1400 audit(1779062641.242:3643): avc: denied { unmount } for pid=15042 comm="syz.1.2634" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 551.628593][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2635'. [ 551.896225][T15050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2635'. [ 552.469844][T15055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2638'. [ 552.559479][T15058] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2639'. [ 553.236567][T15058] __nla_validate_parse: 1 callbacks suppressed [ 553.236596][T15058] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2639'. [ 553.746200][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2642'. [ 553.776943][T15065] loop2: detected capacity change from 0 to 4096 [ 554.165169][T15070] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2642'. [ 554.693198][T15065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.718757][ T28] audit: type=1400 audit(1779062644.802:3644): avc: denied { write } for pid=15064 comm="syz.2.2641" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 554.787327][ T28] audit: type=1400 audit(1779062644.832:3645): avc: denied { map } for pid=15064 comm="syz.2.2641" path="/570/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 554.810933][ T28] audit: type=1400 audit(1779062644.832:3646): avc: denied { execute } for pid=15064 comm="syz.2.2641" path="/570/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 554.813229][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2643'. [ 554.864260][T15077] syzkaller0: entered promiscuous mode [ 554.864464][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.878771][T15077] syzkaller0: entered allmulticast mode [ 555.697591][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2643'. [ 556.165907][T15099] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2651'. [ 556.425189][T15101] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2651'. [ 557.167928][T15095] loop4: detected capacity change from 0 to 1024 [ 557.261694][T15095] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 558.216039][T15095] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 5: comm syz.4.2649: lblock 5 mapped to illegal pblock 5 (length 1) [ 558.271094][T15095] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 558.277915][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 558.293448][ C1] EXT4-fs (loop4): initial error at time 1779062648: ext4_map_blocks:833: inode 3: block 5 [ 558.303490][ C1] EXT4-fs (loop4): last error at time 1779062648: ext4_map_blocks:833: inode 3: block 5 [ 558.651212][T15095] Quota error (device loop4): write_blk: dquota write failed [ 558.677782][T15095] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 558.709427][T15095] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 558.748267][T15095] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.2649: Failed to acquire dquot type 0 [ 558.808142][T15095] loop4: lost filesystem error report for type 5 error -117 [ 558.829910][T15095] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 5: comm syz.4.2649: lblock 5 mapped to illegal pblock 5 (length 1) [ 558.881736][T15095] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 558.882282][T15095] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5 [ 558.927499][T15095] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 558.956821][T15095] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.2649: Failed to acquire dquot type 0 [ 559.021470][T15095] loop4: lost filesystem error report for type 5 error -117 [ 559.022415][T15095] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.2649: Freeing blocks not in datazone - block = 0, count = 4096 [ 559.119279][T15095] loop4: lost filesystem error report for type 5 error -117 [ 559.175758][T15095] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 5: comm syz.4.2649: lblock 5 mapped to illegal pblock 5 (length 1) [ 559.239270][T15095] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 559.271156][T15095] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5 [ 559.345238][T15095] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 559.396378][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2656'. [ 559.426768][T15095] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.2649: Failed to acquire dquot type 0 [ 559.497824][T15095] loop4: lost filesystem error report for type 5 error -117 [ 559.504387][T15095] EXT4-fs (loop4): 1 orphan inode deleted [ 559.646361][T15095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.701384][ T4240] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.761103][T15126] netlink: 'syz.9.2659': attribute type 1 has an invalid length. [ 559.789678][T15126] 8021q: adding VLAN 0 to HW filter on device bond7 [ 559.797758][T15128] syzkaller0: entered promiscuous mode [ 559.807704][T15128] syzkaller0: entered allmulticast mode [ 559.841777][T15113] loop3: detected capacity change from 0 to 2048 [ 560.175724][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'. [ 560.183458][T15113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.621845][T15145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2663'. [ 561.849675][T15113] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.332459][T15133] loop4: detected capacity change from 0 to 1024 [ 562.412303][T15155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2666'. [ 562.430763][T15133] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 562.547442][T15133] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 5: comm syz.4.2661: lblock 5 mapped to illegal pblock 5 (length 1) [ 562.618522][T15133] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 562.627929][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 562.643507][ C0] EXT4-fs (loop4): initial error at time 1779062652: ext4_map_blocks:833: inode 3: block 5 [ 562.653660][ C0] EXT4-fs (loop4): last error at time 1779062652: ext4_map_blocks:833: inode 3: block 5 [ 562.663907][T15133] Quota error (device loop4): write_blk: dquota write failed [ 562.673297][T15133] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 562.691334][T15133] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 562.710242][T15133] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.2661: Failed to acquire dquot type 0 [ 562.757632][T15133] loop4: lost filesystem error report for type 5 error -117 [ 562.762460][T15133] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 5: comm syz.4.2661: lblock 5 mapped to illegal pblock 5 (length 1) [ 562.785559][T15133] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 562.786230][T15133] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.2661: Failed to acquire dquot type 0 [ 562.807699][T15133] loop4: lost filesystem error report for type 5 error -117 [ 562.809427][T15133] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.2661: Freeing blocks not in datazone - block = 0, count = 4096 [ 562.833281][T15133] loop4: lost filesystem error report for type 5 error -117 [ 562.835795][T15133] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 5: comm syz.4.2661: lblock 5 mapped to illegal pblock 5 (length 1) [ 562.860001][T15133] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 562.860688][T15133] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.2661: Failed to acquire dquot type 0 [ 562.883878][T15133] loop4: lost filesystem error report for type 5 error -117 [ 562.884682][T15133] EXT4-fs (loop4): 1 orphan inode deleted [ 562.901603][T15133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.910021][T15161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2666'. [ 562.943726][ T4240] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.222220][T15160] loop2: detected capacity change from 0 to 1024 [ 563.247825][T15160] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 563.278486][T15160] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #3: block 5: comm syz.2.2667: lblock 5 mapped to illegal pblock 5 (length 1) [ 563.293230][T15160] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 563.294290][T15160] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2667: Failed to acquire dquot type 0 [ 563.303530][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 563.303580][ C0] EXT4-fs (loop2): initial error at time 1779062653: ext4_map_blocks:833: inode 3: block 5 [ 563.303762][ C0] EXT4-fs (loop2): last error at time 1779062653: ext4_map_blocks:833: inode 3: block 5 [ 563.342304][T15160] loop2: lost filesystem error report for type 5 error -117 [ 563.343517][T15160] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 5: comm syz.2.2667: lblock 5 mapped to illegal pblock 5 (length 1) [ 563.366909][T15160] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 563.367494][T15160] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2667: Failed to acquire dquot type 0 [ 563.388722][T15160] loop2: lost filesystem error report for type 5 error -117 [ 563.389897][T15160] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.2667: Freeing blocks not in datazone - block = 0, count = 4096 [ 563.431305][T15160] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 5: comm syz.2.2667: lblock 5 mapped to illegal pblock 5 (length 1) [ 563.445768][T15160] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 563.446171][T15160] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2667: Failed to acquire dquot type 0 [ 563.468341][T15160] EXT4-fs (loop2): 1 orphan inode deleted [ 563.476901][T15160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.498807][T15160] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 5: comm syz.2.2667: lblock 5 mapped to illegal pblock 5 (length 1) [ 563.514290][T15160] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2667: Failed to acquire dquot type 0 [ 563.560864][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.761237][T15169] loop4: detected capacity change from 0 to 128 [ 563.795681][T15169] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 564.473707][T15171] loop2: detected capacity change from 0 to 256 [ 564.513841][T15169] ext4 filesystem being mounted at /495/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.831486][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 564.831505][ T28] audit: type=1400 audit(1779062654.912:3648): avc: denied { write } for pid=15168 comm="syz.4.2670" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 564.869200][T15175] netlink: 'syz.3.2671': attribute type 1 has an invalid length. [ 564.898949][T15169] EXT4-fs warning (device loop4): __ext4_ioctl:1558: Setting inode version is not supported with metadata_csum enabled. [ 564.912407][ T28] audit: type=1400 audit(1779062654.982:3649): avc: denied { ioctl } for pid=15168 comm="syz.4.2670" path="/495/file0/file1" dev="loop4" ino=12 ioctlcmd=0x6604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 564.973330][T15175] 8021q: adding VLAN 0 to HW filter on device bond11 [ 564.988640][T15169] netlink: 'syz.4.2670': attribute type 13 has an invalid length. [ 565.007480][ T28] audit: type=1400 audit(1779062655.072:3650): avc: denied { write } for pid=15168 comm="syz.4.2670" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 565.031092][T15169] netlink: 'syz.4.2670': attribute type 17 has an invalid length. [ 565.102500][ T28] audit: type=1400 audit(1779062655.072:3651): avc: denied { mounton } for pid=15168 comm="syz.4.2670" path="/495/file0/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 565.219850][T15169] bridge0: port 3(gretap0) entered blocking state [ 565.226396][T15169] bridge0: port 3(gretap0) entered forwarding state [ 565.262283][T15169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.283988][T15169] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.312920][T15169] wireguard: wg0: Could not create IPv4 socket [ 565.328029][T15169] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 565.359876][ T4869] syz1: Port: 1 Link ACTIVE [ 565.387662][ T4240] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 565.464380][T15184] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2683'. [ 565.813196][T15193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2675'. [ 566.769941][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2675'. [ 566.930922][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2677'. [ 567.179674][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2677'. [ 568.558808][T15210] loop4: detected capacity change from 0 to 256 [ 569.850648][T15220] hsr0: entered promiscuous mode [ 570.081382][T15206] loop2: detected capacity change from 0 to 1024 [ 570.186906][T15206] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 570.230606][T15206] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #3: block 5: comm syz.2.2678: lblock 5 mapped to illegal pblock 5 (length 1) [ 570.310388][T15227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2684'. [ 570.439678][T15206] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 570.441542][T15206] Quota error (device loop2): write_blk: dquota write failed [ 570.450898][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 570.450932][ C1] EXT4-fs (loop2): initial error at time 1779062660: ext4_map_blocks:833: inode 3: block 5 [ 570.451060][ C1] EXT4-fs (loop2): last error at time 1779062660: ext4_map_blocks:833: inode 3: block 5 [ 570.686298][T15206] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 570.696224][T15206] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 570.706906][T15206] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2678: Failed to acquire dquot type 0 [ 570.718541][T15206] fserror_report: 2 callbacks suppressed [ 570.718602][T15206] loop2: lost filesystem error report for type 5 error -117 [ 570.749134][T15206] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 5: comm syz.2.2678: lblock 5 mapped to illegal pblock 5 (length 1) [ 570.776853][T15206] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 570.778364][T15206] Quota error (device loop2): do_insert_tree: Can't read tree quota block 5 [ 570.804659][T15206] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 570.816698][T15206] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2678: Failed to acquire dquot type 0 [ 570.821990][T15220] loop4: detected capacity change from 0 to 2048 [ 570.829927][T15206] loop2: lost filesystem error report for type 5 error -117 [ 570.837315][T15206] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.2678: Freeing blocks not in datazone - block = 0, count = 4096 [ 570.897582][T15206] loop2: lost filesystem error report for type 5 error -117 [ 570.899602][T15206] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 5: comm syz.2.2678: lblock 5 mapped to illegal pblock 5 (length 1) [ 570.912695][T15231] Failed to initialize the IGMP autojoin socket (err -2) [ 570.930372][T15206] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 570.931288][T15206] Quota error (device loop2): do_insert_tree: Can't read tree quota block 5 [ 570.960731][T15206] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 570.973020][T15206] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2678: Failed to acquire dquot type 0 [ 570.997185][T15220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.998459][T15206] loop2: lost filesystem error report for type 5 error -117 [ 571.064970][T15206] EXT4-fs (loop2): 1 orphan inode deleted [ 571.068758][T15220] hsr0: left promiscuous mode [ 571.078729][T15206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.110202][T15220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.112802][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.166355][T15239] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2688'. [ 571.180083][T15241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2689'. [ 571.212758][T15239] loop2: detected capacity change from 0 to 164 [ 571.252555][T15239] iso9660: Bad value for 'mode' [ 571.454792][T15248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2689'. [ 571.555401][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2691'. [ 571.956158][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2692'. [ 572.076313][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2692'. [ 572.175719][T15254] netlink: 'syz.9.2693': attribute type 1 has an invalid length. [ 572.333015][T15254] 8021q: adding VLAN 0 to HW filter on device bond8 [ 573.989791][T15274] loop2: detected capacity change from 0 to 256 [ 574.570546][T15283] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2701'. [ 578.086205][T15310] loop2: detected capacity change from 0 to 512 [ 578.096921][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2706'. [ 578.123594][T15310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 578.263224][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2706'. [ 578.297025][T15310] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 578.310317][T15310] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2705: corrupted in-inode xattr: e_value size too large [ 578.327924][T15310] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 578.334819][T15310] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2705: couldn't read orphan inode 15 (err -117) [ 578.347097][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 578.347163][ C1] EXT4-fs (loop2): initial error at time 1779062668: ext4_iget_extra_inode:5128: inode 15 [ 578.347729][ C1] EXT4-fs (loop2): last error at time 1779062668: ext4_iget_extra_inode:5128: inode 15 [ 578.406360][T15318] netlink: 'syz.1.2707': attribute type 1 has an invalid length. [ 578.409363][T15310] loop2: lost filesystem error report for type 5 error -117 [ 578.452954][T15310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.540424][T15318] 8021q: adding VLAN 0 to HW filter on device bond19 [ 579.071081][T15327] loop3: detected capacity change from 0 to 512 [ 579.078080][T15327] EXT4-fs: Ignoring removed nomblk_io_submit option [ 579.125645][T15327] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 579.134442][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.144816][T15327] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2708: corrupted in-inode xattr: e_value size too large [ 579.158920][T15327] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 579.159203][T15327] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2708: couldn't read orphan inode 15 (err -117) [ 579.168396][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 579.168415][ C0] EXT4-fs (loop3): initial error at time 1779062669: ext4_iget_extra_inode:5128: inode 15 [ 579.168446][ C0] EXT4-fs (loop3): last error at time 1779062669: ext4_iget_extra_inode:5128: inode 15 [ 579.206901][T15327] loop3: lost filesystem error report for type 5 error -117 [ 579.212488][T15327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.866798][T15334] loop2: detected capacity change from 0 to 512 [ 580.873436][T15334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 580.900353][T15334] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 580.908764][T15334] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2709: corrupted in-inode xattr: e_value size too large [ 580.922950][T15334] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 580.925561][T15334] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2709: couldn't read orphan inode 15 (err -117) [ 580.934771][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 580.934799][ C0] EXT4-fs (loop2): initial error at time 1779062671: ext4_iget_extra_inode:5128: inode 15 [ 580.934829][ C0] EXT4-fs (loop2): last error at time 1779062671: ext4_iget_extra_inode:5128: inode 15 [ 580.972751][T15334] loop2: lost filesystem error report for type 5 error -117 [ 580.976782][T15334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.040448][ T9811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.461021][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.621874][T15349] loop3: detected capacity change from 0 to 256 [ 583.265440][T15358] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2716'. [ 584.233751][T15365] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2716'. [ 584.296825][T15361] syzkaller0: entered promiscuous mode [ 584.398004][T15361] syzkaller0: entered allmulticast mode [ 584.603197][T15372] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2719'. [ 584.613378][T15370] syzkaller0: entered promiscuous mode [ 584.620598][T15370] syzkaller0: entered allmulticast mode [ 584.785699][T15376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2720'. [ 584.879163][T15379] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2719'. [ 584.947200][T15378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2721'. [ 585.378771][T15382] netlink: 'syz.3.2722': attribute type 1 has an invalid length. [ 585.505453][T15382] 8021q: adding VLAN 0 to HW filter on device bond12 [ 586.509900][T15401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2721'. [ 587.659097][T15406] loop4: detected capacity change from 0 to 512 [ 587.704566][T15406] EXT4-fs: Ignoring removed nomblk_io_submit option [ 587.804579][T15406] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 587.816836][T15406] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2726: corrupted in-inode xattr: e_value size too large [ 587.833357][T15406] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 587.838505][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 587.857495][ C0] EXT4-fs (loop4): initial error at time 1779062677: ext4_iget_extra_inode:5128: inode 15 [ 587.869247][ C0] EXT4-fs (loop4): last error at time 1779062677: ext4_iget_extra_inode:5128: inode 15 [ 587.882461][T15406] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2726: couldn't read orphan inode 15 (err -117) [ 587.898936][T15406] loop4: lost filesystem error report for type 5 error -117 [ 587.941993][T15406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.167257][ T4240] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.229040][T15414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2730'. [ 589.517139][T15419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2730'. [ 589.596679][T15418] loop4: detected capacity change from 0 to 512 [ 589.603465][T15418] EXT4-fs: Ignoring removed nomblk_io_submit option [ 589.665043][T15418] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 589.737288][T15418] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2728: corrupted in-inode xattr: e_value size too large [ 589.751630][T15418] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 589.753146][T15418] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2728: couldn't read orphan inode 15 (err -117) [ 589.762452][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 589.762480][ C0] EXT4-fs (loop4): initial error at time 1779062679: ext4_iget_extra_inode:5128: inode 15 [ 589.762510][ C0] EXT4-fs (loop4): last error at time 1779062679: ext4_iget_extra_inode:5128: inode 15 [ 589.800704][T15418] loop4: lost filesystem error report for type 5 error -117 [ 589.858627][T15428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2731'. [ 590.055780][T15418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.357160][T15432] syzkaller0: entered promiscuous mode [ 590.363108][T15432] syzkaller0: entered allmulticast mode [ 590.375874][ T4240] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.378205][T15435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2734'. [ 590.409369][T15437] netlink: 'syz.4.2735': attribute type 1 has an invalid length. [ 590.425547][T15437] 8021q: adding VLAN 0 to HW filter on device bond13 [ 590.687921][T15444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2734'. [ 591.962317][T15464] loop2: detected capacity change from 0 to 512 [ 591.969461][T15464] EXT4-fs: Ignoring removed nomblk_io_submit option [ 592.228434][T15464] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 592.240355][T15464] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2740: corrupted in-inode xattr: e_value size too large [ 592.254587][T15464] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 592.257241][T15464] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2740: couldn't read orphan inode 15 (err -117) [ 592.266529][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 592.266548][ C1] EXT4-fs (loop2): initial error at time 1779062682: ext4_iget_extra_inode:5128: inode 15 [ 592.266591][ C1] EXT4-fs (loop2): last error at time 1779062682: ext4_iget_extra_inode:5128: inode 15 [ 592.304541][T15464] loop2: lost filesystem error report for type 5 error -117 [ 592.313005][T15464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.367236][T15468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2742'. [ 592.652224][T15471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2742'. [ 593.740999][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.776071][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2744'. [ 594.762274][T15479] loop2: detected capacity change from 0 to 256 [ 595.165262][T15480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2744'. [ 595.711678][T15488] syzkaller0: entered promiscuous mode [ 595.731468][T15488] syzkaller0: entered allmulticast mode [ 595.873362][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2748'. [ 596.302259][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2748'. [ 596.819899][T15495] netlink: 'syz.2.2749': attribute type 1 has an invalid length. [ 596.872934][T15495] 8021q: adding VLAN 0 to HW filter on device bond16 [ 598.410035][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2756'. [ 598.717456][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2756'. [ 599.525527][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2758'. [ 599.803406][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2760'. [ 599.825272][T15533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2758'. [ 600.345912][T15537] loop2: detected capacity change from 0 to 512 [ 600.366314][T15537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 601.100151][T15541] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2760'. [ 601.447761][T15537] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 601.485168][T15537] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2759: corrupted in-inode xattr: e_value size too large [ 601.514049][T15537] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 601.517889][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 601.533577][ C1] EXT4-fs (loop2): initial error at time 1779062691: ext4_iget_extra_inode:5128: inode 15 [ 601.543529][ C1] EXT4-fs (loop2): last error at time 1779062691: ext4_iget_extra_inode:5128: inode 15 [ 601.561858][T15537] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2759: couldn't read orphan inode 15 (err -117) [ 601.577881][T15537] loop2: lost filesystem error report for type 5 error -117 [ 601.616415][T15537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.848425][T15547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2762'. [ 602.986019][T15555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2762'. [ 603.137643][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.252442][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2767'. [ 604.147844][T15577] netlink: 'syz.3.2768': attribute type 1 has an invalid length. [ 604.165186][T15577] 8021q: adding VLAN 0 to HW filter on device bond13 [ 605.001570][T15589] netlink: 'syz.4.2772': attribute type 1 has an invalid length. [ 605.035419][T15589] 8021q: adding VLAN 0 to HW filter on device bond14 [ 605.198757][T15580] loop3: detected capacity change from 0 to 1024 [ 605.284880][T15580] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 605.354234][T15580] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 5: comm syz.3.2769: lblock 5 mapped to illegal pblock 5 (length 1) [ 605.379428][T15580] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 605.381405][T15580] Quota error (device loop3): write_blk: dquota write failed [ 605.390663][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 605.390712][ C1] EXT4-fs (loop3): initial error at time 1779062695: ext4_map_blocks:833: inode 3: block 5 [ 605.390858][ C1] EXT4-fs (loop3): last error at time 1779062695: ext4_map_blocks:833: inode 3: block 5 [ 605.731519][T15580] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 605.837863][T15580] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 605.957469][T15580] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2769: Failed to acquire dquot type 0 [ 606.107765][ T28] audit: type=1400 audit(1779062696.132:3652): avc: denied { mounton } for pid=15602 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 606.136965][T15580] loop3: lost filesystem error report for type 5 error -117 [ 606.141097][T15580] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 5: comm syz.3.2769: lblock 5 mapped to illegal pblock 5 (length 1) [ 606.256198][T15580] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 606.256766][T15580] Quota error (device loop3): do_insert_tree: Can't read tree quota block 5 [ 606.358641][T15580] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 606.407530][T15580] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2769: Failed to acquire dquot type 0 [ 606.431608][T15602] Failed to initialize the IGMP autojoin socket (err -2) [ 606.469632][T15580] loop3: lost filesystem error report for type 5 error -117 [ 606.471813][T15580] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.2769: Freeing blocks not in datazone - block = 0, count = 4096 [ 606.560228][T15580] loop3: lost filesystem error report for type 5 error -117 [ 606.562616][T15580] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 5: comm syz.3.2769: lblock 5 mapped to illegal pblock 5 (length 1) [ 606.650243][T15580] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 606.693641][ T28] audit: type=1400 audit(1779062696.772:3653): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 606.727660][T15580] Quota error (device loop3): do_insert_tree: Can't read tree quota block 5 [ 606.789186][T15580] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 606.855666][T15580] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2769: Failed to acquire dquot type 0 [ 606.924923][ T28] audit: type=1400 audit(1779062696.992:3654): avc: denied { search } for pid=3019 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.961166][T15580] loop3: lost filesystem error report for type 5 error -117 [ 606.964851][T15580] EXT4-fs (loop3): 1 orphan inode deleted [ 607.074771][T15580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.108042][ T5942] team0: Port device netdevsim2 removed [ 607.290475][ T9811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.380784][T15602] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.400338][T15634] netlink: 'syz.1.2779': attribute type 1 has an invalid length. [ 607.440406][T15602] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.481544][T15602] bridge_slave_0: entered allmulticast mode [ 607.518826][T15602] bridge_slave_0: entered promiscuous mode [ 607.571037][T15634] 8021q: adding VLAN 0 to HW filter on device bond20 [ 607.634376][T15602] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.701719][T15602] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.709257][T15602] bridge_slave_1: entered allmulticast mode [ 607.719300][T15602] bridge_slave_1: entered promiscuous mode [ 607.774026][T15653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2782'. [ 607.808638][T15602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.832315][T15602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.997292][T15602] smc: adding net device veth1_to_team with user defined pnetid S [ 608.029593][ T5942] batadv0: left allmulticast mode [ 608.035677][ T5942] batadv0: left promiscuous mode [ 608.041995][ T5942] bridge0: port 3(batadv0) entered disabled state [ 608.095948][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2782'. [ 608.179708][ T5942] bridge_slave_1: left allmulticast mode [ 608.201976][ T5942] bridge_slave_1: left promiscuous mode [ 608.229806][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.273260][ T5942] bridge_slave_0: left allmulticast mode [ 608.302413][ T5942] bridge_slave_0: left promiscuous mode [ 608.335216][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.585252][ T5942] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 608.635393][ T5942] gretap0 (unregistering): left promiscuous mode [ 608.806890][T15655] syz.1.2783 (15655) used greatest stack depth: 7032 bytes left [ 608.828677][T15679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2785'. [ 609.130663][T15682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2785'. [ 609.513376][T10032] SELinux: failure in sel_netif_sid_slow(), invalid network interface (91) [ 610.091742][ T5942] bond1 (unregistering): (slave bridge20): Releasing active interface [ 610.105696][ T5942] bridge20 (unregistering): left promiscuous mode [ 610.113213][ T5942] bridge20 (unregistering): left allmulticast mode [ 611.619489][ T5942] bond0 (unregistering): Released all slaves [ 611.629971][ T5942] bond1 (unregistering): Released all slaves [ 611.639217][ T5942] bond2 (unregistering): Released all slaves [ 611.648390][ T5942] bond3 (unregistering): Released all slaves [ 611.656713][ T5942] bond4 (unregistering): Released all slaves [ 611.664911][ T5942] bond5 (unregistering): Released all slaves [ 611.673753][ T5942] bond6 (unregistering): Released all slaves [ 611.682575][ T5942] bond7 (unregistering): Released all slaves [ 611.690893][ T5942] bond8 (unregistering): Released all slaves [ 611.701416][ T5942] bond9 (unregistering): Released all slaves [ 611.710419][ T5942] bond10 (unregistering): Released all slaves [ 611.718805][ T5942] bond11 (unregistering): Released all slaves [ 611.726816][ T5942] bond12 (unregistering): Released all slaves [ 611.735692][ T5942] bond13 (unregistering): Released all slaves [ 611.744365][ T5942] bond14 (unregistering): Released all slaves [ 611.753026][ T5942] bond15 (unregistering): Released all slaves [ 611.761358][ T5942] bond16 (unregistering): Released all slaves [ 611.774452][T15602] team0: Port device team_slave_0 added [ 611.845551][T15602] team0: Port device team_slave_1 added [ 611.862335][T15602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.869816][T15602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.899456][T15602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.911803][T15602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.925862][T15602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.953097][T15602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.981753][T15697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2790'. [ 612.008511][T15702] netlink: 'syz.1.2792': attribute type 1 has an invalid length. [ 612.165004][T15702] 8021q: adding VLAN 0 to HW filter on device bond21 [ 612.183401][T15602] hsr_slave_0: entered promiscuous mode [ 612.196386][T15602] hsr_slave_1: entered promiscuous mode [ 612.232808][T15602] debugfs: 'hsr0' already exists in 'hsr' [ 612.238679][T15602] Cannot create hsr debugfs directory [ 612.253105][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2794'. [ 612.263671][T15715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2790'. [ 613.264514][ T5942] veth1_to_team: left promiscuous mode [ 613.452622][ T5942] hsr_slave_0: left promiscuous mode [ 613.461833][ T5942] hsr_slave_1: left promiscuous mode [ 613.474016][ T5942] pim6reg (unregistering): left allmulticast mode [ 613.670268][T15722] loop4: detected capacity change from 0 to 512 [ 613.707829][T15722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 614.556817][T15722] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 615.081725][T15722] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2795: corrupted in-inode xattr: e_value size too large [ 615.099568][T15722] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 615.105768][T15722] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2795: couldn't read orphan inode 15 (err -117) [ 615.108296][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 615.108696][ C1] EXT4-fs (loop4): initial error at time 1779062705: ext4_iget_extra_inode:5128: inode 15 [ 615.109475][ C1] EXT4-fs (loop4): last error at time 1779062705: ext4_iget_extra_inode:5128: inode 15 [ 615.171045][T15722] loop4: lost filesystem error report for type 5 error -117 [ 615.203240][T15722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.228792][ T5942] team0 (unregistering): Port device team_slave_1 removed [ 615.269330][ T49] smc: removing ib device lyz2 [ 615.437830][T15735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2797'. [ 615.507845][ T4240] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.637535][T15743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2799'. [ 615.684919][T15735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2797'. [ 615.810692][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2799'. [ 615.943512][T15746] syzkaller0: entered promiscuous mode [ 615.949238][T15746] syzkaller0: entered allmulticast mode [ 615.972304][ T5942] IPVS: stop unused estimator thread 0... [ 615.998050][T15748] hsr0: entered promiscuous mode [ 616.004515][T15748] hsr0: left promiscuous mode [ 616.040385][T15752] loop3: detected capacity change from 0 to 256 [ 616.072352][T15752] FAT-fs (loop3): Directory bread(block 64) failed [ 616.097109][T15752] FAT-fs (loop3): Directory bread(block 65) failed [ 616.108543][T15752] FAT-fs (loop3): Directory bread(block 66) failed [ 616.118023][T15752] FAT-fs (loop3): Directory bread(block 67) failed [ 616.136408][T15752] FAT-fs (loop3): Directory bread(block 68) failed [ 616.145569][T15602] netdevsim netdevsim2 netdevsim0: renamed from eth5 [ 616.155389][T15752] FAT-fs (loop3): Directory bread(block 69) failed [ 616.164487][T15602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 616.171660][T15752] FAT-fs (loop3): Directory bread(block 70) failed [ 616.172735][T15602] netdevsim netdevsim2 netdevsim1: renamed from eth6 [ 616.185344][T15752] FAT-fs (loop3): Directory bread(block 71) failed [ 616.193540][T15752] FAT-fs (loop3): Directory bread(block 72) failed [ 616.200242][T15752] FAT-fs (loop3): Directory bread(block 73) failed [ 616.202281][T15602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.214940][T15602] netdevsim netdevsim2 netdevsim2: renamed from eth7 [ 616.224447][T15602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 616.232313][T15602] netdevsim netdevsim2 netdevsim3: renamed from eth8 [ 616.253587][T15602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 616.361091][T15769] netlink: 'syz.1.2806': attribute type 1 has an invalid length. [ 616.404994][T15769] 8021q: adding VLAN 0 to HW filter on device bond22 [ 616.416000][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2807'. [ 616.901500][T15775] loop4: detected capacity change from 0 to 512 [ 616.944652][T15775] EXT4-fs: Ignoring removed nomblk_io_submit option [ 617.735678][T15775] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 617.838928][T15775] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2805: corrupted in-inode xattr: e_value size too large [ 617.855155][T15775] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 617.858015][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 617.877406][ C1] EXT4-fs (loop4): initial error at time 1779062707: ext4_iget_extra_inode:5128: inode 15 [ 617.889934][ C1] EXT4-fs (loop4): last error at time 1779062707: ext4_iget_extra_inode:5128: inode 15 [ 618.065669][T15778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2807'. [ 618.084281][T15775] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2805: couldn't read orphan inode 15 (err -117) [ 618.099491][T15775] loop4: lost filesystem error report for type 5 error -117 [ 618.122322][T15775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.298535][T15602] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.380295][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.387463][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.405618][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.412800][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.471275][ T4240] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.541262][T15791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2811'. [ 618.710873][T15791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2811'. [ 618.899442][T15602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.091947][T15822] netlink: 'syz.1.2817': attribute type 1 has an invalid length. [ 619.144037][T15822] 8021q: adding VLAN 0 to HW filter on device bond23 [ 619.256280][T15602] veth0_vlan: entered promiscuous mode [ 619.283017][T15602] veth1_vlan: entered promiscuous mode [ 619.314632][T15602] veth0_macvtap: entered promiscuous mode [ 619.355747][T15602] veth1_macvtap: entered promiscuous mode [ 619.435630][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 619.435653][ T28] audit: type=1400 audit(1779062709.512:3673): avc: denied { write } for pid=15829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.514664][T15847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2821'. [ 619.526129][T15602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.542989][T15602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.554434][T15602] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 619.591168][ T28] audit: type=1400 audit(1779062709.662:3674): avc: denied { write } for pid=15848 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.572183][T15602] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 620.600091][T15602] wireguard: wg0: Could not create IPv4 socket [ 620.607475][T15602] wireguard: wg1: Could not create IPv4 socket [ 620.692968][T15854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2821'. [ 620.745544][T15602] wireguard: wg2: Could not create IPv4 socket [ 620.781622][ T28] audit: type=1400 audit(1779062710.862:3675): avc: denied { mounton } for pid=15602 comm="syz-executor" path="/root/syzkaller.5hZHFY/syz-tmp" dev="sda1" ino=2068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 620.812419][ T28] audit: type=1400 audit(1779062710.862:3676): avc: denied { mount } for pid=15602 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 620.849751][ T28] audit: type=1400 audit(1779062710.882:3677): avc: denied { mounton } for pid=15602 comm="syz-executor" path="/root/syzkaller.5hZHFY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 620.922791][ T28] audit: type=1400 audit(1779062710.882:3678): avc: denied { mounton } for pid=15602 comm="syz-executor" path="/root/syzkaller.5hZHFY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=44120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 621.020857][ T28] audit: type=1400 audit(1779062710.922:3679): avc: denied { mounton } for pid=15602 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 621.099464][ T28] audit: type=1400 audit(1779062710.922:3680): avc: denied { mount } for pid=15602 comm="syz-executor" name="/" dev="gadgetfs" ino=3681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 621.156456][ T28] audit: type=1400 audit(1779062711.142:3681): avc: denied { write } for pid=15856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.165535][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2826'. [ 621.345397][T15880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2826'. [ 621.360059][ T28] audit: type=1400 audit(1779062711.212:3682): avc: denied { write } for pid=15878 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.173194][T15919] loop3: detected capacity change from 0 to 2048 [ 622.210319][T15919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.487742][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2831'. [ 622.513922][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2832'. [ 622.661475][ T9811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.806751][T15962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2832'. [ 623.671524][T15963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2831'. [ 623.953841][T15968] loop3: detected capacity change from 0 to 256 [ 624.538313][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 624.538330][ T28] audit: type=1400 audit(1779062714.622:3692): avc: denied { write } for pid=15972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.381233][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2840'. [ 625.535265][ T28] audit: type=1400 audit(1779062715.612:3693): avc: denied { write } for pid=15999 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.578882][T15996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2840'. [ 625.650192][ T28] audit: type=1400 audit(1779062715.722:3694): avc: denied { connect } for pid=16006 comm="syz.1.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 625.715960][T16016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2844'. [ 625.789411][T16019] netlink: 'syz.3.2846': attribute type 1 has an invalid length. [ 625.820528][T16019] 8021q: adding VLAN 0 to HW filter on device bond14 [ 626.016207][T16031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2844'. [ 626.450433][T16036] netlink: 'syz.2.2849': attribute type 1 has an invalid length. [ 626.475453][T16038] loop3: detected capacity change from 0 to 256 [ 626.495232][ T28] audit: type=1400 audit(1779062716.572:3695): avc: denied { write } for pid=16010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.568863][ T28] audit: type=1400 audit(1779062716.622:3696): avc: denied { write } for pid=16042 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.575236][T16038] FAT-fs (loop3): Directory bread(block 64) failed [ 626.611032][T16038] FAT-fs (loop3): Directory bread(block 65) failed [ 627.063106][T16038] FAT-fs (loop3): Directory bread(block 66) failed [ 627.070063][T16038] FAT-fs (loop3): Directory bread(block 67) failed [ 627.076689][T16038] FAT-fs (loop3): Directory bread(block 68) failed [ 627.201729][T16038] FAT-fs (loop3): Directory bread(block 69) failed [ 627.208593][T16038] FAT-fs (loop3): Directory bread(block 70) failed [ 627.215236][T16038] FAT-fs (loop3): Directory bread(block 71) failed [ 627.222092][T16038] FAT-fs (loop3): Directory bread(block 72) failed [ 627.223879][T16046] loop4: detected capacity change from 0 to 512 [ 627.228991][T16038] FAT-fs (loop3): Directory bread(block 73) failed [ 627.264679][T16046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 627.321190][T16046] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 627.335260][T16046] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2848: corrupted in-inode xattr: e_value size too large [ 627.350883][T16046] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 627.357873][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 627.376942][ C0] EXT4-fs (loop4): initial error at time 1779062717: ext4_iget_extra_inode:5128: inode 15 [ 627.389862][ C0] EXT4-fs (loop4): last error at time 1779062717: ext4_iget_extra_inode:5128: inode 15 [ 627.402252][T16046] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2848: couldn't read orphan inode 15 (err -117) [ 627.416683][T16046] loop4: lost filesystem error report for type 5 error -117 [ 627.445175][T16046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.696548][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2854'. [ 628.970514][T16077] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2854'. [ 629.747995][ T4240] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.784788][ T28] audit: type=1400 audit(1779062719.862:3697): avc: denied { write } for pid=16048 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.833670][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2856'. [ 629.989963][ T28] audit: type=1400 audit(1779062720.072:3698): avc: denied { write } for pid=16089 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.140096][T16087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2856'. [ 630.247374][T16074] loop3: detected capacity change from 0 to 1024 [ 630.976218][T16074] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 631.332156][T16074] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 5: comm syz.3.2853: lblock 5 mapped to illegal pblock 5 (length 1) [ 631.348942][T16074] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 631.352219][T16074] Quota error (device loop3): write_blk: dquota write failed [ 631.361489][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 631.361524][ C0] EXT4-fs (loop3): initial error at time 1779062721: ext4_map_blocks:833: inode 3: block 5 [ 631.361672][ C0] EXT4-fs (loop3): last error at time 1779062721: ext4_map_blocks:833: inode 3: block 5 [ 631.415420][T16109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2860'. [ 631.418687][T16074] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 631.436458][T16074] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 631.450939][T16074] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2853: Failed to acquire dquot type 0 [ 631.462912][T16074] loop3: lost filesystem error report for type 5 error -117 [ 631.463535][T16074] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 5: comm syz.3.2853: lblock 5 mapped to illegal pblock 5 (length 1) [ 631.489951][T16074] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 631.490399][T16074] Quota error (device loop3): do_insert_tree: Can't read tree quota block 5 [ 631.513578][T16115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2861'. [ 631.562451][T16074] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 631.575556][T16074] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2853: Failed to acquire dquot type 0 [ 631.587306][T16074] loop3: lost filesystem error report for type 5 error -117 [ 631.588479][T16074] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.2853: Freeing blocks not in datazone - block = 0, count = 4096 [ 632.486030][T16074] loop3: lost filesystem error report for type 5 error -117 [ 632.492088][T16074] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 5: comm syz.3.2853: lblock 5 mapped to illegal pblock 5 (length 1) [ 632.524759][ T28] audit: type=1400 audit(1779062722.602:3699): avc: denied { write } for pid=16098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 632.712140][T16074] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 632.723777][T16074] Quota error (device loop3): do_insert_tree: Can't read tree quota block 5 [ 633.357987][T16119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2861'. [ 633.556830][T16074] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 633.756951][T16074] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2853: Failed to acquire dquot type 0 [ 633.783483][T16074] loop3: lost filesystem error report for type 5 error -117 [ 633.784113][T16074] EXT4-fs (loop3): 1 orphan inode deleted [ 633.806673][T16123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2860'. [ 633.819661][T16074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.937444][T16129] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2864'. [ 634.101641][ T9811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.345512][T16138] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2864'. [ 634.916006][T16144] loop3: detected capacity change from 0 to 256 [ 635.179940][T16144] FAT-fs (loop3): Directory bread(block 64) failed [ 635.208521][T16144] FAT-fs (loop3): Directory bread(block 65) failed [ 635.252124][T16144] FAT-fs (loop3): Directory bread(block 66) failed [ 635.410514][T16144] FAT-fs (loop3): Directory bread(block 67) failed [ 635.966716][T16144] FAT-fs (loop3): Directory bread(block 68) failed [ 635.976069][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 635.976085][ T28] audit: type=1400 audit(1779062726.062:3701): avc: denied { write } for pid=16134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.010562][T16144] FAT-fs (loop3): Directory bread(block 69) failed [ 636.038803][T16144] FAT-fs (loop3): Directory bread(block 70) failed [ 636.070726][T16144] FAT-fs (loop3): Directory bread(block 71) failed [ 636.077350][T16144] FAT-fs (loop3): Directory bread(block 72) failed [ 636.083996][T16144] FAT-fs (loop3): Directory bread(block 73) failed [ 636.145589][ T28] audit: type=1400 audit(1779062726.222:3702): avc: denied { write } for pid=16167 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.068752][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2872'. [ 637.510948][T16184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2872'. [ 638.557521][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2876'. [ 640.140386][ T28] audit: type=1400 audit(1779062730.222:3703): avc: denied { write } for pid=16176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.400727][ T28] audit: type=1400 audit(1779062731.412:3704): avc: denied { write } for pid=16224 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.664254][T16223] loop2: detected capacity change from 0 to 512 [ 641.695973][T16223] EXT4-fs: Ignoring removed nomblk_io_submit option [ 641.896384][T16223] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 641.919270][T16223] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2877: corrupted in-inode xattr: e_value size too large [ 641.922593][T16234] loop4: detected capacity change from 0 to 256 [ 641.936727][T16223] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 641.947878][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 641.963582][ C1] EXT4-fs (loop2): initial error at time 1779062732: ext4_iget_extra_inode:5128: inode 15 [ 641.973661][ C1] EXT4-fs (loop2): last error at time 1779062732: ext4_iget_extra_inode:5128: inode 15 [ 641.986666][T16223] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2877: couldn't read orphan inode 15 (err -117) [ 642.003162][T16223] loop2: lost filesystem error report for type 5 error -117 [ 642.039129][T16234] FAT-fs (loop4): Directory bread(block 64) failed [ 642.099425][T16234] FAT-fs (loop4): Directory bread(block 65) failed [ 642.103269][T16223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.117646][T16234] FAT-fs (loop4): Directory bread(block 66) failed [ 642.199625][T16234] FAT-fs (loop4): Directory bread(block 67) failed [ 642.206423][T16234] FAT-fs (loop4): Directory bread(block 68) failed [ 642.215337][T16234] FAT-fs (loop4): Directory bread(block 69) failed [ 642.226247][T16234] FAT-fs (loop4): Directory bread(block 70) failed [ 642.244397][T16234] FAT-fs (loop4): Directory bread(block 71) failed [ 642.258386][T16234] FAT-fs (loop4): Directory bread(block 72) failed [ 642.264997][T16234] FAT-fs (loop4): Directory bread(block 73) failed [ 642.475497][T16251] netlink: 'syz.1.2883': attribute type 1 has an invalid length. [ 642.615850][T16251] 8021q: adding VLAN 0 to HW filter on device bond24 [ 643.255110][ T28] audit: type=1400 audit(1779062732.952:3705): avc: denied { write } for pid=16237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.655868][T15602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.681702][ T28] audit: type=1400 audit(1779062733.752:3706): avc: denied { write } for pid=16270 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.944789][ T28] audit: type=1400 audit(1779062734.022:3707): avc: denied { write } for pid=16276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.034068][ T28] audit: type=1400 audit(1779062734.112:3708): avc: denied { write } for pid=16287 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.272029][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2888'. [ 644.304112][T16298] netlink: 'syz.4.2889': attribute type 1 has an invalid length. [ 644.319708][T16301] netlink: 'syz.3.2887': attribute type 1 has an invalid length. [ 644.436915][T16298] 8021q: adding VLAN 0 to HW filter on device bond15 [ 644.463088][T16295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2888'. [ 644.464844][ T28] audit: type=1400 audit(1779062734.542:3709): avc: denied { write } for pid=16290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.490209][T16301] 8021q: adding VLAN 0 to HW filter on device bond15 [ 644.546211][ T28] audit: type=1400 audit(1779062734.622:3710): avc: denied { write } for pid=16312 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.827811][T16330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2892'. [ 644.851486][ T28] audit: type=1400 audit(1779062734.932:3711): avc: denied { bind } for pid=16325 comm="syz.3.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 644.851713][T16327] netlink: 'syz.3.2891': attribute type 10 has an invalid length. [ 644.882147][ T28] audit: type=1400 audit(1779062734.932:3712): avc: denied { setopt } for pid=16325 comm="syz.3.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 644.904976][T16327] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 644.913714][T16327] team0: Port device netdevsim2 added [ 644.937815][ T28] audit: type=1400 audit(1779062735.002:3713): avc: denied { write } for pid=16319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.034749][T16338] netlink: 'syz.2.2893': attribute type 1 has an invalid length. [ 645.072215][T16342] loop4: detected capacity change from 0 to 256 [ 645.167260][T16339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2892'. [ 645.209283][T16342] FAT-fs (loop4): Directory bread(block 64) failed [ 645.254778][T16342] FAT-fs (loop4): Directory bread(block 65) failed [ 645.273669][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2895'. [ 645.314694][T16342] FAT-fs (loop4): Directory bread(block 66) failed [ 645.457275][T16342] FAT-fs (loop4): Directory bread(block 67) failed [ 645.464521][T16342] FAT-fs (loop4): Directory bread(block 68) failed [ 645.471353][T16342] FAT-fs (loop4): Directory bread(block 69) failed [ 645.478256][T16342] FAT-fs (loop4): Directory bread(block 70) failed [ 645.485090][T16342] FAT-fs (loop4): Directory bread(block 71) failed [ 645.504433][T16342] FAT-fs (loop4): Directory bread(block 72) failed [ 645.638072][T16342] FAT-fs (loop4): Directory bread(block 73) failed [ 645.911970][T16349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2895'. [ 646.528664][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 646.528682][ T28] audit: type=1400 audit(1779062736.612:3716): avc: denied { write } for pid=16369 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.034381][T16377] loop4: detected capacity change from 0 to 512 [ 647.041105][T16377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 647.059141][T16377] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 647.067315][T16377] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2897: corrupted in-inode xattr: e_value size too large [ 647.081542][T16377] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 647.081779][T16377] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2897: couldn't read orphan inode 15 (err -117) [ 647.091034][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 647.091058][ C1] EXT4-fs (loop4): initial error at time 1779062737: ext4_iget_extra_inode:5128: inode 15 [ 647.091108][ C1] EXT4-fs (loop4): last error at time 1779062737: ext4_iget_extra_inode:5128: inode 15 [ 647.129309][T16377] loop4: lost filesystem error report for type 5 error -117 [ 647.132485][T16377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.534238][T16386] netlink: 'syz.3.2899': attribute type 1 has an invalid length. [ 647.560655][T16386] 8021q: adding VLAN 0 to HW filter on device bond16 [ 647.626920][ T4240] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.816488][T16392] netlink: 'syz.1.2900': attribute type 1 has an invalid length. [ 647.938370][ T28] audit: type=1400 audit(1779062738.012:3717): avc: denied { mounton } for pid=16395 comm="syz.4.2901" path="/553/file0" dev="tmpfs" ino=2960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 647.995932][T16392] 8021q: adding VLAN 0 to HW filter on device bond25 [ 648.008785][ T28] audit: type=1400 audit(1779062738.012:3718): avc: denied { write } for pid=10023 comm="kworker/1:12" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44655 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 648.036754][T16402] netlink: 'syz.4.2901': attribute type 49 has an invalid length. [ 648.081964][ T28] audit: type=1400 audit(1779062738.162:3719): avc: denied { write } for pid=16387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.141430][ T28] audit: type=1400 audit(1779062738.222:3720): avc: denied { write } for pid=16410 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.284933][ T28] audit: type=1400 audit(1779062738.362:3721): avc: denied { write } for pid=16414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.333529][ T28] audit: type=1400 audit(1779062738.412:3722): avc: denied { write } for pid=16425 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.471262][ T28] audit: type=1400 audit(1779062738.552:3723): avc: denied { write } for pid=16428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.547070][ T28] audit: type=1400 audit(1779062738.622:3724): avc: denied { write } for pid=16439 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.613304][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2902'. [ 648.759313][T16444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2902'. [ 648.925154][ T28] audit: type=1400 audit(1779062739.002:3725): avc: denied { write } for pid=16446 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.030449][T16465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2906'. [ 650.426884][T16476] loop3: detected capacity change from 0 to 1024 [ 650.691717][T16476] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 650.762938][T16476] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 5: comm syz.3.2908: lblock 5 mapped to illegal pblock 5 (length 1) [ 650.818835][T16476] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 650.824212][T16476] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2908: Failed to acquire dquot type 0 [ 650.833601][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 650.833639][ C1] EXT4-fs (loop3): initial error at time 1779062740: ext4_map_blocks:833: inode 3: block 5 [ 650.833765][ C1] EXT4-fs (loop3): last error at time 1779062740: ext4_map_blocks:833: inode 3: block 5 [ 650.886736][T16476] loop3: lost filesystem error report for type 5 error -117 [ 650.888717][T16476] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 5: comm syz.3.2908: lblock 5 mapped to illegal pblock 5 (length 1) [ 650.911926][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2910'. [ 650.923056][T16476] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 650.923628][T16476] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2908: Failed to acquire dquot type 0 [ 650.998847][T16476] loop3: lost filesystem error report for type 5 error -117 [ 651.000273][T16476] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.2908: Freeing blocks not in datazone - block = 0, count = 4096 [ 651.043982][T16476] loop3: lost filesystem error report for type 5 error -117 [ 651.053033][T16476] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 5: comm syz.3.2908: lblock 5 mapped to illegal pblock 5 (length 1) [ 651.074902][T16476] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 651.076135][T16476] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2908: Failed to acquire dquot type 0 [ 651.131864][T16476] loop3: lost filesystem error report for type 5 error -117 [ 651.156540][T16527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2910'. [ 651.288796][T16476] EXT4-fs (loop3): 1 orphan inode deleted [ 651.374052][T16476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.089959][T16476] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 5: comm syz.3.2908: lblock 5 mapped to illegal pblock 5 (length 1) [ 652.284844][T16513] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 652.300258][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 652.300277][ T28] audit: type=1400 audit(1779062742.172:3732): avc: denied { write } for pid=16474 comm="syz.3.2908" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 652.337798][T16476] Quota error (device loop3): do_insert_tree: Can't read tree quota block 5 [ 652.360571][T16476] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 652.361546][T16531] loop2: detected capacity change from 0 to 512 [ 652.386619][T16476] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2908: Failed to acquire dquot type 0 [ 652.410985][T16531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 652.498398][ T28] audit: type=1400 audit(1779062742.572:3733): avc: denied { write } for pid=16526 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.498575][T16531] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 652.541647][T16531] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2911: corrupted in-inode xattr: e_value size too large [ 652.561126][T16531] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 652.567298][T16531] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2911: couldn't read orphan inode 15 (err -117) [ 652.567977][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 652.568074][ C1] EXT4-fs (loop2): initial error at time 1779062742: ext4_iget_extra_inode:5128: inode 15 [ 652.569808][ C1] EXT4-fs (loop2): last error at time 1779062742: ext4_iget_extra_inode:5128: inode 15 [ 652.603917][ T9811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.691484][T16531] loop2: lost filesystem error report for type 5 error -117 [ 652.801666][T16551] netlink: 'syz.3.2914': attribute type 1 has an invalid length. [ 652.825574][T16531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.897021][T16551] 8021q: adding VLAN 0 to HW filter on device bond17 [ 652.928142][ T28] audit: type=1400 audit(1779062743.012:3734): avc: denied { write } for pid=16545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.394764][T15602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.452848][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2917'. [ 653.583247][ T28] audit: type=1400 audit(1779062743.032:3735): avc: denied { write } for pid=16564 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.656464][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2920'. [ 653.801327][T16576] loop2: detected capacity change from 0 to 1024 [ 653.819948][T16570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2917'. [ 653.965544][T16576] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 654.801083][T16582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2920'. [ 654.881389][T16576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.043500][T16585] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2921'. [ 655.287183][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2923'. [ 655.446010][T16599] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2921'. [ 656.146396][T16576] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 656.868080][T16602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2923'. [ 658.138472][T15602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.200072][ T28] audit: type=1400 audit(1779062748.282:3736): avc: denied { write } for pid=16586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 658.279312][ T28] audit: type=1400 audit(1779062748.362:3737): avc: denied { write } for pid=16617 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 658.304925][T16618] netlink: 'syz.1.2926': attribute type 1 has an invalid length. [ 658.341625][T16618] 8021q: adding VLAN 0 to HW filter on device bond26 [ 658.634804][T16635] netlink: 'syz.2.2929': attribute type 1 has an invalid length. [ 659.087358][ T28] audit: type=1400 audit(1779062749.162:3738): avc: denied { write } for pid=16626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.307751][ T28] audit: type=1400 audit(1779062749.382:3739): avc: denied { write } for pid=16654 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.412235][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2934'. [ 659.481882][T16674] loop4: detected capacity change from 0 to 256 [ 659.493976][T16674] FAT-fs (loop4): Directory bread(block 64) failed [ 659.504387][T16674] FAT-fs (loop4): Directory bread(block 65) failed [ 659.522483][T16674] FAT-fs (loop4): Directory bread(block 66) failed [ 659.536879][T16674] FAT-fs (loop4): Directory bread(block 67) failed [ 659.559284][T16674] FAT-fs (loop4): Directory bread(block 68) failed [ 659.561340][T16664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2934'. [ 659.592107][T16674] FAT-fs (loop4): Directory bread(block 69) failed [ 659.598952][T16674] FAT-fs (loop4): Directory bread(block 70) failed [ 659.605524][T16674] FAT-fs (loop4): Directory bread(block 71) failed [ 659.615171][T16674] FAT-fs (loop4): Directory bread(block 72) failed [ 659.629332][T16674] FAT-fs (loop4): Directory bread(block 73) failed [ 659.655997][ T28] audit: type=1400 audit(1779062749.732:3740): avc: denied { write } for pid=16661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.839507][ T28] audit: type=1400 audit(1779062749.922:3741): avc: denied { write } for pid=16683 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.261358][T16690] loop2: detected capacity change from 0 to 1024 [ 660.330647][T16690] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 660.457212][T16690] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #3: block 5: comm syz.2.2937: lblock 5 mapped to illegal pblock 5 (length 1) [ 660.488682][T16690] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 660.497878][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 660.513722][ C0] EXT4-fs (loop2): initial error at time 1779062750: ext4_map_blocks:833: inode 3: block 5 [ 660.523967][ C0] EXT4-fs (loop2): last error at time 1779062750: ext4_map_blocks:833: inode 3: block 5 [ 660.533862][T16690] Quota error (device loop2): write_blk: dquota write failed [ 660.543760][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2939'. [ 660.552818][T16690] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 660.563100][T16690] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 660.595161][T16690] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2937: Failed to acquire dquot type 0 [ 660.621130][T16690] loop2: lost filesystem error report for type 5 error -117 [ 660.621335][T16690] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 5: comm syz.2.2937: lblock 5 mapped to illegal pblock 5 (length 1) [ 660.685295][T16690] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 660.685458][T16690] Quota error (device loop2): do_insert_tree: Can't read tree quota block 5 [ 660.704139][T16690] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2937: Failed to acquire dquot type 0 [ 660.716212][T16690] loop2: lost filesystem error report for type 5 error -117 [ 660.716517][T16690] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.2937: Freeing blocks not in datazone - block = 0, count = 4096 [ 660.773308][T16710] netlink: 'syz.9.2941': attribute type 1 has an invalid length. [ 660.785963][T16711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2939'. [ 660.860250][T16690] loop2: lost filesystem error report for type 5 error -117 [ 660.861255][T16690] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 5: comm syz.2.2937: lblock 5 mapped to illegal pblock 5 (length 1) [ 660.976930][T16710] 8021q: adding VLAN 0 to HW filter on device bond9 [ 660.992154][T16690] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 660.992548][T16690] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2937: Failed to acquire dquot type 0 [ 661.115916][T16690] loop2: lost filesystem error report for type 5 error -117 [ 661.117294][T16690] EXT4-fs (loop2): 1 orphan inode deleted [ 661.199983][T16717] netlink: 'syz.9.2942': attribute type 21 has an invalid length. [ 661.226039][T16690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.248745][T16716] netlink: 'syz.9.2942': attribute type 21 has an invalid length. [ 661.255682][T16717] IPv6: NLM_F_CREATE should be specified when creating new route [ 661.256850][T16716] IPv6: NLM_F_CREATE should be specified when creating new route [ 661.286221][T16717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 661.293589][T16717] IPv6: NLM_F_CREATE should be set when creating new route [ 661.301317][T16717] IPv6: NLM_F_CREATE should be set when creating new route [ 661.308520][T16717] IPv6: NLM_F_CREATE should be set when creating new route [ 661.315863][T16716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 661.326493][T16687] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 5: comm syz.2.2937: lblock 5 mapped to illegal pblock 5 (length 1) [ 661.344542][T16687] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2937: Failed to acquire dquot type 0 [ 661.382542][T15602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.473799][T16730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2943'. [ 661.643058][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2955'. [ 661.692404][T16738] netlink: 'syz.3.2946': attribute type 1 has an invalid length. [ 661.725497][T16738] 8021q: adding VLAN 0 to HW filter on device bond18 [ 663.304909][T16744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2955'. [ 663.691544][T16749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2943'. [ 663.799955][T16757] loop4: detected capacity change from 0 to 256 [ 664.025510][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 664.025529][ T28] audit: type=1400 audit(1779062754.102:3745): avc: denied { write } for pid=16735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.621871][ T28] audit: type=1400 audit(1779062754.692:3746): avc: denied { write } for pid=16769 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.808070][T16775] netlink: 'syz.3.2952': attribute type 1 has an invalid length. [ 664.872749][T16775] 8021q: adding VLAN 0 to HW filter on device bond19 [ 665.092233][T16786] loop4: detected capacity change from 0 to 256 [ 667.180051][T16798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2958'. [ 667.199675][ T28] audit: type=1400 audit(1779062757.282:3747): avc: denied { write } for pid=16783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 667.394931][ T28] audit: type=1400 audit(1779062757.472:3748): avc: denied { write } for pid=16804 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 667.459710][T16807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2958'. [ 668.136511][T16821] FAULT_INJECTION: forcing a failure. [ 668.136511][T16821] name failslab, interval 1, probability 0, space 0, times 0 [ 668.168009][T16821] CPU: 1 UID: 0 PID: 16821 Comm: syz.3.2961 Not tainted syzkaller #0 PREEMPT(full) [ 668.168044][T16821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 668.168095][T16821] Call Trace: [ 668.168103][T16821] [ 668.168138][T16821] __dump_stack+0x1d/0x30 [ 668.168236][T16821] dump_stack_lvl+0x95/0xd0 [ 668.168261][T16821] dump_stack+0x15/0x1b [ 668.168285][T16821] should_fail_ex+0x263/0x280 [ 668.168316][T16821] should_failslab+0x8c/0xb0 [ 668.168401][T16821] kmem_cache_alloc_noprof+0x66/0x3f0 [ 668.168436][T16821] ? io_submit_one+0xcf/0x1350 [ 668.168476][T16821] io_submit_one+0xcf/0x1350 [ 668.168503][T16821] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 668.168538][T16821] ? __sanitizer_cov_trace_pc+0x5c/0x70 [ 668.168604][T16821] __se_sys_io_submit+0xfb/0x280 [ 668.168676][T16821] __x64_sys_io_submit+0x43/0x50 [ 668.168704][T16821] x64_sys_call+0x19d5/0x3020 [ 668.168734][T16821] do_syscall_64+0x12c/0x3b0 [ 668.168768][T16821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.168857][T16821] RIP: 0033:0x7fd459acce59 [ 668.168878][T16821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.168901][T16821] RSP: 002b:00007fd458527028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 668.168978][T16821] RAX: ffffffffffffffda RBX: 00007fd459d45fa0 RCX: 00007fd459acce59 [ 668.168996][T16821] RDX: 0000200000002100 RSI: 0000000000000004 RDI: 00007fd45a884000 [ 668.169012][T16821] RBP: 00007fd458527090 R08: 0000000000000000 R09: 0000000000000000 [ 668.169026][T16821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.169039][T16821] R13: 00007fd459d46038 R14: 00007fd459d45fa0 R15: 00007ffffbbfc9e8 [ 668.169104][T16821] [ 668.460466][T16823] loop2: detected capacity change from 0 to 256 [ 669.281916][T16826] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2962'. [ 669.299843][ T28] audit: type=1400 audit(1779062759.332:3749): avc: denied { write } for pid=16812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 669.439687][ T28] audit: type=1400 audit(1779062759.352:3750): avc: denied { write } for pid=16833 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 669.704152][T16837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=389 sclass=netlink_route_socket pid=16837 comm=syz.4.2959 [ 669.725681][T16837] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2959'. [ 669.737600][T16837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2959'. [ 669.942759][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2964'. [ 670.209343][T16850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2964'. [ 670.740590][T16859] netlink: 'syz.9.2967': attribute type 12 has an invalid length. [ 670.753101][ T28] audit: type=1400 audit(1779062760.822:3751): avc: denied { write } for pid=16839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.818133][T16859] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2967'. [ 670.837990][ T28] audit: type=1400 audit(1779062760.862:3752): avc: denied { write } for pid=16862 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.930751][ T28] audit: type=1400 audit(1779062762.012:3753): avc: denied { write } for pid=16875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.091648][ T28] audit: type=1400 audit(1779062762.172:3754): avc: denied { write } for pid=16889 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.179549][T16892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2971'. [ 672.369543][T16892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2971'. [ 673.171906][ T28] audit: type=1400 audit(1779062763.252:3755): avc: denied { write } for pid=16894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.389208][T16867] loop3: detected capacity change from 0 to 1024 [ 673.402521][T16867] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 673.438950][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2974'. [ 673.444257][T16867] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 5: comm syz.3.2968: lblock 5 mapped to illegal pblock 5 (length 1) [ 673.498197][T16923] netlink: 'syz.9.2975': attribute type 1 has an invalid length. [ 673.507636][ T28] audit: type=1400 audit(1779062763.572:3756): avc: denied { write } for pid=16919 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.567746][T16867] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 673.582788][T16923] 8021q: adding VLAN 0 to HW filter on device bond10 [ 673.618660][T16867] Quota error (device loop3): write_blk: dquota write failed [ 673.627858][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 673.634336][ C0] EXT4-fs (loop3): initial error at time 1779062763: ext4_map_blocks:833: inode 3: block 5 [ 673.644390][ C0] EXT4-fs (loop3): last error at time 1779062763: ext4_map_blocks:833: inode 3: block 5 [ 673.666115][T16867] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 673.700338][T16867] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2968: Failed to acquire dquot type 0 [ 673.721068][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2974'. [ 673.907662][T16867] loop3: lost filesystem error report for type 5 error -117 [ 673.956381][T16867] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 5: comm syz.3.2968: lblock 5 mapped to illegal pblock 5 (length 1) [ 674.275260][T16867] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 674.275971][T16867] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2968: Failed to acquire dquot type 0 [ 674.337975][T16867] loop3: lost filesystem error report for type 5 error -117 [ 674.339407][T16867] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.2968: Freeing blocks not in datazone - block = 0, count = 4096 [ 674.373378][T16867] loop3: lost filesystem error report for type 5 error -117 [ 674.375726][T16867] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 5: comm syz.3.2968: lblock 5 mapped to illegal pblock 5 (length 1) [ 674.400333][T16867] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 674.400732][T16867] __quota_error: 3 callbacks suppressed [ 674.400774][T16867] Quota error (device loop3): do_insert_tree: Can't read tree quota block 5 [ 674.426511][T16867] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 674.437287][T16867] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2968: Failed to acquire dquot type 0 [ 674.449833][T16867] loop3: lost filesystem error report for type 5 error -117 [ 674.458794][T16867] EXT4-fs (loop3): 1 orphan inode deleted [ 674.476485][T16867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.494428][ T28] audit: type=1400 audit(1779062764.572:3757): avc: denied { write } for pid=16930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.533819][ T9811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.561339][ T28] audit: type=1400 audit(1779062764.632:3758): avc: denied { write } for pid=16957 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.759566][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2983'. [ 675.524560][T16973] loop3: detected capacity change from 0 to 512 [ 675.558482][T16973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 675.721335][T16976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2983'. [ 675.930076][T16973] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 675.959790][T16973] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2981: corrupted in-inode xattr: e_value size too large [ 675.976989][T16973] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 675.997869][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 676.013739][ C0] EXT4-fs (loop3): initial error at time 1779062766: ext4_iget_extra_inode:5128: inode 15 [ 676.023695][ C0] EXT4-fs (loop3): last error at time 1779062766: ext4_iget_extra_inode:5128: inode 15 [ 676.057955][T16973] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2981: couldn't read orphan inode 15 (err -117) [ 676.074029][T16973] loop3: lost filesystem error report for type 5 error -117 [ 676.099678][T16973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.139332][T16988] loop4: detected capacity change from 0 to 256 [ 676.195185][T16983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2985'. [ 676.221303][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2987'. [ 676.233299][T16988] FAT-fs (loop4): Directory bread(block 64) failed [ 676.244782][T16988] FAT-fs (loop4): Directory bread(block 65) failed [ 676.383340][T16993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2987'. [ 676.454674][ T9811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.466885][T16988] FAT-fs (loop4): Directory bread(block 66) failed [ 676.473722][T16988] FAT-fs (loop4): Directory bread(block 67) failed [ 676.480566][T16988] FAT-fs (loop4): Directory bread(block 68) failed [ 676.487179][T16988] FAT-fs (loop4): Directory bread(block 69) failed [ 676.493883][T16988] FAT-fs (loop4): Directory bread(block 70) failed [ 676.500949][T16988] FAT-fs (loop4): Directory bread(block 71) failed [ 676.507575][T16988] FAT-fs (loop4): Directory bread(block 72) failed [ 676.514444][T16988] FAT-fs (loop4): Directory bread(block 73) failed [ 676.527338][ T28] audit: type=1400 audit(1779062766.612:3759): avc: denied { write } for pid=16966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.699534][T17006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2990'. [ 676.708715][ T28] audit: type=1400 audit(1779062766.742:3760): avc: denied { write } for pid=17003 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.735411][T17010] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2991'. [ 677.036427][T17015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2990'. [ 677.147139][T17019] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2991'. [ 677.631634][ T28] audit: type=1400 audit(1779062767.712:3761): avc: denied { write } for pid=17017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 677.657920][T17035] loop4: detected capacity change from 0 to 164 [ 677.677593][ T28] audit: type=1400 audit(1779062767.752:3762): avc: denied { mount } for pid=17034 comm="syz.4.2995" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 677.681531][T17036] syzkaller0: entered promiscuous mode [ 677.712906][T17036] syzkaller0: entered allmulticast mode [ 677.747508][ T28] audit: type=1400 audit(1779062767.822:3763): avc: denied { write } for pid=17038 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 677.785571][ T28] audit: type=1400 audit(1779062767.862:3764): avc: denied { unmount } for pid=4240 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 677.956159][T17047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2997'. [ 679.155165][T17070] FAULT_INJECTION: forcing a failure. [ 679.155165][T17070] name failslab, interval 1, probability 0, space 0, times 0 [ 679.228002][T17070] CPU: 0 UID: 0 PID: 17070 Comm: syz.4.3000 Not tainted syzkaller #0 PREEMPT(full) [ 679.228037][T17070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 679.228121][T17070] Call Trace: [ 679.228130][T17070] [ 679.228141][T17070] __dump_stack+0x1d/0x30 [ 679.228171][T17070] dump_stack_lvl+0x95/0xd0 [ 679.228227][T17070] dump_stack+0x15/0x1b [ 679.228249][T17070] should_fail_ex+0x263/0x280 [ 679.228316][T17070] should_failslab+0x8c/0xb0 [ 679.228347][T17070] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 679.228383][T17070] ? __alloc_skb+0x2d6/0x690 [ 679.228408][T17070] __alloc_skb+0x2d6/0x690 [ 679.228507][T17070] ? __alloc_skb+0x200/0x690 [ 679.228603][T17070] alloc_skb_with_frags+0x7e/0x3d0 [ 679.228626][T17070] ? ref_tracker_alloc+0x1eb/0x2f0 [ 679.228670][T17070] sock_alloc_send_pskb+0x44d/0x500 [ 679.228697][T17070] ? ieee802154_get_dev+0x103/0x370 [ 679.228762][T17070] dgram_sendmsg+0x3ca/0x760 [ 679.228835][T17070] ieee802154_sock_sendmsg+0x51/0x60 [ 679.228857][T17070] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 679.228879][T17070] ____sys_sendmsg+0x563/0x5b0 [ 679.228907][T17070] ___sys_sendmsg+0x195/0x1e0 [ 679.229042][T17070] __x64_sys_sendmsg+0xd4/0x160 [ 679.229069][T17070] x64_sys_call+0x194c/0x3020 [ 679.229094][T17070] do_syscall_64+0x12c/0x3b0 [ 679.229124][T17070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.229195][T17070] RIP: 0033:0x7fba5effce59 [ 679.229212][T17070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.229231][T17070] RSP: 002b:00007fba5da4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.229255][T17070] RAX: ffffffffffffffda RBX: 00007fba5f275fa0 RCX: 00007fba5effce59 [ 679.229273][T17070] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 679.229290][T17070] RBP: 00007fba5da4f090 R08: 0000000000000000 R09: 0000000000000000 [ 679.229356][T17070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.229371][T17070] R13: 00007fba5f276038 R14: 00007fba5f275fa0 R15: 00007ffe0717ac28 [ 679.229395][T17070] [ 679.691950][T17083] loop4: detected capacity change from 0 to 256 [ 679.875852][T17086] __nla_validate_parse: 2 callbacks suppressed [ 679.875931][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3003'. [ 680.165684][T17086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3003'. [ 680.243266][T17083] FAT-fs (loop4): Directory bread(block 64) failed [ 680.267164][T17083] FAT-fs (loop4): Directory bread(block 65) failed [ 680.292917][T17083] FAT-fs (loop4): Directory bread(block 66) failed [ 680.300264][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 680.300301][ T28] audit: type=1400 audit(1779062770.322:3768): avc: denied { write } for pid=17072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.344189][T17083] FAT-fs (loop4): Directory bread(block 67) failed [ 680.359883][T17083] FAT-fs (loop4): Directory bread(block 68) failed [ 680.378880][T17083] FAT-fs (loop4): Directory bread(block 69) failed [ 680.400595][T17083] FAT-fs (loop4): Directory bread(block 70) failed [ 680.414760][ T28] audit: type=1400 audit(1779062770.422:3769): avc: denied { write } for pid=17096 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.441163][T17083] FAT-fs (loop4): Directory bread(block 71) failed [ 680.462046][T17083] FAT-fs (loop4): Directory bread(block 72) failed [ 680.483710][T17083] FAT-fs (loop4): Directory bread(block 73) failed [ 680.555407][T17102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3004'. [ 680.873352][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3004'. [ 681.320675][ T28] audit: type=1400 audit(1779062771.402:3770): avc: denied { write } for pid=17099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.454044][ T28] audit: type=1400 audit(1779062771.532:3771): avc: denied { write } for pid=17117 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.544031][T17124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3005'. [ 681.778649][T17130] syzkaller0: entered promiscuous mode [ 681.784285][T17130] syzkaller0: entered allmulticast mode [ 681.794030][T17135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3005'. [ 681.971983][ T28] audit: type=1400 audit(1779062772.052:3772): avc: denied { write } for pid=17126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.296985][T17150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3009'. [ 682.598720][T17153] loop4: detected capacity change from 0 to 1024 [ 682.607774][T17153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 682.641279][ T28] audit: type=1400 audit(1779062772.722:3773): avc: denied { write } for pid=17154 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.723860][T17155] loop3: detected capacity change from 0 to 1024 [ 682.789880][T17155] ext4: Unknown parameter 'func' [ 682.891084][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3012'. [ 683.076240][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3013'. [ 683.525805][T17153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.772066][T17170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3012'. [ 684.101814][ T4240] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.520248][ T2980] ================================================================== [ 684.528565][ T2980] BUG: KCSAN: data-race in set_nlink / set_nlink [ 684.535010][ T2980] [ 684.537346][ T2980] read to 0xffff888107cb0928 of 4 bytes by task 7922 on cpu 0: [ 684.544892][ T2980] set_nlink+0x29/0xb0 [ 684.549057][ T2980] kernfs_iop_permission+0x1e5/0x220 [ 684.554439][ T2980] inode_permission+0x31f/0x3b0 [ 684.559467][ T2980] link_path_walk+0x779/0xe30 [ 684.564150][ T2980] path_openat+0x1c6/0x2050 [ 684.568664][ T2980] do_file_open+0x16c/0x290 [ 684.573283][ T2980] do_sys_openat2+0x94/0x130 [ 684.577897][ T2980] __x64_sys_openat+0xf2/0x120 [ 684.582793][ T2980] x64_sys_call+0x1e39/0x3020 [ 684.587571][ T2980] do_syscall_64+0x12c/0x3b0 [ 684.592374][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.598283][ T2980] [ 684.600613][ T2980] write to 0xffff888107cb0928 of 4 bytes by task 2980 on cpu 1: [ 684.608246][ T2980] set_nlink+0x99/0xb0 [ 684.612320][ T2980] kernfs_iop_permission+0x1e5/0x220 [ 684.617624][ T2980] inode_permission+0x31f/0x3b0 [ 684.622570][ T2980] link_path_walk+0x779/0xe30 [ 684.627516][ T2980] path_lookupat+0x8c/0x500 [ 684.632113][ T2980] filename_lookup+0x190/0x390 [ 684.636977][ T2980] vfs_statx+0x96/0x170 [ 684.641157][ T2980] vfs_fstatat+0x118/0x170 [ 684.645589][ T2980] __se_sys_newfstatat+0x55/0x3e0 [ 684.650688][ T2980] __x64_sys_newfstatat+0x55/0x70 [ 684.655725][ T2980] x64_sys_call+0x2c64/0x3020 [ 684.660595][ T2980] do_syscall_64+0x12c/0x3b0 [ 684.665199][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.671104][ T2980] [ 684.673529][ T2980] value changed: 0x00000009 -> 0x00000008 [ 684.679243][ T2980] [ 684.681573][ T2980] Reported by Kernel Concurrency Sanitizer on: [ 684.687722][ T2980] CPU: 1 UID: 0 PID: 2980 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 684.696672][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 684.706731][ T2980] ================================================================== [ 685.329286][T17187] netlink: 'syz.4.3015': attribute type 1 has an invalid length. [ 685.414050][T17187] 8021q: adding VLAN 0 to HW filter on device bond16 [ 685.643432][ T28] audit: type=1400 audit(1779062775.342:3774): avc: denied { write } for pid=17160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.666694][ T28] audit: type=1400 audit(1779062775.442:3775): avc: denied { write } for pid=17186 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.722839][ T28] audit: type=1400 audit(1779062775.792:3776): avc: denied { write } for pid=17192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.804862][ T28] audit: type=1400 audit(1779062775.882:3777): avc: denied { write } for pid=17204 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.879167][ T28] audit: type=1400 audit(1779062775.962:3778): avc: denied { recv } for pid=17206 comm="dhcpcd" src=68 daddr=255.255.255.255 dest=67 netif=veth0_to_bond scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 686.234384][ T28] audit: type=1400 audit(1779062776.312:3779): avc: denied { write } for pid=17213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.258211][ T28] audit: type=1400 audit(1779062776.312:3780): avc: denied { write } for pid=17224 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.334772][ T28] audit: type=1400 audit(1779062776.412:3781): avc: denied { write } for pid=17226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.358664][ T28] audit: type=1400 audit(1779062776.412:3782): avc: denied { write } for pid=17237 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.276517][ T28] audit: type=1400 audit(1779062777.352:3783): avc: denied { write } for pid=17290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.671572][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 690.671591][ T28] audit: type=1400 audit(1779062780.752:3847): avc: denied { write } for pid=17754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.701728][ T28] audit: type=1400 audit(1779062780.772:3848): avc: denied { write } for pid=17765 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.786204][ T28] audit: type=1400 audit(1779062780.862:3849): avc: denied { write } for pid=17768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.809611][ T28] audit: type=1400 audit(1779062780.862:3850): avc: denied { write } for pid=17779 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.895770][ T28] audit: type=1400 audit(1779062780.972:3851): avc: denied { write } for pid=17782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.919353][ T28] audit: type=1400 audit(1779062780.992:3852): avc: denied { write } for pid=17793 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.005037][ T28] audit: type=1400 audit(1779062781.082:3853): avc: denied { write } for pid=17796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.029613][ T28] audit: type=1400 audit(1779062781.112:3854): avc: denied { write } for pid=17807 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.119964][ T28] audit: type=1400 audit(1779062781.202:3855): avc: denied { write } for pid=17810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.159467][ T28] audit: type=1400 audit(1779062781.242:3856): avc: denied { write } for pid=17821 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1