last executing test programs: 6m53.616827391s ago: executing program 0 (id=4113): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000ddffffffffffffff000000"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') pread64(r1, &(0x7f0000000000)=""/16, 0x9600, 0x3ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x4c, 0x114, 0x8, {{0x8, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x400000000000008, 0x7c0d08a8, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58}, 0x40) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0, 0xf}, 0x104404, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$pppl2tp(0x18, 0x1, 0x1) close(r4) socket$pppl2tp(0x18, 0x1, 0x1) io_setup(0x3ff, &(0x7f0000000500)) connect$pppl2tp(r4, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000c00)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x320c8d4, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000004']) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3, 0x1}, 0x1c) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port90m0000000000004e22,\x00']) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 6m52.933870022s ago: executing program 0 (id=4119): r0 = io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0xc, 0x1000, 0x0, 0x5f}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) recvmsg(r1, &(0x7f0000003c80)={0x0, 0x0, 0x0}, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x0) readv(0xffffffffffffffff, &(0x7f00000037c0)=[{&(0x7f0000003500)=""/220, 0xdc}], 0x1) 6m52.724765259s ago: executing program 0 (id=4120): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDENABIO(r0, 0x4b36) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x101, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f0000000240)}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440)={0x8008, 0x2000, 0xca4, 0xee5}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendto$inet6(r4, &(0x7f0000000000)="a6aaf6f14854", 0x6, 0x0, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x37c}, 0x1c) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x6, &(0x7f0000001880)={0x3, 0x4bf, 0x7e}, 0x0) bind$tipc(r6, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044040}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ffe5ffffffffffe00000000200000001a80016ea1f00084003bc5f54c92011148ed0873484", 0x45}, {&(0x7f00000004c0)="b09cffb577bc5fbf432e552d80d7e05ac29d02bdcb85b2af7149cabd7abc2c5e2515d61bf078d47135016b013fa0048ee768f6eefc60a4cefa8eff67827bc3cbe5e4df392ab62e39662bf5e15e7d9ef26c3778ff05f18fcab36397634d56e7692823b7c93d4e1f92dc5f61ea59182fc2d6eafe3a6bd5197e7e60dbdb3db39775ba516ec3a01c2e7271d500ea46e67476a4", 0x91}], 0x2, 0x0, 0x0, 0x7400}, 0x20004c04) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) ioctl$TIOCGSID(r8, 0x5429, 0x0) sendmsg$netlink(r8, &(0x7f0000001840)={&(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc, &(0x7f0000001800)=[{&(0x7f00000015c0)={0x1dc, 0x20, 0xb00, 0x70bd25, 0x7ff, "", [@generic="9325397d488778c31875ed3eab9c2f5d059956007c6cbabeb1af07cc1bcbed850bd1ff3a911e01047ad5d3f91db74a584b9842c6b56bb367d87aea639dad44a2ce09ade11541e016a3b2aed4fdf37c4c8a676dd9515b114511181a76ea3b2dea39f6b7c1d60a5e13fd58021f805660a86fe6b3803476f0bec31a021c19f737eb41ab749aa063b30e90326350e8505ea645b73ce97fecb41726fcfbc99c6124fde9a8a457e9dafa5de71fb5378ea8b93f043db31fa31cf2df4f611bd44a9490de17a8a6dbf037a01f19f86c30ec785a0cb602b68c22bff079da47920a3840751e58a7", @generic="7ffa93a2aed58a3069508a8e2240000448c79dfcf4c7495f732b0fb79949df4b2dc720d3947cb2f90cac4813aa67183f53ebf0f0a81d37aeef08956a093f30433e415719502c36876e5e364d4930f348e277693477ce27", @typed={0x8, 0x4d, 0x0, 0x0, @pid}, @generic="48ae99688797ce1277cb03c875f5666aae4a8d3027bb6c0be1049d3d5a7b8b0fdbfcc40e7002de2e8fbadd0067691faf8f98ad3d4830c8124fddaa509ff4d89f9bf4bd65b47c61ff9a315181258b46d93d97a0a058dc683e51a567346a3e8e79ab06f386bdd598c0cecd65d560d13985d31c0741a3f25550317e4480a1b90adfe43e0cfdc7d68236bce591"]}, 0x1dc}], 0x1, 0xfffffffffffffffc, 0x0, 0x4000}, 0x0) 6m51.272409185s ago: executing program 0 (id=4127): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$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") symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x82802, 0xf) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x11) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000f00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "cc343218fe7b1c"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001f00)={r3, 0x24}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 6m50.288054746s ago: executing program 0 (id=4131): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c080}, 0x894) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdcc0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000080)}, 0x8, 0x0, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents(r4, &(0x7f00000000c0)=""/39, 0x27) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x8010) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r6, 0x10, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000300), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x5452, &(0x7f0000000a80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, 0x0, 0x40000c0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="60000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000380012800b00010069703667726500002800028008000500090000000800150009870f0014000600ff02000000000000000000000000000108000a00", @ANYRES32=r8], 0x60}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000001c0)={@private0, 0x60}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4050}, 0x40000c4) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, 0x0, 0x0) 6m49.700069215s ago: executing program 0 (id=4133): r0 = creat(&(0x7f0000000380)='./file0\x00', 0x4c) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8422, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xb, 0x101301) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0xfffffffffffff800, 0x82, 0x2, 0x0, 0x0, 0x1, 0x0, 0x20000000, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x3a, 0x229, 0x8000, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtclass={0x80, 0x28, 0x202, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x1, 0x8}, {0xffff, 0xf}, {0xe, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x64, 0x3a}}, @tclass_kind_options=@c_qfq={{0x8}, {0x34, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x5}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x80}, @TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0x7}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x48811}, 0x0) syslog(0x4, 0x0, 0x0) mkdirat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x1ff) openat(r4, &(0x7f0000000280)='./file0\x00', 0x20200, 0x707e2b95df95b29f) 6m49.695742844s ago: executing program 32 (id=4133): r0 = creat(&(0x7f0000000380)='./file0\x00', 0x4c) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8422, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xb, 0x101301) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0xfffffffffffff800, 0x82, 0x2, 0x0, 0x0, 0x1, 0x0, 0x20000000, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x3a, 0x229, 0x8000, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtclass={0x80, 0x28, 0x202, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x1, 0x8}, {0xffff, 0xf}, {0xe, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x64, 0x3a}}, @tclass_kind_options=@c_qfq={{0x8}, {0x34, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x5}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x80}, @TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0x7}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x48811}, 0x0) syslog(0x4, 0x0, 0x0) mkdirat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x1ff) openat(r4, &(0x7f0000000280)='./file0\x00', 0x20200, 0x707e2b95df95b29f) 6m41.092406416s ago: executing program 1 (id=4193): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000ddffffffffffffff000000"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') pread64(r1, &(0x7f0000000000)=""/16, 0x9600, 0x3ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x4c, 0x114, 0x8, {{0x8, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x400000000000008, 0x7c0d08a8, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58}, 0x40) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0, 0xf}, 0x104404, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$pppl2tp(0x18, 0x1, 0x1) close(r3) socket$pppl2tp(0x18, 0x1, 0x1) io_setup(0x3ff, &(0x7f0000000500)) connect$pppl2tp(r3, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000c00)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x320c8d4, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000004']) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3, 0x1}, 0x1c) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port90m0000000000004e22,\x00']) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) 6m40.794297976s ago: executing program 1 (id=4198): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000007c0500000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xf8, 0x3, 0xc, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x40, 0x1, 0x4, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', r3, 0x4, 0x8, 0xa, 0x7fffffff, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x1, 0xffffffff, 0x7}}) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 6m40.656471s ago: executing program 1 (id=4199): unshare(0x6a040000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x158, 0x18c, 0x203, 0x0, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {0xff}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xa8, 0xf0, 0x0, {0x1000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) unshare(0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$eJzs3ctrW9kZAPDvyvKjTlK7UGjSlaHQGoLlOnWTFrpI6aIUGgi06yZCVkxq2QqWHGJjSEMpdFNoQxeFdpN12qa7btuZ7cy/MLMZhiEhM+OESZjF4OHqEcu25MgZWZqJfz+49jn3oXO++zj3yPdwHcCxNZX+yESciYg/JxETjflJRAzXUtmIi/X1nm1tFtIpie3tX32U1NZ5urVZiJZtYnw8TjQypyPijT9EnM3sL7eyvrGUL5WKq438bHX5xmxlfWPm+nJ+sbhYXDk/Nz9/7sIPL4z2LtZP3t44+egvP//evy9++vtvPfjTm0lcjJONZa1x9MpUTNX3SQynu3CXn/W6sAFLBl0BXkl6aQ7Vr/I4ExPZGOl+2+xRVgwAODK3I2IbADhmEvd/ADhmmn8HeLq1WUin7duD/XtEvz3+aUSM1eNvPt+sL8k2ntmN1Z6Djj9Ndj3vSCJisgflT0XEP/77m3+mUxzRc0iAdn53JyKuTk412/+d9ifZN2ahrvsBGd9vJg4YHDC1J6/9g/75X9r/+dFO/2/n+su86P9Em/7PaJtr91VMxe4RJ/uv/8zDHhTTUdr/+8nwzti2Zy3xN0wONXKnan2+4eTa9VIxbdu+HhHTMTya5ufaf3xteNn0k8+e7JrbEnFr/+/ju7+9n5af/t5ZI/Mwu6fJXchX872IPfX4TsS3s+3iT14c/6RD//dyl2X84sd//HunZWn8abzNaXf8Rz+qbPtexHejffxNyUHjE8/P1k6H2eZJ0cZ/3vvbeKfyW49/OqXl178LnOp9sG2kx3/84Pgnk9bxmpXDl/HWvYn/d1rWOf6m9uf/SPLrWrp5Kd3KV6urcxEjyS/3zz+3s20z31w/jX/6O+2v/4PO//Q74dUu488++vBfL42/OWNf/A1jXRZ2SGn8C4c6/m0T6VfhDovypQfPloY6ld/d8Z9PE0PTjTndtH8da5ovlUZa1nnlHQcAAAAAAAAAAAAAAAAAAAAAAAAAh5CpvaQ0yeRepDOZXC5q/8P7mzGeKZUr1bPXymsrC/WXmU7G8GhE1F51OdHyPtS5xvvwm/lze/I/iIhvRMRfR79Wy+cK5dLCoIMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIYTHf7/f+qD0frv5wOtIQBwJMZeusaTYl8qAgD0zcvv/xExevT1AAD6p6v7PwDwWnH/B4DjZywz6BoAAP02FpEddB0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4rV2+dCmdtp9vbRbS/MLN9bWl8s2ZhWJlKbe8VsgVyqs3covl8mKpmCuUl1s2fafd55XK5RvzsbJ2a7ZarFRnK+sbV5bLayvVK9eX84vFK8XhvkUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN2rrG8s5Uul4mojcX88YvecPiWGGhXq5SfPnOx3FP1IbE/U99SXpT49T4ztnfP+zLunD9rq7r7TWOILJwbZKgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8dXweAAD//9GqGUs=") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000500)=r1) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2b, 0x1, 0x6, 0x0, 0x0, 0x5, 0xb42a9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={&(0x7f0000000340)}, 0x214, 0x0, 0x43a1bd76, 0x6, 0xa, 0x6, 0x2, 0x0, 0x8000, 0x0, 0x200b}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0xd, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x2000}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x9) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x64) 6m39.491679427s ago: executing program 1 (id=4209): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$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") symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x82802, 0xf) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x11) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000f00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "cc343218fe7b1c"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001f00)={r3, 0x24}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 6m36.561803409s ago: executing program 1 (id=4218): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="d9", 0x1}, {&(0x7f0000000280)="65079cf75e3504752326eafde664bbc4e6cf6fb638cc0bf13ade077ccc2ce409d48066660e1bf64686452113489efbd63095c911eae501dd414c023d4e964a0b75db6540bf94af96b3648701dd95d27059354a5e027993cc1669a7885621b79f09d6f3f402b2f64906e509303e13e34528996804e26c94c391d5c21eb134eca1970b36b64ec3", 0x86}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="a3444ce46403ad8f845dc1f2e5b52272837628b000bfad3a45b0931693ddd145f6ed980a87844cb5d179fa06a95494ce46d3abd7c509646b31fea18e559b40cfcc6ef317a2ea50888f8db5f65d45e2ec3d68714df43d2dd26682fd82019df164b11b6d", 0x63}, {&(0x7f0000001640)="9b02e50f2e0a202bd63732e63248e16f902478a389c33e7f2c24a24c0f72348785f21d69a143b44d15b132a3558367679920d1e51aaadc7580a28066823ab8d53db90bf0e202ef7ed0bbff0317860ac7578fe26c0979738e197904c2b50f25b5423af7c189d8f06516dee28f35d0d1af950ac1321a1cdc7caf0c73a598d611f7a2481070", 0x84}, {&(0x7f0000001700)="0bfbedf1a94f61b0f9303ee5c99f0c6870ab4d7f7b1906cb87407f487f78aab35408d3e53398d3fd47b50498845ae3c9f9cf756e1d429d3506c0343005b410ebe53d5c863af279cb99493480e1f8864cbfe0a6e4eb73de0204a199f88db3c349fdaf7a6ea3147874814d53c4ab3c38f5258633782c3933b7a2b36d0662e33d6e60cc2f333100a660fca500157070a115cdf3d282e51d82fb650774c3cab25ba120936c5aff40583baa35546fab04b12995", 0xb1}], 0x6}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000080)='YA\x00\b', 0x4}], 0x1, &(0x7f0000001a00)=[@ip_retopts={{0x84, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x68, [@private=0xa010101]}, @rr={0x7, 0x1f, 0x3d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x25}, @empty, @loopback, @empty]}, @timestamp={0x44, 0x2c, 0xac, 0x0, 0x5, [0x2, 0x0, 0xc35, 0x3, 0x1, 0x9, 0x6d, 0x8, 0x4, 0x4]}, @lsrr={0x83, 0xb, 0xd, [@private=0xa010102, @multicast1]}, @lsrr={0x83, 0x17, 0x80, [@empty, @rand_addr=0x64010101, @multicast1, @rand_addr=0x64010101, @dev]}]}}}], 0x88}}], 0x3, 0x48000) 6m35.684923547s ago: executing program 1 (id=4221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="546563757269747900000000000000000000000000000000000000000000000006000000a3f88b58d83c"], &(0x7f0000000080)=0x2e) 6m35.461746864s ago: executing program 33 (id=4221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="546563757269747900000000000000000000000000000000000000000000000006000000a3f88b58d83c"], &(0x7f0000000080)=0x2e) 12.802735636s ago: executing program 5 (id=6005): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf0", 0x13}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x2002, &(0x7f0000000100)=0x9, 0x6fb) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @rand_addr=0x64010101}, 0x10) 10.080680432s ago: executing program 5 (id=6013): syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xc, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") unshare(0x2c020400) socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) write$char_usb(r3, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) creat(&(0x7f0000000280)='./file0\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 8.137538403s ago: executing program 5 (id=6019): syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x3a8, 0x208, 0x3a8, 0x208, 0x0, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@ipv6={@mcast2, @loopback, [0xffffffff, 0x0, 0xff000000, 0xff], [0x0, 0xffffffff, 0x0, 0xff000000], 'team_slave_0\x00', 'bond0\x00', {0xff}, {0xff}, 0x8, 0x3, 0x3, 0x78}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xc, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") unshare(0x2c020400) socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) write$char_usb(r2, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) creat(&(0x7f0000000280)='./file0\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 7.687610238s ago: executing program 4 (id=6021): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4028800) dup(0xffffffffffffffff) socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x840) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x64}}, 0x4800) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f0000000840), 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='bic', 0x3) shutdown(r1, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2}, 0xec}, {{0x0, 0x0, 0x0}, 0xe8c0}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 7.575127471s ago: executing program 3 (id=6022): socket$inet6(0xa, 0x2, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x20a800, 0x0) socket$kcm(0x23, 0x5, 0x0) r2 = open(0x0, 0x4040, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x1) openat(r2, 0x0, 0x400, 0x4) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0xc000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000004c0)='asymmetric\x00', &(0x7f0000000380)=@keyring={'key_or_keyring:', r7}) setns(r1, 0x24020000) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x2b, 0x1, 0x4, 0x0, 0x0, 0x3000000000000000, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0xb}, 0x30e600, 0x1000, 0x40, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x401, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r8, 0x0, 0x5}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) 6.98908806s ago: executing program 4 (id=6025): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x1, 0x2}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x0, 0xbd6, 0x2, 0x4, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r3 = open(0x0, 0x14f840, 0xa4) preadv2(r3, &(0x7f0000007f40)=[{0x0}, {0x0}], 0x2, 0x0, 0x5, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1b, 0x0, 0x10000000, 0x8000}, 0x50) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000580)=0x30) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x4, 0x578, 0xffffffff, 0x0, 0x0, 0x4a8, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@ipv6={@loopback, @mcast2, [0xff000000, 0xffffff00, 0x0, 0xff], [0xffffff00, 0x0, 0xffffffff, 0xffffffff], 'netdevsim0\x00', 'ip6erspan0\x00', {}, {0x56d7796c2fe6f900}, 0x9f05997ffaf9c067, 0x10, 0x5, 0x1d}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@common=@mh={{0x28}, {"4895", 0x1}}, @common=@rt={{0x138}, {0x5, [0xf, 0x7], 0xa, 0x1, 0x4, [@loopback, @loopback, @rand_addr=' \x01\x00', @remote, @loopback, @empty, @mcast1, @loopback, @mcast1, @remote, @mcast2, @private2, @local, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1a}, @loopback], 0xe}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3ff, 'syz0\x00', {0x3}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x81, 0xb5, 0x2, 0x1, @loopback, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 0x58}}, @common=@icmp6={{0x28}, {0x4, "1dec", 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xff, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x801, 0x5, @mcast2, 0x10}, {0xa, 0x4e22, 0x7f, @private0}, r5}}, 0x48) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@gettfilter={0x54, 0x2e, 0x8, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x6}, {0xfff3, 0xf}, {0xffff, 0xfff2}}, [{0x8, 0xb, 0x3}, {0x8}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x6f1}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xf45}]}, 0x54}, 0x1, 0x0, 0x0, 0x884}, 0x40448c1) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x40, 0x1412, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}}) 6.904277122s ago: executing program 3 (id=6027): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x3a8, 0x208, 0x3a8, 0x208, 0x0, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@ipv6={@mcast2, @loopback, [0xffffffff, 0x0, 0xff000000, 0xff], [0x0, 0xffffffff, 0x0, 0xff000000], 'team_slave_0\x00', 'bond0\x00', {0xff}, {0xff}, 0x8, 0x3, 0x3, 0x78}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xc, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', 0x0, &(0x7f0000001380)=ANY=[], 0x835, 0x0) unshare(0x2c020400) socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r3, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) creat(&(0x7f0000000280)='./file0\x00', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 5.016227402s ago: executing program 3 (id=6030): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_iso={0x0, {0x1, 0x1}, 0x6, 0x0, 0x0, 0x3f, 0x2, 0x7, 0x0, 0x6, 0x1, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0xff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r3, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x04\x00\x00\x00\xb2 b\x00O\x03\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x1, 0x700, 0xffffffff, 0x7, {{0x13, 0x4, 0x3, 0x5, 0x4c, 0x68, 0x0, 0x1d, 0x4, 0x0, @loopback, @remote, {[@lsrr={0x83, 0x3, 0x2c}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xb1, 0x3, 0xd, [{@private=0xa010102, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfd41}, {@rand_addr=0x64010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xfffffff7}, {@remote, 0x94dec3dc}]}]}}}}}) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x17, &(0x7f0000000000), 0x10) r6 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x260680, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700ff0000000000000000"], 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d00b64f6b8b2007000000d55cdd2da9f5f91dec98d70e0a5aa328aaebf9d905d300000000e9b2abd76c8bef44ebcf310500000075e3ec32de1fc9d1c20640ea97eace26ba1f61ed1969f72975b4", @ANYRES32=r10, @ANYBLOB], 0x44}}, 0x2000800) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00bd2285", @ANYRES16=r8, @ANYBLOB="000129bd7000ffdbdf250300000008000800ffffffff050004000300000006000a004e210000060001004e220000050002000800000008000b00", @ANYRES32=r10, @ANYBLOB="0500030032000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r2, 0x58, &(0x7f0000000340)}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x78, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0xfffffffffffffdf5, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x4) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r12, &(0x7f0000000540)=[{&(0x7f0000000240)=""/86, 0x56}], 0x1, 0x8, 0x3) 4.796614119s ago: executing program 2 (id=6031): unshare(0x6a040000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x158, 0x18c, 0x203, 0x0, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {0xff}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xa8, 0xf0, 0x0, {0x1000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000500)=r1) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2b, 0x1, 0x6, 0x0, 0x0, 0x5, 0xb42a9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={&(0x7f0000000340)}, 0x214, 0x0, 0x43a1bd76, 0x6, 0xa, 0x6, 0x2, 0x0, 0x8000, 0x0, 0x200b}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0xd, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x2000}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x9) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x64) 4.653634864s ago: executing program 6 (id=6032): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x154) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000200)=0x84) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x220, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@arp={@empty, @empty, 0xffffffff, 0xffffffff, 0xa, 0x3, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x7f, 0x1, 0x1, 0x3, 0x9, 0xa3, 'nr0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@random="63d5c8914ce7", @broadcast, @private=0xa010100, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @broadcast, @multicast2, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xd32, 0x1ee7}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) unshare(0xa000000) shmget$private(0x0, 0xfffffffffeffffff, 0x0, &(0x7f0000ffc000/0x3000)=nil) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000780)='ns/user\x00') sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f"], 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) sendmsg$NFC_CMD_VENDOR(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf251d"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20008010) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r2) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xb9bb43b04067401a}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_FAMILY={0x5, 0xd, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x4000004) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d40), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)={0x50, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c850) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r7, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xb033813b37cef6bb}, 0x1014) 4.555966627s ago: executing program 6 (id=6033): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioprio_set$pid(0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) 4.496212198s ago: executing program 3 (id=6034): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c080}, 0x894) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdcc0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000080)}, 0x8, 0x0, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents(r4, &(0x7f00000000c0)=""/39, 0x27) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x8010) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r6, 0x10, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000300), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x5452, &(0x7f0000000a80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, 0x0, 0x40000c0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="60000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000380012800b00010069703667726500002800028008000500090000000800150009870f0014000600ff02000000000000000000000000000108000a00", @ANYRES32=r8], 0x60}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000001c0)={@private0, 0x60}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4050}, 0x40000c4) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, 0x0, 0x0) 4.408295741s ago: executing program 6 (id=6035): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$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") r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x129, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x10}, r3}}, 0x30) semget$private(0x0, 0x6, 0x0) readv(r0, &(0x7f0000000900)=[{&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000740)=""/63, 0x3f}, {&(0x7f0000000780)=""/17, 0x11}, {&(0x7f00000007c0)=""/137, 0x89}, {&(0x7f0000000880)=""/96, 0x60}], 0x5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, r3, 0x9dff7ffc}}, 0x4d) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101a02, 0xc) copy_file_range(r5, 0x0, r5, 0x0, 0x4, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r7, 0x2, 0x6, @random="ec3c4156e448"}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000280)={r7, 0x2, 0x6, @local}, 0x10) io_setup(0x4fe, &(0x7f0000000200)=0x0) io_pgetevents(r8, 0xa2c6, 0x9, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) fcntl$dupfd(r1, 0x406, r0) io_cancel(0x0, 0x0, &(0x7f00000004c0)) 4.398797141s ago: executing program 4 (id=6036): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f00006dd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000070c000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000236000/0x10000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup(0x2f6e, &(0x7f0000000040)={0x0, 0x3cb1, 0x1000, 0xa, 0x20002f7, 0x0, r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) 3.983571435s ago: executing program 3 (id=6037): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000380)={0x2, 0x2, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000e00)="fbd2b9ed29", 0x5}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8c}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000400001800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, 0x0, 0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000640)={0x0, 0xfff9, 0x7f, 0x2, 0xb48, 0x6}, 0x14) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x400, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x100006}, 0x3c) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) write$tun(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "cb"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x84}, 0x1, 0x0, 0x0, 0x20000840}, 0x24000840) close(0x3) 3.860758899s ago: executing program 4 (id=6038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000430000000400000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB="0000393145fe00"/24, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x401) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0x8, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x6, 0x9f, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x105, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x0, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) inotify_init() removexattr(0x0, &(0x7f0000000500)=@known='system.posix_acl_default\x00') pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') socket$pppoe(0x18, 0x1, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r7, &(0x7f00000009c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x17\xff\xff\xff\xff\xff\xff\xff\xff\x89\xaeF(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfee\v\xf6\x11\x14\xb7\xd2\xc1\xea\x99\xc17mIx\x95\xbd\xde\xcb\xb6\xea\xa6\xeeNWZ#\x04\x0f\xf3\xd5\xbd\x88t\xf90\x8d\x8d\xa7\f\x0f\x99\xfc\x1d8\xce1\xac\xe5`\x85\xaf\xc7g%\x01\xb8\x18\xc1 \xb5\x9c\xf0\xcb\xb7\x9c`\xbeuJ\xcd\x10h\xd2\xe7\xf0\xa2:\xd1\x1f\x92\xaf\x1f\xd9\xce)g\t\xaa\xebw\x11\xb0\xf5\x14\xcc\x0e\b\xb9@i\x1dS8v\xca\x7f\x16\x92o\xe7u\xdc\xe3\xdd\x0e\x06=+\xc2Q\x00\x00\x00\x00\x00\x00\x80\x00\x1fML\xff', 0x3a, './file2'}, 0xe5) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x4, 0x3}, 0x10) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) munmap(&(0x7f000049b000/0x400000)=nil, 0x400000) 3.361891074s ago: executing program 6 (id=6039): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000200), 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000400), 0x8) listen(r2, 0xc) listen(r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000580)={r5}, &(0x7f0000000640)=0x8) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) lgetxattr(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 3.247740358s ago: executing program 2 (id=6040): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x3a8, 0x208, 0x3a8, 0x208, 0x0, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@ipv6={@mcast2, @loopback, [0xffffffff, 0x0, 0xff000000, 0xff], [0x0, 0xffffffff, 0x0, 0xff000000], 'team_slave_0\x00', 'bond0\x00', {0xff}, {0xff}, 0x8, 0x3, 0x3, 0x78}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xc, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', 0x0, &(0x7f0000001380)=ANY=[], 0x835, 0x0) unshare(0x2c020400) socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r3, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) creat(&(0x7f0000000280)='./file0\x00', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 3.061543874s ago: executing program 6 (id=6041): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x158, 0x18c, 0x203, 0x0, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {0xff}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xa8, 0xf0, 0x0, {0x1000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000500)=r1) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2b, 0x1, 0x6, 0x0, 0x0, 0x5, 0xb42a9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={&(0x7f0000000340)}, 0x214, 0x0, 0x43a1bd76, 0x6, 0xa, 0x6, 0x2, 0x0, 0x8000, 0x0, 0x200b}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x40}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0xd, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x2000}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x9) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x64) 1.309587959s ago: executing program 2 (id=6042): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000fefeffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001ac0), &(0x7f0000002b00)=0x8) 1.080492336s ago: executing program 5 (id=6043): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x4c, r6, 0x1, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xd49920d35251cf46}, 0x4000040) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x92}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0xa888, r4, 0x40003e}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)="82", 0x1}], 0x1}, 0x80004) 1.079756736s ago: executing program 2 (id=6044): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x2, 0x1946}, 0x1c4a, 0x0, 0x0, 0x8, 0x7fff, 0x7ffeffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000080)=""/109, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvfrom(r2, 0x0, 0x0, 0x42, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x0, 0x6, 0x1) sendmsg$NFT_BATCH(r1, 0x0, 0x4028800) socket(0x11, 0x800000003, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0431a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$eJzs3LtvHMUfAPDvrl+/X54GAiQhAkOEsHjYsRMgBQ0IJIogQFAEqIztRFGcGMVGwlGUGIRCg4QiQQ2USPwFdDQIqJCQqKBHQRGkSUAUh/ZuNzmvffEj5zsn9/lIZ8/c7N7M7Ozszs74HEDHGsh+JBFbIuLXiNheiy7cYKD26+rlM+N/Xz4znkSl8tqfETEfceXymfFi02K/zXlkMI1IP0zyTBaamTt9fGxqavJUHh+ePfHO8Mzc6SeOnRg7Onl08uTowYMH9o88/dTok02pZ1avK7vPTu/Z9eIbF14aP3zh7R++zsq7JU+vr8ea9C5+ayCr+F+VqnLaw/H/m8puo9laF06621gQVqUrIrLm6sn6f6VSOVeXtj1e+GCZ3Tevc/GAdZTdm/qWeD+/L85XGkpumArcCpJodwmA9iju99nzb/Fq4fCj7S49W3sAyup9NX/VUrojzbfpKT3fNtNARBye/+fz7BXNmIcAAFjGx+OfHYrHlxr/pXFPLfBH9mNbvobSHxF3RMSdEXFXROyIiLsjqtveGxE7V5Jp3QJBeWlo8fgnvVjapKmrC9n475l8bWvh+K8Y/UV/Vx7bWq1/T3Lk2NTkvvyYDEZPXxYfuUEe3z7/8yeN0urHf9kry78YC+bluNhdmqCbGJsdqw5Km+DS+xG7u+PfSqVSqn9y7UAnEbErInav7qO3FYFjj361p9FGy9d/0cdd14QzofJlxCO19p+PUv0LyeL1yd6t19cnh/8XU5P7houzYrEffzr/SqP8V17/9ZG1/6aF53+e8sVcHuh/q369diYarFxuaZjH+d8+avhMs9bzvzd5vXo9KpZd3xubnT01EtGbHKrGF7w/en3fIl5sn9V/cG9EZHlU61/smVavcZG3/30RsSdfL7s/Ih7Iy/5gRDwUEXsb1j7i++cap22E9p+oa/8kyuf/zrO130X7z6060HX8u28a5b+y9j9QDQ3m71Svf8tYaQHXfuQAAADg1pFWZ26SdOhaOE2Hhmp/2LsjNqVT0zOzjx2ZfvfkRG2Gpz960mKma3vdfOhIMp9/Yi0+ms8VF+n783njT7uiGh8an56aaHPdodNtbtD/M793tbt0wLpbah1tdIkvtAG3n3L/TxdGz73cysIALeX72tC5lun/aavKAbSe+z90rqX6/7lS3FoA3J7c/6Fz6f/QufR/6Fyl/t8Vv7SrJEALreHr/AIbJvDq0Gr26otm5h7pBjkI5UDx70nqklb+/yBuGOi7+RK+eZPFSKNVB7PNFyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAm+S8AAP//i1LmAQ==") unlinkat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=0x64010101, 0xb, 0x10}}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x10, 0x700, 0x4000000, 0x6, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffd, 0x0, 0x1, 0x4, 0x0, @loopback, @rand_addr=0x64010100}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4044801) pipe2$9p(&(0x7f0000000080), 0x4000) gettid() keyctl$link(0x8, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000140)={0x1, 0x7d, 0x5, 0x80000000, 0x9, "f8c7529a4de62d92faf888c4e85e27a6b64d01"}) rename(0x0, 0x0) 893.648502ms ago: executing program 2 (id=6045): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = gettid() ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x5a0}], 0x1, 0x0, 0x0, 0x0) tkill(r7, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000840}, 0x40) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x258, 0x3a8, 0x3a8, 0x258, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0x118, 0x160, 0x700, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x400, 0x1c, 0xfffffff9, 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0xfffd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r9, &(0x7f0000000400)={0x24, @long={0x3, 0x2}}, 0x14) 873.569493ms ago: executing program 3 (id=6046): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x1ff) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr', 0xfffffffffffffe8c) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a513f304aa20647413573091b4f1", 0xe}, {&(0x7f00000003c0)="a3aadf27d4097562d3e93c7e20a8dd978df98287d4a172e11f49093373c5b28c6487649b74a293dbe4be1f54f28afdf351893ce556a63f078aaa9b3723fc14ff02fe4c6f8875b962e747d545b50d69d4d8382d38b7952c5d522d40de406130bfc632259fc97f4fb6d4", 0x69}, {&(0x7f0000000640)="7a7881cb86185f895aae7f897da575b56f6ad57d1ebcffe23733458643542a2492c68f38f8225af4a5c35d", 0x2b}], 0x3}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x1cf}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet_sctp(0x2, 0x5, 0x84) r3 = epoll_create1(0x80000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xe000001a}) pselect6(0x40, &(0x7f0000000100)={0x9, 0x4, 0x1, 0x100000000000000, 0x800, 0x0, 0x2002, 0x2}, 0x0, 0x0, 0x0, 0x0) 775.607696ms ago: executing program 5 (id=6047): pipe(&(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x3, 0x4, 0x0, 0x700, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfe}]}, 0x20}, 0x1, 0x7}, 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000180)="813b0bb4a3ae773668e576fc3717b0c868b2", 0x12}, {&(0x7f0000000f80)="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", 0xfef}], 0x2}}], 0x1, 0x88880) r2 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x3, 0x9, 0x46, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x40, 0x2, 0x9}}) 718.832288ms ago: executing program 4 (id=6048): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}]}]}, 0xa0}}, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000a80)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)="e46e79d8b81d9d8b7f25576674acd68cf732ce38b2520788cdd89cfbd7c0eef909ef0bd479b3b2a22754c0b826c08b14e16ce9b09e095514268cb3323581ef16cacd11b7cef4023f0e24f47eeb9c6884886111fbe110b590f7561644ab56d00e1235c3387a6ce258f6cef333ea96b58b67ace1592405792cc4162302b6c27b2e3a5fbe43ca6e5335ee925fbbc6a9143ded7188b6bea3", 0x96}, {&(0x7f00000000c0)="144000f9d7221cf299b36e4325b796f32aac64df5f", 0x15}, {&(0x7f0000000100)="76a33651b7f291ae512054cad28717f6d299908ff22096b1482718bc1cccd886d3b95c720b808e27d7945a9095da8cecc8ff5a882edd30a292ddb4938019c03c9da106fc914072bd81ee9e7825db1c86249f650f6b90ef956cac41b54cdd1c6f5ce6d0da4ded5d2a3688ac4afc3c382d39ea9850b48d796fac40769335e3b062a08517a9dcd26ae32e974fb96bf3995f8059e5d94bd3cf319374023fed1180dddc6ac287", 0xa4}, {&(0x7f00000001c0)="51f0e2841d9d6a9453c1bd223d07cfda6ff7e067fc2abd1c0023c556b502602601ca9b78c1b355b9394ef332aa9ab9e67d706c1c3063488beeb50d529e922dec287c53c8a95a93d10cbf3dca560476dbc8691e789d0bdc5bfac548224284aebbd2d2d51e83ba7b4726e912c8e2a31e8a1f9ffafa4dca6da3201105d7e1680dab15b0d243c277ed0d6ab4672cefb9e2ad1cf4e3ddf9044041558efaa3429970bb8da066bdd26df8651c996c86b4efe397be1c35a1cdac0edac744d4bf729a566aaa2d5acf8f20f522db9edea09e7dbf87de24a3b92cead5794c72b3a43a7c6ed5", 0xe0}, {&(0x7f00000003c0)="abb53d47dfd71dc94833a3a97a861a7070ef04cc077bd903120f5a9098803ed6a8d2da84f5ef56b422df24ecf506a9575630f42962c721fa707545909cb20bf3b728ea24c60b0bf73f0968a4877bc283c1384dc7362523ff923cffafdf7331a3a19d20791359ff6cdb47a1d23c101cfa3e6511de1c321ebb1eda0b946d31deadcace6d19ef90bdfdc38e25dda48ac605bfb53946e2f4084337ce5bd0e3a143a2b0bcc8f8a802de55cf46349dfc3e746b98edd7b5da7ff26a26d0e3bef8c15cf5dcb51b2033da09fc3ec9fa3064e53a05451c03989cdbc0cfbd3ea68091e9de71ff7455c405ad61d563b1923107b2d24617eb5cf87c", 0xf5}, {&(0x7f00000004c0)="51ab1e0ce65e727f344f0677c2414ccc3cd318ac106736a6882ccffd847d7824c6d9731666fb74b8e895ca21532c1b3e137ea04a26052c808cf5b0f7f351d5268f70cd81172b8e55a1536c2d579cb1ba4b2403bf0049f38287ed0b9a86679023a01cdcd288b612113c2d2ce727b77e08d9dd0fcee072e733e28eaea157efc4c2f33cbd81232df3a018dbcfa631def041f926aae503651146a9f48b8a19125613b3c5ef4bde6e253ec7730af28031e73aeed287414d530d5fd3140554e65d0f31f3627420c679913c14f280a8c19abcbcc02a46be8661e0d592e791771af8232c3fc277b50336bb598800984abf86ed88b2615d319f31e4d9bec9", 0xfa}, {&(0x7f0000000680)="16b238b6cbbf3e46b78515098fd96963305dc0ea0a8dcc29db414f79388f47cc503cef0fd643d43ab0cdf378f624341a1de9fed8b5bc0bd58330168695a3a5e89800dbb1add40af4535ffb10acebd3d3922f76c50d2f54603ccf48818c28e67ac94f56f5c792d818f13e9e37c434eb71a430d85644c55659a326820040fa346301bb9117346ea84e1f499006bd12a390ada4e7a11729b388cc8449d00d05316d53d860b63fb646980f58c96e94195295250a951d1b6a77c6a0f1e777143b4117a3307977ed8167b47ef7affdf38e18ade5caeb799534b031e274cfa126d19cdadf56db97cb", 0xe5}], 0x7, &(0x7f0000000800)=[{0x108, 0x10f, 0x8, "e7bb649f1b40c93c7b0ec2477b3fc7ca25570d3240d2e3d3959687c28afbc46b817fea69bb7cba231d02e044b3e8559a8391cdc8868e85d01e049559c321d64c7ab80906a8ba75b513107b8ec010dbeda63d7f354ef4b4f4308bdc5aa852496d648c43dfdcbdc69a77e66da567c9678d8021e31916b2d2bc03978703ea27c6958b290d74a33f4e98c7ca07c2b968e9c8f6b2c95a2b52ce5c0f17ca614d607e40ce10b87e94ad7aa0d586b7b506f566d333576f9941de1622259d3d3a5ccd1e0d2485b9feb6908b91dfb67a2e9fb92648abb2f9eef32dd9b22d15a4fb62f996ab0a5786bb61da9cb2d93dab94e50772a7bd28361758"}, {0x58, 0x88, 0x3b6c, "b1c31a02abb99f308a1a945eeca9acaab07e8a650803ee18b4c7ad2702b8f7df4f7f94e043a6a99bdba9e70bf65fe4f30b2f350df638108288064ea5125baed78c"}, {0xd0, 0x101, 0x5, "45028c3d30bf09de75ce3e14a9c64e47fe639f089ab0d57fd88db3fa6dd440bf058223304c81259442dca307bfd608972628778aafb042f1f422353c27ced03a63b6a4616de2af540c4211bdef3bddd751e8a1ab6ed530af83e5e2a5bb704ae5615af17ce4c272e80d76b181718b889824dc984086c3fa7dae5ea3b2c523b5251d7402eb179117a8cf29c9a3eb65a044e9ff9fef77504796545bb26e0fd85e64b428c33ec52f0a81232db997504f2592ab5949d551e99f24626e53"}], 0x230}, 0x800) 691.336369ms ago: executing program 4 (id=6049): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4028800) dup(0xffffffffffffffff) socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x840) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x64}}, 0x4800) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f0000000840), 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='bic', 0x3) shutdown(r1, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$eJzs3ctrW1caAPDvyvJjnGTsgYFJZmUYmDGEyOOMJ5mBLlK6KIUGAu26iZEVk1q2giWH2BjSUArdFNrQRaHdZJ226a7bPrbtv9BuSikJaeuEJnRRXK4esRxLjpzYchP/fnCtc+7D53z3ce6R7kEKYM8aSf9kIg5FxNtJxFB9fhIRvdVUNuJEbb27K8v5dEpidfWln5LqOndWlvPRtE0MDsa+euZgRHzxRsThzMZyy4tLM5PFYmG+nh+rzJ4fKy8uHTk3OzldmC7MHRufmDh6/L/H+7cv1l++Xtp/853n//XxiV9f/9v1t75M4kTsry9rjmO7jMRIbZ9Eb7oL13luuwvbZcluV4BHkl6aPbWrPA7FUDb6Ot82u5MVAwB2zKWIWAUA9pjE/R8A9pjG5wB3Vpbz6bR6aXc/j+i2W89GxEAt/sbzzdqSbP2Z3UD1OejgnWTd844kIoa3ofyRiPjg01c+TKfYoeeQAK28djkizgyPNNr/tfYn2TBmoabzARn/biQ2GRww8kBe+wfd81na//nfWv9v7frL3O//RIv+T3+La/dRjMT6EScbr//MjW0opq20//dM79rYtrtN8dcN99RzB6p9vt7k7LliIW3b/hwRo9Hbn+bHNylj9PZvt9fNaIq4uf/385VXr6Xlp69ra2RuZB9ocqcmK5OPG3fDrcsRf8+2ij+5f/yTNv3fUx2W8cL/33y/3bI0/jTexrQ+/p0fVbZ6NeKf0Tr+hmSz8YnHxqqnw1jjpGjhk+/eG2xXfvPxT6e0/Np7gQPbH2wL6fEf3Dz+4aR5vGZ562V8dXXo83bL2sff0Pr870terqYbl9LFyUplfjyiL3lx4/yja9s28o310/hH/9H6+t/s/E/fE57pMP7szR8/emj8jRkb4q8b6LCwLUrjn9rS8d964vrdmZ525Xd2/CfSRM9ofU4n7d9m9eprWueRdxwAAAAAAAAAAAAAAAAAAAAAAAAAbEEmIvZHksndT2cyuVxUf8P7rzGYKZbKlcNnSwtzU1H9rezh6M00vupyqOn7UMfr34ffyB99IP+fiPhLRLzb/6dqPpcvFad2O3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNvX5vf/Uz/0117v7WoNAYAdMfDQNW4XulIRAKBrHn7/j4j+na8HANA9Hd3/AYCnivs/AOw97v8AsPcMRGR3uw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA81U6dPJlOq/dWlvNpfurC4sJM6cKRqUJ5Jje7kM/lS/Pnc9Ol0nSxkMuXZps2/abV/yuWSucnYm7h4lilUK6MlReXTs+WFuYqp8/NTk4XThd6uxYZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHSuvLg0M1ksFubriWuDEevndCnRU69QVwt9IhOrQ7U99Uepz84nvj/y7cHN1rmy4TSWeOzEbrZKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+O3wMAAP//mc0dAw==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r3, r3, 0x0, 0xe3aa6ea) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2}, 0xec}, {{0x0, 0x0, 0x0}, 0xe8c0}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 600.415302ms ago: executing program 5 (id=6050): unshare(0x6a040000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x158, 0x18c, 0x203, 0x0, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {0xff}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xa8, 0xf0, 0x0, {0x1000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000500)=r1) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2b, 0x1, 0x6, 0x0, 0x0, 0x5, 0xb42a9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={&(0x7f0000000340)}, 0x214, 0x0, 0x43a1bd76, 0x6, 0xa, 0x6, 0x2, 0x0, 0x8000, 0x0, 0x200b}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0xd, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x2000}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x9) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x64) 491.553145ms ago: executing program 6 (id=6051): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x7fff) sendfile(r1, r0, 0x0, 0x7ffff000) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x54, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) getpriority(0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00000000002119078ac1414000a010100000000f7259c90780100000000000000f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf15f8feb1a7a8e23043b8a465b1ed5bf8bc91307c7193f7edd1efc4742dc481e6f57f901948177bcc5dea4029ba4683a6bdcd7a1a23ee304d79621e0e5c97af731853eecf8c31eb75e0d9896f5f2897a5bd69475dc0a5f713bddc5f9fbba1aa5f19e3e15428f0fbd5913c373609afb2e68b21f0700"/254], 0x0) 0s ago: executing program 2 (id=6052): r0 = eventfd(0x2) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) lseek(r0, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() mount$nfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x0, &(0x7f0000000000)={[{'\x02\x00\x00\x00)%'}], [{@uid_lt={'uid<', 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x02\x00\x00\x00)%'}}]}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xe, 0xfd5}, 0x4580, 0x0, 0x800000, 0x2, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000000400), 0x4) sendmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, &(0x7f0000000240)=ANY=[], 0x18, 0x200040c0}, 0xa4ff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) setpgid(r3, r6) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x1}, 0x0) r8 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r8, &(0x7f0000f62000/0x1000)=nil, 0x7000) kernel console output (not intermixed with test programs): or pid=22353 comm="syz.6.5459" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 894.942054][T22386] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5470'. [ 895.098818][T22394] loop6: detected capacity change from 0 to 512 [ 895.115978][T22394] EXT4-fs: Ignoring removed bh option [ 895.128420][T22394] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 895.138175][T22394] EXT4-fs (loop6): 1 truncate cleaned up [ 895.146728][ T28] audit: type=1400 audit(2000000589.009:2784): avc: denied { write } for pid=22393 comm="syz.6.5474" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 895.262598][T22397] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5475'. [ 895.386080][T22402] loop6: detected capacity change from 0 to 1024 [ 895.393673][T22402] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 895.428222][ T28] audit: type=1400 audit(2000000589.289:2785): avc: denied { write } for pid=22401 comm="syz.6.5477" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 895.603046][T22414] loop5: detected capacity change from 0 to 512 [ 895.617632][T22414] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 895.642847][T22414] EXT4-fs (loop5): 1 truncate cleaned up [ 895.686528][ T28] audit: type=1400 audit(2000000589.549:2786): avc: denied { write } for pid=22413 comm="syz.5.5481" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 895.773724][T22423] netlink: 'syz.2.5483': attribute type 24 has an invalid length. [ 895.788764][T22406] loop3: detected capacity change from 0 to 2048 [ 895.799962][T22423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5483'. [ 895.809166][T22423] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 895.910784][T22432] loop5: detected capacity change from 0 to 512 [ 895.917502][T22432] EXT4-fs: Ignoring removed bh option [ 895.926343][T22432] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 895.936042][T22432] EXT4-fs (loop5): 1 truncate cleaned up [ 895.945842][ T28] audit: type=1400 audit(2000000589.809:2787): avc: denied { write } for pid=22431 comm="syz.5.5486" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 896.511869][T12799] EXT4-fs unmount: 17 callbacks suppressed [ 896.511886][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.577401][T22346] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.590781][T22346] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.609883][T22445] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5491'. [ 897.075411][T22346] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.084374][T22346] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.196737][T22460] netlink: 'syz.6.5495': attribute type 1 has an invalid length. [ 897.221858][T22460] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.5495'. [ 897.377624][T22463] loop3: detected capacity change from 0 to 1024 [ 897.404133][T22463] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 897.453284][T22463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.938276][T22473] loop6: detected capacity change from 0 to 512 [ 897.955601][T22473] EXT4-fs: Ignoring removed bh option [ 897.973633][T22473] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 897.983567][T22473] EXT4-fs (loop6): 1 truncate cleaned up [ 897.995156][T22473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.034321][ T28] audit: type=1400 audit(2000000591.889:2788): avc: denied { write } for pid=22472 comm="syz.6.5497" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 898.071307][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.161082][T22455] loop4: detected capacity change from 0 to 512 [ 898.301901][T22481] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5499'. [ 898.324361][T22455] EXT4-fs: Ignoring removed bh option [ 898.381143][T22489] hub 5-0:1.0: USB hub found [ 898.402911][T22489] hub 5-0:1.0: 8 ports detected [ 898.491255][ T28] audit: type=1400 audit(2000000592.349:2789): avc: denied { write } for pid=22480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 898.558111][T22455] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 898.630509][ T28] audit: type=1400 audit(2000000592.489:2790): avc: denied { write } for pid=22497 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 898.729331][ T3021] veth0_vlan: left promiscuous mode [ 898.749477][ T3021] veth0_vlan: entered promiscuous mode [ 898.798298][T22455] EXT4-fs (loop4): 1 truncate cleaned up [ 898.919507][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.049870][T22507] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5505'. [ 899.067123][T22455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 899.260717][ T28] audit: type=1400 audit(2000000593.119:2791): avc: denied { write } for pid=22510 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 899.403931][T22534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5507'. [ 899.503738][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.143995][T22562] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 901.175201][T22562] bond1 (unregistering): Released all slaves [ 901.425199][T22561] loop4: detected capacity change from 0 to 1024 [ 901.508650][T22561] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 901.625075][T22561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 901.796133][T22574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5515'. [ 902.012238][T22578] loop6: detected capacity change from 0 to 128 [ 902.048498][T22578] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c028, mo2=0002] [ 902.078920][T22578] System zones: 1-3, 19-19, 35-36 [ 902.095311][T22578] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 902.138875][T22578] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 902.168597][T22578] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.5517: No space for directory leaf checksum. Please run e2fsck -D. [ 902.232365][T22584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5518'. [ 902.243179][T22579] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.5517: No space for directory leaf checksum. Please run e2fsck -D. [ 902.273407][T22585] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 902.306339][T22578] EXT4-fs error (device loop6): htree_dirblock_to_tree:1051: inode #2: comm syz.6.5517: Directory block failed checksum [ 902.356706][T22579] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.5517: checksumming directory block 0 [ 902.416159][T22589] xt_cluster: node mask cannot exceed total number of nodes [ 902.449543][T22578] EXT4-fs (loop6): Remounting filesystem read-only [ 902.469178][T22591] gre0 speed is unknown, defaulting to 1000 [ 902.693739][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.780884][T17728] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 902.984327][ T8522] IPVS: starting estimator thread 0... [ 903.389722][T22612] IPVS: using max 2688 ests per chain, 134400 per kthread [ 903.471309][T22596] loop4: detected capacity change from 0 to 2048 [ 903.581158][T22596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.845880][T22624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5528'. [ 904.001696][T22629] loop3: detected capacity change from 0 to 2048 [ 904.016933][T22629] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 1282)! [ 904.055647][T22629] EXT4-fs (loop3): group descriptors corrupted! [ 904.919368][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.210321][T22635] loop6: detected capacity change from 0 to 1024 [ 905.251967][T22635] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 905.320626][T22635] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 905.547713][T22634] gre0 speed is unknown, defaulting to 1000 [ 907.110287][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.328955][T22653] gre0 speed is unknown, defaulting to 1000 [ 907.870986][T22667] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5539'. [ 907.943894][T22669] loop4: detected capacity change from 0 to 2048 [ 908.000538][T22669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.185088][T22674] loop3: detected capacity change from 0 to 1024 [ 908.192884][T22674] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 908.217500][T22674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 908.231152][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 908.231173][ T28] audit: type=1400 audit(2000000602.089:2793): avc: denied { write } for pid=22673 comm="syz.3.5540" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 908.341576][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.429940][T22686] gre0 speed is unknown, defaulting to 1000 [ 908.700723][T22692] loop5: detected capacity change from 0 to 1024 [ 908.730639][T22692] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 908.810461][T22692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 909.379745][T22702] loop3: detected capacity change from 0 to 2048 [ 909.406448][T22702] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 1282)! [ 909.447821][T22702] EXT4-fs (loop3): group descriptors corrupted! [ 910.302827][T22708] loop6: detected capacity change from 0 to 1024 [ 910.372960][T22708] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 910.405156][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.467152][T22708] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.530088][ T28] audit: type=1400 audit(2000000604.369:2794): avc: denied { write } for pid=22704 comm="syz.6.5548" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 910.729213][T22653] Set syz1 is full, maxelem 65536 reached [ 910.936649][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.556910][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.407456][T22737] loop3: detected capacity change from 0 to 1024 [ 914.539123][ T28] audit: type=1400 audit(2000000608.399:2795): avc: denied { write } for pid=22730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.569024][T22746] loop6: detected capacity change from 0 to 1024 [ 915.108215][T22749] openvswitch: netlink: Missing key (keys=1000040, expected=200000) [ 915.225173][T22737] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 915.489516][T22746] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 915.528632][T22737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.533594][ T28] audit: type=1400 audit(2000000608.999:2796): avc: denied { write } for pid=22750 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.882572][T22746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.898335][ T28] audit: type=1400 audit(2000000609.759:2797): avc: denied { write } for pid=22743 comm="syz.6.5554" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 915.943125][T22763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5558'. [ 915.957692][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.027146][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.237414][ T28] audit: type=1400 audit(2000000610.099:2798): avc: denied { write } for pid=22767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 916.317459][ T28] audit: type=1400 audit(2000000610.179:2799): avc: denied { write } for pid=22779 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 916.468709][T22766] loop5: detected capacity change from 0 to 1024 [ 916.504649][T22766] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 916.625697][T22790] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5560'. [ 916.656037][T22790] hub 5-0:1.0: USB hub found [ 916.677630][T22793] loop3: detected capacity change from 0 to 512 [ 916.679988][T22766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 916.703553][T22790] hub 5-0:1.0: 8 ports detected [ 916.714093][T22793] EXT4-fs: Ignoring removed bh option [ 916.755176][T22793] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 916.792659][T22793] EXT4-fs (loop3): 1 truncate cleaned up [ 916.807442][T22793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.831549][ T28] audit: type=1400 audit(2000000610.689:2800): avc: denied { write } for pid=22755 comm="syz.5.5557" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 916.903879][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.077481][T22802] gre0 speed is unknown, defaulting to 1000 [ 917.364375][T22811] loop3: detected capacity change from 0 to 512 [ 917.377564][T22811] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 917.398129][T22811] EXT4-fs (loop3): 1 truncate cleaned up [ 917.410687][T22811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 917.442842][ T28] audit: type=1400 audit(2000000611.299:2801): avc: denied { write } for pid=22809 comm="syz.3.5566" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 917.527849][ T28] audit: type=1400 audit(2000000611.299:2802): avc: denied { watch } for pid=22809 comm="syz.3.5566" path="/535/bus" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 917.550441][ T28] audit: type=1400 audit(2000000611.299:2803): avc: denied { write } for pid=22809 comm="syz.3.5566" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 918.829806][T22825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5569'. [ 919.251811][T22827] uprobe: syz.2.5570:22827 failed to unregister, leaking uprobe [ 919.999711][T22829] loop4: detected capacity change from 0 to 1024 [ 920.009246][T22829] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 920.041682][T22829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.057317][ T28] audit: type=1400 audit(2000000613.919:2804): avc: denied { write } for pid=22828 comm="syz.4.5571" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 920.471547][ T3415] IPVS: starting estimator thread 0... [ 920.471856][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.486510][T22835] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 920.565213][T22838] IPVS: using max 2736 ests per chain, 136800 per kthread [ 920.797883][T22834] Process accounting resumed [ 920.933198][T22849] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5576'. [ 920.978150][T22851] gre0 speed is unknown, defaulting to 1000 [ 921.573290][T22861] gre0 speed is unknown, defaulting to 1000 [ 921.624529][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.656492][T22863] loop6: detected capacity change from 0 to 512 [ 921.684736][T22863] EXT4-fs (loop6): orphan cleanup on readonly fs [ 921.713481][T22863] Quota error (device loop6): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144). [ 921.726561][T22865] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5581'. [ 921.743193][T22865] hub 5-0:1.0: USB hub found [ 921.749129][T22811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.760569][T22865] hub 5-0:1.0: 8 ports detected [ 921.764075][T22863] EXT4-fs warning (device loop6): ext4_enable_quotas:7267: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 921.814640][T22863] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 921.846587][T22863] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.5582: couldn't read orphan inode 26 (err -116) [ 921.894793][T22863] loop6: lost filesystem error report for type 5 error -116 [ 921.895044][T22863] EXT4-fs (loop6): Remounting filesystem read-only [ 921.908950][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 921.908969][ C1] EXT4-fs (loop6): initial error at time 2000000615: ext4_orphan_get:1404 [ 921.908995][ C1] EXT4-fs (loop6): last error at time 2000000615: ext4_orphan_get:1404 [ 922.010361][T22863] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 922.058507][T22871] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5583'. [ 922.092014][T22871] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.5583' sets config #1 [ 922.207846][T22861] Cannot find add_set index 0 as target [ 922.368779][T22875] loop5: detected capacity change from 0 to 1024 [ 922.381061][T22875] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 922.408292][T22875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 922.439142][ T28] audit: type=1400 audit(2000000616.279:2805): avc: denied { write } for pid=22874 comm="syz.5.5585" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 922.611609][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.683739][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.694857][T22880] x_tables: duplicate underflow at hook 1 [ 922.818866][T22893] gre0 speed is unknown, defaulting to 1000 [ 922.858828][T22890] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5588'. [ 922.905719][T22894] tipc: Enabling of bearer rejected, failed to enable media [ 923.212465][T22911] SET target dimension over the limit! [ 923.239824][ T28] audit: type=1400 audit(2000000617.099:2806): avc: denied { create } for pid=22914 comm="syz.6.5597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 923.467668][T22915] loop6: detected capacity change from 0 to 764 [ 924.163422][T22938] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5606'. [ 924.169284][T22940] gre0 speed is unknown, defaulting to 1000 [ 924.434268][T22951] netlink: 'syz.3.5610': attribute type 21 has an invalid length. [ 924.475291][T22947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5609'. [ 924.571248][T22956] tipc: Enabling of bearer rejected, already enabled [ 924.704960][T22958] loop5: detected capacity change from 0 to 1024 [ 924.712848][ T28] audit: type=1400 audit(2000000618.569:2807): avc: denied { unmount } for pid=13132 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 924.745104][T22958] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 924.851124][T22958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 924.974008][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.987285][ T28] audit: type=1400 audit(2000000618.729:2808): avc: denied { write } for pid=22957 comm="syz.5.5612" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 925.178105][T22973] loop5: detected capacity change from 0 to 256 [ 925.809451][T22973] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 925.848078][T22973] FAT-fs (loop5): Filesystem has been set read-only [ 925.978879][ T28] audit: type=1400 audit(2000000619.839:2809): avc: denied { ioctl } for pid=22979 comm="syz.3.5617" path="socket:[78292]" dev="sockfs" ino=78292 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 926.146157][T22977] loop4: detected capacity change from 0 to 512 [ 926.153302][T22977] EXT4-fs: Ignoring removed orlov option [ 926.159115][T22977] EXT4-fs: Ignoring removed nomblk_io_submit option [ 926.165845][T22977] EXT4-fs: Ignoring removed nomblk_io_submit option [ 926.174082][T22977] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 926.190081][T22977] EXT4-fs (loop4): 1 truncate cleaned up [ 926.196832][T22977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.417637][ T28] audit: type=1400 audit(2000000619.869:2810): avc: denied { write } for pid=22979 comm="syz.3.5617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 926.645691][T22992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5619'. [ 926.662024][T22993] gre0 speed is unknown, defaulting to 1000 [ 927.133369][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.609281][T23000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5622'. [ 927.649357][T23009] hub 5-0:1.0: USB hub found [ 927.683244][T23009] hub 5-0:1.0: 8 ports detected [ 927.937218][T23018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=23018 comm=syz.6.5627 [ 928.076111][T23018] netlink: 'syz.6.5627': attribute type 6 has an invalid length. [ 928.097064][T23018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5627'. [ 928.701652][ T28] audit: type=1400 audit(2000000622.559:2811): avc: denied { create } for pid=23032 comm="syz.2.5631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 928.985253][T23044] gre0 speed is unknown, defaulting to 1000 [ 929.167385][T23047] loop4: detected capacity change from 0 to 1024 [ 929.855661][T23049] loop5: detected capacity change from 0 to 1024 [ 930.035040][T23047] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 930.052565][T23049] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 930.523379][T23049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.618627][ T28] audit: type=1400 audit(2000000624.449:2812): avc: denied { write } for pid=23045 comm="syz.5.5635" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 930.669449][T23047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 931.162295][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.184324][T23059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5636'. [ 931.737125][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.795420][ T28] audit: type=1400 audit(2000000625.649:2813): avc: denied { create } for pid=23074 comm="syz.5.5641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 931.849596][T23077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5637'. [ 932.572796][T23094] gre0 speed is unknown, defaulting to 1000 [ 932.804442][T23099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5647'. [ 933.047812][T23109] netlink: 'syz.5.5649': attribute type 10 has an invalid length. [ 933.095992][T23109] bond1: (slave dummy0): Releasing active interface [ 933.120049][T23109] bond1: (slave veth3): making interface the new active one [ 933.165178][T23109] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 933.290738][T23115] x_tables: duplicate underflow at hook 1 [ 933.905040][T23132] loop3: detected capacity change from 0 to 1024 [ 933.930793][T23132] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 933.957811][T23133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5656'. [ 934.030667][T23132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 935.434641][T23147] loop5: detected capacity change from 0 to 1024 [ 935.855434][T23147] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 936.740639][T23156] loop4: detected capacity change from 0 to 2048 [ 937.298265][T23147] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 937.298320][T23147] EXT4-fs: failed to create workqueue [ 937.315882][T23147] EXT4-fs (loop5): mount failed [ 937.727485][T23156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 938.314862][ T28] audit: type=1400 audit(2000000632.159:2814): avc: denied { write } for pid=23152 comm="syz.4.5661" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 938.538635][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.680228][ T28] audit: type=1400 audit(2000000632.539:2815): avc: denied { ioctl } for pid=23155 comm="syz.6.5662" path="socket:[79246]" dev="sockfs" ino=79246 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 938.800045][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.007377][T23174] netlink: 'syz.5.5665': attribute type 1 has an invalid length. [ 940.639267][T23198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5671'. [ 940.662154][T23199] loop5: detected capacity change from 0 to 512 [ 940.702388][T23199] EXT4-fs: Ignoring removed bh option [ 940.722362][T23199] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 940.765578][T23199] EXT4-fs (loop5): 1 truncate cleaned up [ 940.787319][T23199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 940.857803][T23206] gre0 speed is unknown, defaulting to 1000 [ 940.938159][T23208] netlink: 'syz.2.5674': attribute type 1 has an invalid length. [ 941.019858][T23208] netlink: 'syz.2.5674': attribute type 2 has an invalid length. [ 941.054450][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.086872][T23212] loop4: detected capacity change from 0 to 256 [ 941.220003][T23214] gre0 speed is unknown, defaulting to 1000 [ 942.423715][T23227] netlink: 'syz.4.5678': attribute type 1 has an invalid length. [ 942.462129][T23234] loop5: detected capacity change from 0 to 512 [ 942.477295][T23234] EXT4-fs: test_dummy_encryption option not supported [ 942.542353][T23236] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5681'. [ 943.241308][T23252] loop6: detected capacity change from 0 to 256 [ 944.169448][T23258] loop5: detected capacity change from 0 to 1024 [ 944.399738][T23258] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 945.516130][T23265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5689'. [ 946.284697][T23258] EXT4-fs warning (device loop5): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop5. [ 946.614534][T23273] tmpfs: Bad value for 'mpol' [ 946.658554][T23268] gre0 speed is unknown, defaulting to 1000 [ 946.702550][T23273] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 946.752936][T23269] netlink: 'syz.6.5690': attribute type 1 has an invalid length. [ 946.821661][T23269] netlink: 'syz.6.5690': attribute type 2 has an invalid length. [ 946.846807][ T28] audit: type=1400 audit(2000000640.699:2816): avc: denied { name_bind } for pid=23280 comm="syz.2.5694" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 946.961104][T23275] netlink: 'syz.3.5693': attribute type 1 has an invalid length. [ 947.281787][T23294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5698'. [ 947.346091][T23297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5699'. [ 947.757815][T23302] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5701'. [ 948.346918][T23312] loop6: detected capacity change from 0 to 1024 [ 948.365802][T23312] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 948.473275][T23312] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 949.207114][T23306] loop3: detected capacity change from 0 to 512 [ 949.944338][T23319] loop5: detected capacity change from 0 to 1024 [ 950.015692][T23319] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 950.070424][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.181563][T23319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 950.219443][ T28] audit: type=1400 audit(2000000644.069:2817): avc: denied { write } for pid=23316 comm="syz.5.5705" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 950.301164][T23306] EXT4-fs: Ignoring removed bh option [ 950.647357][T23306] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 950.727130][T23306] EXT4-fs (loop3): 1 truncate cleaned up [ 950.864528][T23306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.989912][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.349043][T23333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5709'. [ 951.414716][T23328] Process accounting paused [ 951.460239][T23337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5711'. [ 951.486413][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.577689][T23341] loop6: detected capacity change from 0 to 512 [ 951.614897][T23341] EXT4-fs: Ignoring removed nobh option [ 951.755008][T23343] loop3: detected capacity change from 0 to 1024 [ 951.761076][T23341] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.776249][T23343] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 951.796182][T23341] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 951.809386][T23348] netlink: 'syz.5.5712': attribute type 1 has an invalid length. [ 951.820226][T23343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.833908][ T28] audit: type=1400 audit(2000000645.689:2818): avc: denied { write } for pid=23342 comm="syz.3.5714" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 951.914597][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.944449][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.156024][T23355] loop5: detected capacity change from 0 to 1024 [ 952.171416][T23355] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 952.191246][T23355] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 952.240091][T23355] EXT4-fs error (device loop5): ext4_acquire_dquot:7032: comm syz.5.5717: Failed to acquire dquot type 0 [ 952.255124][T23355] loop5: lost filesystem error report for type 5 error -5 [ 952.264194][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 952.277889][ C0] EXT4-fs (loop5): initial error at time 2000000646: ext4_acquire_dquot:7032 [ 952.286703][ C0] EXT4-fs (loop5): last error at time 2000000646: ext4_acquire_dquot:7032 [ 952.296877][T23355] EXT4-fs (loop5): 1 truncate cleaned up [ 952.353767][T23355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.409460][T23364] gre0 speed is unknown, defaulting to 1000 [ 952.499565][ T28] audit: type=1400 audit(2000000646.359:2819): avc: denied { ioctl } for pid=23354 comm="syz.5.5717" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 953.104990][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.321041][T23376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.482943][T23378] loop6: detected capacity change from 0 to 1024 [ 953.518203][T23378] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 953.592385][T23378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.646207][ T28] audit: type=1400 audit(2000000647.489:2820): avc: denied { write } for pid=23373 comm="syz.6.5722" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 953.733898][T23376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.021499][T23381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.103763][T23381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.260742][T23385] loop3: detected capacity change from 0 to 1024 [ 954.270713][T23385] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 954.288043][T23385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.382205][ T28] audit: type=1400 audit(2000000648.189:2821): avc: denied { write } for pid=23384 comm="syz.3.5725" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 954.404461][T23388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5724'. [ 954.466572][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.571041][T23381] loop5: detected capacity change from 0 to 1024 [ 954.602781][T23381] EXT4-fs: Ignoring removed bh option [ 954.650572][T23381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 954.736233][T23390] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.743430][T23390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.750827][T23390] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.757999][T23390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.777506][ T28] audit: type=1400 audit(2000000648.639:2822): avc: denied { write } for pid=23374 comm="syz.5.5723" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 954.817642][T23364] Set syz1 is full, maxelem 65536 reached [ 954.928447][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.961491][T23390] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 955.541844][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.748053][T23413] loop5: detected capacity change from 0 to 2048 [ 955.813348][T23413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 956.003154][ T28] audit: type=1400 audit(2000000649.729:2823): avc: denied { write } for pid=23410 comm="syz.5.5732" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 956.239516][T23404] loop3: detected capacity change from 0 to 2048 [ 956.472250][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.611223][T23404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 956.614632][T23406] loop6: detected capacity change from 0 to 2048 [ 956.905647][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.949556][T23406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.027866][ T28] audit: type=1400 audit(2000000650.849:2824): avc: denied { write } for pid=23405 comm="syz.6.5731" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 957.095135][T23429] loop3: detected capacity change from 0 to 1024 [ 957.104528][T23429] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 957.130389][T23429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 957.144424][ T28] audit: type=1400 audit(2000000650.999:2825): avc: denied { write } for pid=23428 comm="syz.3.5736" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 957.271629][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.452264][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.852455][T23439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.950055][T23439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.135743][T23441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.281930][T23443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5739'. [ 958.293619][T23441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.361072][T23441] loop6: detected capacity change from 0 to 1024 [ 958.414769][T23441] EXT4-fs: Ignoring removed bh option [ 958.505484][T23441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.588214][ T28] audit: type=1400 audit(2000000652.419:2826): avc: denied { write } for pid=23438 comm="syz.6.5738" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 958.805551][T23456] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5743'. [ 959.185649][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.881225][T23479] loop3: detected capacity change from 0 to 1024 [ 959.934099][T23479] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 959.995240][T23479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.073740][ T28] audit: type=1400 audit(2000000653.899:2827): avc: denied { write } for pid=23471 comm="syz.3.5749" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 960.309254][T23483] loop4: detected capacity change from 0 to 512 [ 960.538684][T23483] EXT4-fs: test_dummy_encryption option not supported [ 961.134820][T23494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5755'. [ 961.178858][T23496] hub 5-0:1.0: USB hub found [ 961.183546][T23496] hub 5-0:1.0: 8 ports detected [ 961.484423][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.522094][T23502] loop3: detected capacity change from 0 to 512 [ 961.548489][T23502] EXT4-fs: Ignoring removed oldalloc option [ 961.682117][T23502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 961.793295][T23502] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 961.900564][ T28] audit: type=1400 audit(2000000655.759:2828): avc: denied { write } for pid=23501 comm="syz.3.5757" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 961.947481][T23502] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:107: comm syz.3.5757: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 962.042260][T23506] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 962.065722][ T28] audit: type=1400 audit(2000000655.899:2829): avc: denied { write } for pid=23501 comm="syz.3.5757" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 962.234797][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.265713][ T28] audit: type=1400 audit(2000000655.899:2830): avc: denied { write } for pid=23501 comm="syz.3.5757" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 962.533858][T23508] loop3: detected capacity change from 0 to 256 [ 962.552653][T23508] vfat: Unknown parameter './file2' [ 963.217208][T23512] random: crng reseeded on system resumption [ 963.493336][T23518] loop5: detected capacity change from 0 to 512 [ 963.515326][T23518] EXT4-fs: Ignoring removed nobh option [ 963.585805][T23518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.626595][T23518] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 963.681865][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.748567][T23529] gre0 speed is unknown, defaulting to 1000 [ 964.053310][T23531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.109683][T23531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.257742][T23537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.362643][T23537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.554461][T23544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.779361][T23543] loop5: detected capacity change from 0 to 2048 [ 964.779539][T23544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.961619][T23531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.987108][T23531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.780917][T23543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 965.951592][T23552] loop3: detected capacity change from 0 to 1024 [ 965.964735][T23552] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 966.016303][T23544] loop6: detected capacity change from 0 to 1024 [ 966.039024][T23544] EXT4-fs: Ignoring removed bh option [ 966.047768][T23552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 966.111910][ T28] audit: type=1400 audit(2000000659.919:2831): avc: denied { write } for pid=23551 comm="syz.3.5771" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 966.175080][T23544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 966.196978][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.281819][ T28] audit: type=1400 audit(2000000660.119:2832): avc: denied { write } for pid=23536 comm="syz.6.5768" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 967.013947][T23564] FAULT_INJECTION: forcing a failure. [ 967.013947][T23564] name failslab, interval 1, probability 0, space 0, times 0 [ 967.045735][T23564] CPU: 1 UID: 0 PID: 23564 Comm: syz.4.5774 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 967.045771][T23564] Tainted: [W]=WARN [ 967.045778][T23564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 967.045793][T23564] Call Trace: [ 967.045801][T23564] [ 967.045811][T23564] __dump_stack+0x1d/0x30 [ 967.045842][T23564] dump_stack_lvl+0x95/0xd0 [ 967.045866][T23564] dump_stack+0x15/0x1b [ 967.045886][T23564] should_fail_ex+0x25e/0x270 [ 967.045912][T23564] should_failslab+0x8c/0xb0 [ 967.045934][T23564] kmem_cache_alloc_noprof+0x66/0x3f0 [ 967.045958][T23564] ? mas_alloc_nodes+0x1a2/0x210 [ 967.046062][T23564] mas_alloc_nodes+0x1a2/0x210 [ 967.046083][T23564] mas_preallocate+0x2ca/0x500 [ 967.046114][T23564] __split_vma+0x240/0x640 [ 967.046152][T23564] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 967.046187][T23564] vma_modify+0xbcc/0xc80 [ 967.046215][T23564] ? vma_modify_flags+0xfc/0x210 [ 967.046250][T23564] vma_modify_flags+0x182/0x210 [ 967.046289][T23564] mprotect_fixup+0x3a2/0x680 [ 967.046327][T23564] do_mprotect_pkey+0x69e/0x950 [ 967.046360][T23564] __x64_sys_mprotect+0x48/0x60 [ 967.046395][T23564] x64_sys_call+0x2768/0x3020 [ 967.046423][T23564] do_syscall_64+0x136/0x3c0 [ 967.046446][T23564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.046473][T23564] RIP: 0033:0x7fc094f4ce59 [ 967.046490][T23564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.046508][T23564] RSP: 002b:00007fc0939a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 967.046529][T23564] RAX: ffffffffffffffda RBX: 00007fc0951c5fa0 RCX: 00007fc094f4ce59 [ 967.046544][T23564] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 967.046560][T23564] RBP: 00007fc0939a7090 R08: 0000000000000000 R09: 0000000000000000 [ 967.046576][T23564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.046600][T23564] R13: 00007fc0951c6038 R14: 00007fc0951c5fa0 R15: 00007ffe6ca25d08 [ 967.046621][T23564] [ 967.292915][T23529] Set syz1 is full, maxelem 65536 reached [ 967.293937][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.351718][T23568] loop6: detected capacity change from 0 to 512 [ 967.369467][T23568] EXT4-fs: Ignoring removed nobh option [ 967.478829][T23568] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 967.556029][T23568] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 967.602843][T23576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5778'. [ 967.625215][T23576] veth1_macvtap: left promiscuous mode [ 967.633287][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.713238][T23580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=23580 comm=syz.6.5780 [ 967.735903][T23580] netlink: 'syz.6.5780': attribute type 6 has an invalid length. [ 967.744062][T23580] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5780'. [ 967.998664][T23582] loop4: detected capacity change from 0 to 2048 [ 968.052612][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.080723][T23582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.377548][T23597] netlink: 'syz.5.5786': attribute type 1 has an invalid length. [ 968.859052][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.636936][T23610] loop5: detected capacity change from 0 to 4096 [ 969.777171][T23610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 969.908919][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.924275][ T28] audit: type=1400 audit(2000000663.689:2833): avc: denied { write } for pid=23608 comm="syz.5.5790" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 970.261731][T23625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5795'. [ 971.148621][T23644] loop6: detected capacity change from 0 to 256 [ 971.387099][T23645] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 971.416858][T23645] FAT-fs (loop6): Filesystem has been set read-only [ 971.491004][T23649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5802'. [ 972.037214][T23655] gre0 speed is unknown, defaulting to 1000 [ 972.579047][T23668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5808'. [ 973.626235][T23673] loop3: detected capacity change from 0 to 1024 [ 974.261572][T23673] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 975.712935][T23673] EXT4-fs warning (device loop3): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop3. [ 975.894263][T23660] loop4: detected capacity change from 0 to 2048 [ 976.388156][T23698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5815'. [ 976.446945][T23700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5816'. [ 976.504001][T23701] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5814'. [ 976.640088][T23705] loop5: detected capacity change from 0 to 512 [ 976.656198][T23705] EXT4-fs: Ignoring removed nobh option [ 976.935884][T23705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.000721][T23705] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 977.028514][T23695] syzkaller0: entered promiscuous mode [ 977.049529][T23695] syzkaller0: entered allmulticast mode [ 977.268673][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.743953][T23718] loop4: detected capacity change from 0 to 512 [ 977.750657][T23718] EXT4-fs: Ignoring removed bh option [ 977.782648][T23718] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 977.916151][T23723] loop5: detected capacity change from 0 to 1024 [ 977.928316][T23718] EXT4-fs (loop4): 1 truncate cleaned up [ 977.951793][T23720] sg_write: data in/out 819164/136 bytes for SCSI command 0x0-- guessing data in; [ 977.951793][T23720] program syz.5.5819 not setting count and/or reply_len properly [ 977.973392][T23718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 978.263448][T23728] macsec0: entered promiscuous mode [ 978.284957][T23728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5822'. [ 978.318526][T23727] macsec0: left promiscuous mode [ 978.542402][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.779944][T23735] loop5: detected capacity change from 0 to 1024 [ 979.001902][T23739] netlink: 'syz.2.5826': attribute type 6 has an invalid length. [ 979.050254][T23739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5826'. [ 979.534091][T23735] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 979.595128][T23735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 979.878240][T23726] loop3: detected capacity change from 0 to 1024 [ 980.152265][T23748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.191958][T23726] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 980.252534][T23748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.394565][T23751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.403163][T23751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.417822][T23751] loop4: detected capacity change from 0 to 1024 [ 980.428557][T23751] EXT4-fs: Ignoring removed bh option [ 980.438858][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.474525][T23726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 980.496080][T23751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.548695][T23757] loop5: detected capacity change from 0 to 256 [ 980.600241][ T28] audit: type=1400 audit(2000000674.449:2835): avc: denied { write } for pid=23716 comm="syz.3.5821" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 980.714065][ T28] audit: type=1400 audit(2000000674.429:2834): avc: denied { write } for pid=23747 comm="syz.4.5828" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 980.739498][T23757] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 980.780794][T23757] FAT-fs (loop5): Filesystem has been set read-only [ 980.908477][T23763] gre0 speed is unknown, defaulting to 1000 [ 981.037619][T23767] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5831'. [ 981.122168][T23761] syzkaller0: entered promiscuous mode [ 981.143950][T23761] syzkaller0: entered allmulticast mode [ 981.288060][T23769] gre0 speed is unknown, defaulting to 1000 [ 981.415163][T23773] loop6: detected capacity change from 0 to 2048 [ 981.497931][T23773] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 982.455640][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.278931][T23769] Set syz1 is full, maxelem 65536 reached [ 983.350383][T23792] hub 5-0:1.0: USB hub found [ 983.375691][T23792] hub 5-0:1.0: 8 ports detected [ 983.893150][T23800] loop5: detected capacity change from 0 to 1024 [ 983.927701][T23800] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 984.049882][T23800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 984.215405][T23769] Process accounting resumed [ 984.497903][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.369899][T23786] loop4: detected capacity change from 0 to 2048 [ 985.425822][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.594532][T23815] loop6: detected capacity change from 0 to 512 [ 985.642023][T23815] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 985.656840][T23815] EXT4-fs (loop6): orphan cleanup on readonly fs [ 985.670745][T23815] EXT4-fs warning (device loop6): ext4_enable_quotas:7267: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 985.716733][T23815] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 985.736261][T23815] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.5845: bad orphan inode 768 [ 985.737337][T23786] EXT4-fs warning (device loop4): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop4. [ 985.770951][T23815] loop6: lost filesystem error report for type 5 error -117 [ 985.771676][T23815] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 985.860691][T23815] netlink: 'syz.6.5845': attribute type 3 has an invalid length. [ 985.888964][T23820] loop5: detected capacity change from 0 to 2048 [ 985.910597][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.948890][T23820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.985087][ T28] audit: type=1400 audit(2000000679.839:2836): avc: denied { write } for pid=23816 comm="syz.5.5846" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 986.422708][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.722859][T23827] loop3: detected capacity change from 0 to 512 [ 986.861834][T23827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 986.887408][T23827] ext4 filesystem being mounted at /587/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 987.040401][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.179423][T23840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5851'. [ 987.306719][T23847] gre0 speed is unknown, defaulting to 1000 [ 988.005475][T23854] loop5: detected capacity change from 0 to 1024 [ 988.108555][T23856] gre0 speed is unknown, defaulting to 1000 [ 988.129966][T23854] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 988.186983][T23854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.450215][T23861] loop3: detected capacity change from 0 to 2048 [ 988.464492][T23856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5856'. [ 988.488926][T23861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 988.505486][T23856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5856'. [ 988.607975][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.813048][T23865] gre0 speed is unknown, defaulting to 1000 [ 989.562916][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.586213][T23847] Set syz1 is full, maxelem 65536 reached [ 989.622035][T23872] loop6: detected capacity change from 0 to 2048 [ 989.641385][ T28] audit: type=1400 audit(2000000683.499:2837): avc: denied { create } for pid=23873 comm="syz.5.5859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 989.680417][T23872] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 989.711545][ T28] audit: type=1400 audit(2000000683.499:2838): avc: denied { ioctl } for pid=23873 comm="syz.5.5859" path="socket:[82090]" dev="sockfs" ino=82090 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 989.980267][T23880] gre0 speed is unknown, defaulting to 1000 [ 990.234559][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.505258][T23869] loop4: detected capacity change from 0 to 2048 [ 990.643673][T23888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.682806][T23865] Set syz1 is full, maxelem 65536 reached [ 990.724869][T23888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.829542][T23896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.860888][T23896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.881470][T23869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.930931][ T28] audit: type=1400 audit(2000000684.779:2839): avc: denied { write } for pid=23868 comm="syz.4.5858" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 991.124173][T23888] loop3: detected capacity change from 0 to 1024 [ 991.214305][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.274647][T17915] IPVS: starting estimator thread 0... [ 991.297964][T23888] EXT4-fs: Ignoring removed bh option [ 991.365405][T23900] IPVS: using max 2688 ests per chain, 134400 per kthread [ 991.512034][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.590571][T23905] netlink: 'syz.6.5867': attribute type 6 has an invalid length. [ 991.606063][T23905] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5867'. [ 991.630977][T23895] loop5: detected capacity change from 0 to 512 [ 991.697827][T23895] EXT4-fs: Ignoring removed bh option [ 991.783548][T23888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 992.059748][T23911] loop6: detected capacity change from 0 to 1024 [ 992.118740][T23911] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 992.204619][T23911] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.404336][ T28] audit: type=1400 audit(2000000686.219:2840): avc: denied { write } for pid=23887 comm="syz.3.5863" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 992.442157][T23895] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 992.671079][T23895] EXT4-fs (loop5): 1 truncate cleaned up [ 992.746758][T23895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 992.913450][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.161913][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.232812][T23924] loop3: detected capacity change from 0 to 128 [ 993.287514][T23924] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 993.317924][T23924] System zones: 1-3, 19-19, 35-36 [ 993.340132][T23924] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 993.399537][T23924] ext4 filesystem being mounted at /593/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 993.485918][T23924] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 993.554605][T23918] loop4: detected capacity change from 0 to 2048 [ 993.581643][T23918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 993.602883][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.728585][T23936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5875'. [ 993.946924][T23940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5876'. [ 994.126485][T23948] loop6: detected capacity change from 0 to 256 [ 994.252902][T23949] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 994.299146][T23949] FAT-fs (loop6): Filesystem has been set read-only [ 994.334499][T23951] netlink: 'syz.2.5878': attribute type 6 has an invalid length. [ 994.361316][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.376596][T23951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5878'. [ 994.633671][T23956] loop6: detected capacity change from 0 to 512 [ 994.673336][T23956] EXT4-fs: Ignoring removed bh option [ 994.715308][T23956] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 994.740897][T23956] EXT4-fs (loop6): 1 truncate cleaned up [ 994.764693][T23956] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 994.963852][T23961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.984598][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.041103][T23961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.134410][T23964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.171748][T23965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.207717][T23965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.217835][T23964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.341841][T23968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.389477][T23968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.510479][T23968] loop6: detected capacity change from 0 to 1024 [ 995.533886][T23968] EXT4-fs: Ignoring removed bh option [ 995.607261][T23967] netlink: 'syz.5.5884': attribute type 1 has an invalid length. [ 995.620389][T23968] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.692762][ T28] audit: type=1400 audit(2000000689.539:2841): avc: denied { write } for pid=23963 comm="syz.6.5883" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 995.715781][T23973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5885'. [ 995.747769][T23961] loop4: detected capacity change from 0 to 1024 [ 995.820501][T23977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5887'. [ 995.901876][T23961] EXT4-fs: Ignoring removed bh option [ 995.959277][T23983] netlink: 'syz.2.5890': attribute type 6 has an invalid length. [ 995.980046][T23983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5890'. [ 996.174211][T23961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 996.239093][T23979] netlink: 'syz.5.5888': attribute type 1 has an invalid length. [ 996.240944][ T28] audit: type=1400 audit(2000000690.079:2842): avc: denied { write } for pid=23960 comm="syz.4.5882" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 996.335110][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.578693][T23999] loop6: detected capacity change from 0 to 512 [ 996.604725][T23999] EXT4-fs: Ignoring removed bh option [ 996.627543][T23999] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 996.658897][T23999] EXT4-fs (loop6): 1 truncate cleaned up [ 996.665103][T23999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 996.759352][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.826726][T24003] gre0 speed is unknown, defaulting to 1000 [ 996.898609][T23998] loop5: detected capacity change from 0 to 2048 [ 996.938283][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.949537][T23998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 997.103570][T24014] gre0 speed is unknown, defaulting to 1000 [ 997.116293][T24012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5897'. [ 997.277154][T12799] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 997.333570][T24016] netlink: 'syz.2.5896': attribute type 1 has an invalid length. [ 997.404797][T24021] sctp: [Deprecated]: syz.6.5900 (pid 24021) Use of int in max_burst socket option deprecated. [ 997.404797][T24021] Use struct sctp_assoc_value instead [ 997.440388][T24022] loop3: detected capacity change from 0 to 2048 [ 997.471536][T23998] Set syz1 is full, maxelem 65536 reached [ 997.498938][T24022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 997.522045][ T28] audit: type=1400 audit(2000000691.379:2843): avc: denied { write } for pid=24018 comm="syz.3.5899" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 997.623178][T24029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5902'. [ 997.663448][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.705545][T24031] netlink: 'syz.3.5903': attribute type 3 has an invalid length. [ 998.134408][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.271432][T24043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.314168][T24043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.373511][T24043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.407813][T24043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.428205][T24041] loop5: detected capacity change from 0 to 512 [ 998.492662][T24041] EXT4-fs: test_dummy_encryption option not supported [ 998.624799][T24043] loop6: detected capacity change from 0 to 1024 [ 998.670777][T24045] gre0 speed is unknown, defaulting to 1000 [ 998.734909][T24043] EXT4-fs: Ignoring removed bh option [ 998.891192][T24043] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 998.948652][ T28] audit: type=1400 audit(2000000692.789:2844): avc: denied { write } for pid=24042 comm="syz.6.5907" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 999.063110][T24052] loop4: detected capacity change from 0 to 2048 [ 999.079896][T24052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 999.119835][T24059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5911'. [ 999.139132][T24059] team0 (unregistering): left allmulticast mode [ 999.139816][T24062] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5912'. [ 999.145860][T24059] team_slave_0: left allmulticast mode [ 999.145900][T24059] team_slave_1: left allmulticast mode [ 999.178028][T24059] team0 (unregistering): Port device team_slave_0 removed [ 999.189318][T24059] team0 (unregistering): Port device team_slave_1 removed [ 999.649348][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.676302][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.742864][T24073] loop4: detected capacity change from 0 to 512 [ 999.777314][T24073] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 999.811085][T24073] EXT4-fs (loop4): orphan cleanup on readonly fs [ 999.820836][T24073] EXT4-fs warning (device loop4): ext4_enable_quotas:7267: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 999.835754][T24073] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 999.842477][T24073] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.5915: bad orphan inode 768 [ 999.853251][T24073] loop4: lost filesystem error report for type 5 error -117 [ 999.854229][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 999.854984][T24073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 999.861745][ C0] EXT4-fs (loop4): initial error at time 2000000693: ext4_orphan_get:1425 [ 999.893602][ C0] EXT4-fs (loop4): last error at time 2000000693: ext4_orphan_get:1425 [ 999.918140][T24071] netlink: 'syz.6.5914': attribute type 1 has an invalid length. [ 999.933686][T24073] netlink: 'syz.4.5915': attribute type 3 has an invalid length. [ 999.947769][T24080] Option '' to dns_resolver key: bad/missing value [ 1000.074700][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.251452][T24094] loop4: detected capacity change from 0 to 256 [ 1000.267384][T24092] gre0 speed is unknown, defaulting to 1000 [ 1000.299240][T24088] loop6: detected capacity change from 0 to 1024 [ 1000.314749][T24088] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1000.369469][T24088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1000.409939][ T28] audit: type=1400 audit(2000000694.259:2845): avc: denied { write } for pid=24083 comm="syz.6.5918" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1000.503834][T24105] loop5: detected capacity change from 0 to 512 [ 1000.516643][T24105] EXT4-fs: Ignoring removed nobh option [ 1000.518100][T24094] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 1000.537183][T24094] FAT-fs (loop4): Filesystem has been set read-only [ 1000.578042][T24105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1000.596754][T24105] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1000.798607][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.827432][T24117] netlink: 'syz.4.5928': attribute type 1 has an invalid length. [ 1000.930728][T24116] loop3: detected capacity change from 0 to 512 [ 1000.953621][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.014308][T24119] hub 5-0:1.0: USB hub found [ 1001.030183][T24123] loop6: detected capacity change from 0 to 256 [ 1001.033497][T24119] hub 5-0:1.0: 8 ports detected [ 1001.058003][T24116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.106587][T24116] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.159015][T24125] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 1001.175574][ T28] audit: type=1400 audit(2000000695.029:2846): avc: denied { write } for pid=24115 comm="syz.3.5926" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1001.194400][T24125] FAT-fs (loop6): Filesystem has been set read-only [ 1001.220360][ T28] audit: type=1400 audit(2000000695.079:2847): avc: denied { write } for pid=24115 comm="syz.3.5926" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1001.765838][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.906083][T24143] loop5: detected capacity change from 0 to 2048 [ 1001.939985][T24147] loop6: detected capacity change from 0 to 512 [ 1002.044621][T24147] EXT4-fs: test_dummy_encryption option not supported [ 1002.053896][T24143] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.170687][ T28] audit: type=1400 audit(2000000695.979:2848): avc: denied { write } for pid=24140 comm="syz.5.5936" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1002.177547][T24152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5938'. [ 1002.218950][T24152] veth1_macvtap: left promiscuous mode [ 1002.268048][T24154] loop3: detected capacity change from 0 to 1024 [ 1002.315280][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.326161][T24154] EXT4-fs: inline encryption not supported [ 1002.349916][T24154] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1002.493832][T24154] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003] [ 1002.514486][T24154] System zones: 0-1, 3-36 [ 1002.524397][T24154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1002.622936][T24158] loop5: detected capacity change from 0 to 1024 [ 1002.667018][T24158] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1002.710601][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.747494][T24163] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 1002.777126][T24163] FAT-fs (loop6): Filesystem has been set read-only [ 1002.778335][T24158] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1002.819245][ T28] audit: type=1400 audit(2000000696.679:2849): avc: denied { write } for pid=24155 comm="syz.5.5939" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1003.040894][T24168] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5943'. [ 1003.056356][T13573] team0: Port device syz_tun removed [ 1003.140828][T18085] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.158628][T18085] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.236750][T24182] netlink: 'syz.4.5944': attribute type 1 has an invalid length. [ 1003.272264][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.341153][T24169] gre0 speed is unknown, defaulting to 1000 [ 1003.370207][T18085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.416756][T18085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.466543][T24191] vfat: Unknown parameter '' [ 1003.525353][T18085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.545579][T18085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.635207][T18085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.645873][T18085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.792977][T24169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.803653][T24194] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.846257][T24169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.853500][T24169] bridge_slave_0: entered allmulticast mode [ 1003.864374][T24169] bridge_slave_0: entered promiscuous mode [ 1003.902165][T24169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.922782][T24169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.946301][ T28] audit: type=1400 audit(2000000697.759:2850): avc: denied { write } for pid=24188 comm="syz.6.5948" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1003.971328][T24169] bridge_slave_1: entered allmulticast mode [ 1003.993544][T24169] bridge_slave_1: entered promiscuous mode [ 1004.054388][T24169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.103338][T18085] bridge_slave_1: left allmulticast mode [ 1004.109844][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.110859][T18085] bridge_slave_1: left promiscuous mode [ 1004.156319][T18085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.182493][T18085] bridge_slave_0: left allmulticast mode [ 1004.203957][T18085] bridge_slave_0: left promiscuous mode [ 1004.222962][T18085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.317995][ T28] audit: type=1400 audit(2000000698.179:2851): avc: denied { write } for pid=24212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1004.393586][T24203] EXT4-fs: test_dummy_encryption option not supported [ 1004.403310][ T28] audit: type=1400 audit(2000000698.259:2852): avc: denied { write } for pid=24225 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1004.712140][T24217] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1004.787961][T18085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.856176][T18085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.933746][T18085] bond0 (unregistering): Released all slaves [ 1004.942525][T18085] bond1 (unregistering): Released all slaves [ 1004.963206][T18085] bond2 (unregistering): Released all slaves [ 1004.991768][T18085] bond3 (unregistering): Released all slaves [ 1005.008791][T18085] bond4 (unregistering): Released all slaves [ 1005.024085][T18085] bond5 (unregistering): Released all slaves [ 1005.081029][T24193] set_capacity_and_notify: 5 callbacks suppressed [ 1005.081426][T24193] loop5: detected capacity change from 0 to 2048 [ 1005.115882][T24169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.130346][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1005.206494][T18085] tipc: Disabling bearer [ 1005.225467][T18085] tipc: Left network mode [ 1005.227488][T24169] team0: Port device team_slave_0 added [ 1005.239750][T24243] netlink: 'syz.4.5956': attribute type 1 has an invalid length. [ 1005.253523][T24169] team0: Port device team_slave_1 added [ 1005.268153][T24217] Set syz1 is full, maxelem 65536 reached [ 1005.346071][T24169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.359083][T24169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.396496][T24169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.441303][ T28] audit: type=1400 audit(2000000699.299:2853): avc: denied { write } for pid=24246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1005.570876][ T28] audit: type=1400 audit(2000000699.429:2854): avc: denied { write } for pid=24259 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1005.604477][T24193] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1005.696619][ T28] audit: type=1400 audit(2000000699.549:2855): avc: denied { write } for pid=24192 comm="syz.5.5949" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1005.938059][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.986510][T18085] hsr_slave_0: left promiscuous mode [ 1005.992704][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.003980][T18085] hsr_slave_1: left promiscuous mode [ 1006.014707][T18085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.040537][T18085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.056683][T18085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.064336][T18085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.078799][T18085] veth0_macvtap: left promiscuous mode [ 1006.085285][T18085] veth1_vlan: left promiscuous mode [ 1006.091355][T18085] veth0_vlan: left promiscuous mode [ 1006.443199][T18085] team0 (unregistering): Port device team_slave_1 removed [ 1006.460806][T18085] team0 (unregistering): Port device team_slave_0 removed [ 1006.535996][T24169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.543307][T24169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.571385][T24169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.620384][T24169] hsr_slave_0: entered promiscuous mode [ 1006.628029][T24169] hsr_slave_1: entered promiscuous mode [ 1006.634974][T24169] debugfs: 'hsr0' already exists in 'hsr' [ 1006.641028][T24169] Cannot create hsr debugfs directory [ 1006.648354][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1006.740676][T24266] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5959'. [ 1007.069700][T24264] gre0 speed is unknown, defaulting to 1000 [ 1007.409223][ T28] audit: type=1400 audit(2000000701.269:2856): avc: denied { write } for pid=24275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1007.519425][T18085] IPVS: stop unused estimator thread 0... [ 1007.525415][ T28] audit: type=1400 audit(2000000701.319:2857): avc: denied { write } for pid=24295 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1007.603437][T24300] loop4: detected capacity change from 0 to 2048 [ 1007.706239][T24300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1007.882550][ T28] audit: type=1400 audit(2000000701.739:2858): avc: denied { write } for pid=24304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1007.943843][T24319] bond3 (unregistering): Released all slaves [ 1007.959434][ T28] audit: type=1400 audit(2000000701.819:2859): avc: denied { write } for pid=24321 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1008.071871][ T28] audit: type=1400 audit(2000000701.929:2860): avc: denied { write } for pid=24325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1008.095369][ T28] audit: type=1400 audit(2000000701.949:2861): avc: denied { write } for pid=24338 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1008.147889][T24342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5966'. [ 1008.217876][T24169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1008.246808][T24169] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1008.263578][T24169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1008.280508][ T28] audit: type=1400 audit(2000000702.139:2862): avc: denied { write } for pid=24343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1008.314430][T24169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1008.327713][T24169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1008.351296][T24169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1008.360072][ T28] audit: type=1400 audit(2000000702.219:2863): avc: denied { write } for pid=24359 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1008.391149][T24358] netlink: 'syz.2.5968': attribute type 1 has an invalid length. [ 1008.391224][T24169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1008.426329][T24169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1008.500802][T24169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.511548][T24169] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.524451][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.531582][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.531793][T24349] loop5: detected capacity change from 0 to 2048 [ 1008.557806][T22345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.564914][T22345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.599534][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.635752][T24349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1009.025868][T24386] loop4: detected capacity change from 0 to 1024 [ 1009.060448][T24386] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1009.150529][T24386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1009.228426][ T28] audit: type=1400 audit(2000000703.059:2864): avc: denied { write } for pid=24374 comm="syz.4.5970" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1009.571788][T24169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.900798][T24339] loop6: detected capacity change from 0 to 512 [ 1010.566528][T24169] veth0_vlan: entered promiscuous mode [ 1010.584948][T24169] veth1_vlan: entered promiscuous mode [ 1010.604664][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.664528][T24169] veth0_macvtap: entered promiscuous mode [ 1010.673218][T24365] Set syz1 is full, maxelem 65536 reached [ 1010.686393][T24169] veth1_macvtap: entered promiscuous mode [ 1010.716623][T24169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.730334][T24339] EXT4-fs: test_dummy_encryption option not supported [ 1010.742053][T24169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.893469][ T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.918489][ T39] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.981267][ T39] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.017651][ T39] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.296745][T24417] gre0 speed is unknown, defaulting to 1000 [ 1011.377027][T24419] netlink: 'syz.3.5978': attribute type 1 has an invalid length. [ 1011.437083][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.812227][ T28] audit: type=1400 audit(2000000706.669:2865): avc: denied { read } for pid=24431 comm="syz.3.5982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1015.406286][T24452] loop4: detected capacity change from 0 to 1024 [ 1015.676222][T24452] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1015.908389][T24437] gre0 speed is unknown, defaulting to 1000 [ 1016.192759][T24425] Process accounting paused [ 1016.300654][T24452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1016.626258][ T28] audit: type=1400 audit(2000000710.199:2866): avc: denied { write } for pid=24438 comm="syz.4.5984" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1017.515112][T24462] loop5: detected capacity change from 0 to 1024 [ 1017.542947][T24462] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1017.627209][T24462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1018.209156][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.501803][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.514828][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.551426][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1018.641067][T24483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5991'. [ 1018.767335][T24487] netlink: 'syz.6.5992': attribute type 1 has an invalid length. [ 1019.064676][T24469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.082416][T24469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.104567][T24469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.121057][T24469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.141404][T24471] loop3: detected capacity change from 0 to 4096 [ 1019.172346][T24471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1019.174777][T24469] bond1: left promiscuous mode [ 1019.192805][T24469] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1019.218830][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.232028][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1019.259920][T24494] loop4: detected capacity change from 0 to 164 [ 1019.273052][T24494] ISOFS: unable to read i-node block [ 1019.278453][T24494] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1019.442165][T24169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.656105][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.680233][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1021.227676][T24508] loop6: detected capacity change from 0 to 1024 [ 1021.242670][T24508] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1021.313974][T24508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1021.467786][ T28] audit: type=1400 audit(2000000715.229:2867): avc: denied { write } for pid=24503 comm="syz.6.5997" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1021.728921][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.781731][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1021.867195][T24437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.875971][T24437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.896113][T24437] bridge_slave_0: entered allmulticast mode [ 1021.904265][T24437] bridge_slave_0: entered promiscuous mode [ 1021.963030][T24437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.003416][T24437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.027244][T24437] bridge_slave_1: entered allmulticast mode [ 1022.036487][T24518] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5999'. [ 1022.055643][T24437] bridge_slave_1: entered promiscuous mode [ 1022.097487][ T39] bridge_slave_1: left allmulticast mode [ 1022.103188][ T39] bridge_slave_1: left promiscuous mode [ 1022.121285][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.128529][T24519] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1022.135999][T24519] netlink: 'syz.5.5999': attribute type 30 has an invalid length. [ 1022.148660][T24515] loop3: detected capacity change from 0 to 512 [ 1022.161119][ T39] bridge_slave_0: left allmulticast mode [ 1022.181249][ T39] bridge_slave_0: left promiscuous mode [ 1022.191880][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.281505][T24515] EXT4-fs: inline encryption not supported [ 1022.336926][T24515] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1022.412451][T24515] EXT4-fs (loop3): 1 truncate cleaned up [ 1022.493737][T24515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1022.544751][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.639716][T24515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5998'. [ 1022.834086][T24525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6000'. [ 1022.839324][ T39] bridge0 (unregistering): left allmulticast mode [ 1022.915845][ T28] audit: type=1400 audit(2000000716.779:2868): avc: denied { write } for pid=24524 comm="syz.4.6000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1022.994306][T24536] loop6: detected capacity change from 0 to 256 [ 1023.038806][T24536] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1023.128208][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.180033][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.191617][ T39] bond0 (unregistering): Released all slaves [ 1023.202408][ T39] bond1 (unregistering): Released all slaves [ 1023.215152][ T39] bond2 (unregistering): Released all slaves [ 1023.238735][T24517] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1023.253577][T24517] bond2 (unregistering): Released all slaves [ 1023.337758][T24437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.363920][T24519] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1023.448234][T24437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.773552][T24531] gre0 speed is unknown, defaulting to 1000 [ 1023.793450][T24548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6003'. [ 1023.803366][ T39] hsr_slave_0: left promiscuous mode [ 1023.824038][T24169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.840831][ T39] hsr_slave_1: left promiscuous mode [ 1023.872287][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1023.901294][ T28] audit: type=1400 audit(2000000717.749:2869): avc: denied { write } for pid=24539 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1023.938564][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.941306][T24559] loop3: detected capacity change from 0 to 512 [ 1023.967367][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.987750][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.997619][T24559] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1024.034904][ T28] audit: type=1400 audit(2000000717.799:2870): avc: denied { write } for pid=24557 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1024.064570][ T39] veth1_macvtap: left promiscuous mode [ 1024.070102][ T39] veth0_macvtap: left promiscuous mode [ 1024.075999][T24559] EXT4-fs: error: could not find journal device path [ 1024.082998][ T39] veth1_vlan: left promiscuous mode [ 1024.095096][ T39] veth0_vlan: left promiscuous mode [ 1024.241927][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1024.329294][T24437] team0: Port device team_slave_0 added [ 1024.392736][T24437] team0: Port device team_slave_1 added [ 1024.628958][T24437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.651094][T24437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.677113][T24437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.688307][T24437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.713783][T24437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.768445][T24437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.826680][T24437] hsr_slave_0: entered promiscuous mode [ 1024.840152][T24437] hsr_slave_1: entered promiscuous mode [ 1024.852482][T24437] debugfs: 'hsr0' already exists in 'hsr' [ 1024.865106][T24437] Cannot create hsr debugfs directory [ 1025.094387][ T28] audit: type=1400 audit(2000000718.909:2871): avc: denied { write } for pid=24567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1025.119402][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1025.148858][ T28] audit: type=1400 audit(2000000718.929:2872): avc: denied { write } for pid=24592 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1025.351768][ T39] IPVS: stop unused estimator thread 0... [ 1025.909613][T24601] loop4: detected capacity change from 0 to 1024 [ 1026.465618][T24601] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1026.803019][T24601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1026.840607][ T28] audit: type=1400 audit(2000000720.689:2873): avc: denied { write } for pid=24596 comm="syz.4.6010" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1026.872359][T24611] 9p: Bad value for 'rfdno' [ 1027.068910][ T28] audit: type=1400 audit(2000000720.929:2874): avc: denied { write } for pid=24598 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1027.400856][T24627] loop6: detected capacity change from 0 to 128 [ 1028.005573][ T28] audit: type=1400 audit(2000000721.869:2875): avc: denied { write } for pid=24628 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1028.283871][T24633] loop5: detected capacity change from 0 to 1024 [ 1028.312101][T24633] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1028.388112][T24638] FAULT_INJECTION: forcing a failure. [ 1028.388112][T24638] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.423794][T24638] CPU: 0 UID: 0 PID: 24638 Comm: syz.6.6016 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1028.423957][T24638] Tainted: [W]=WARN [ 1028.423966][T24638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1028.423990][T24638] Call Trace: [ 1028.423998][T24638] [ 1028.424007][T24638] __dump_stack+0x1d/0x30 [ 1028.424032][T24638] dump_stack_lvl+0x95/0xd0 [ 1028.424099][T24638] dump_stack+0x15/0x1b [ 1028.424153][T24638] should_fail_ex+0x25e/0x270 [ 1028.424255][T24638] should_failslab+0x8c/0xb0 [ 1028.424287][T24638] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1028.424310][T24638] ? __alloc_skb+0x2db/0x6f0 [ 1028.424412][T24638] __alloc_skb+0x2db/0x6f0 [ 1028.424447][T24638] ? __alloc_skb+0x205/0x6f0 [ 1028.424478][T24638] netlink_alloc_large_skb+0xbf/0xf0 [ 1028.424578][T24638] netlink_sendmsg+0x40c/0x6f0 [ 1028.424671][T24638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1028.424778][T24638] ____sys_sendmsg+0x532/0x580 [ 1028.424844][T24638] ___sys_sendmsg+0x195/0x1e0 [ 1028.424883][T24638] __x64_sys_sendmsg+0xd4/0x160 [ 1028.425003][T24638] x64_sys_call+0x194c/0x3020 [ 1028.425042][T24638] do_syscall_64+0x136/0x3c0 [ 1028.425065][T24638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.425091][T24638] RIP: 0033:0x7fb1d77dce59 [ 1028.425112][T24638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.425188][T24638] RSP: 002b:00007fb1d622f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1028.425285][T24638] RAX: ffffffffffffffda RBX: 00007fb1d7a55fa0 RCX: 00007fb1d77dce59 [ 1028.425304][T24638] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003 [ 1028.425371][T24638] RBP: 00007fb1d622f090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.425387][T24638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.425438][T24638] R13: 00007fb1d7a56038 R14: 00007fb1d7a55fa0 R15: 00007ffcf6fa51f8 [ 1028.425461][T24638] [ 1028.623312][T24624] gre0 speed is unknown, defaulting to 1000 [ 1028.655993][T24640] loop3: detected capacity change from 0 to 2048 [ 1028.670622][T24633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1028.716639][ T28] audit: type=1400 audit(2000000722.559:2876): avc: denied { write } for pid=24619 comm="syz.5.6013" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1028.769815][T24640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1028.797397][ T28] audit: type=1326 audit(2000000722.659:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24642 comm="syz.6.6017" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1d77dce59 code=0x0 [ 1028.823327][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.861911][T24649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.886557][T24648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6018'. [ 1028.908675][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.983506][T24437] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1029.010954][T24437] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1029.023620][T24437] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1029.033058][T24437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1029.047460][T24437] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1029.062739][T24437] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1029.072681][T24437] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1029.075513][T24663] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6020'. [ 1029.091148][ T28] audit: type=1400 audit(2000000722.949:2878): avc: denied { write } for pid=24641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.119266][T24437] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1029.133667][T24663] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6020'. [ 1029.144059][ T28] audit: type=1400 audit(2000000722.999:2879): avc: denied { write } for pid=24667 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.191529][T24677] loop4: detected capacity change from 0 to 512 [ 1029.214109][T24677] msdos: Unknown parameter 'dotsĪcheck' [ 1029.261833][ T28] audit: type=1400 audit(2000000723.119:2880): avc: denied { write } for pid=24672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.292357][T24437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.317297][ T28] audit: type=1400 audit(2000000723.169:2881): avc: denied { write } for pid=24687 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.328087][T24437] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.404927][T22345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.412049][T22345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.438792][T18072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.445917][T18072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.481507][T24683] loop5: detected capacity change from 0 to 1024 [ 1029.501595][T24169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.552153][T24683] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1029.606163][T24703] loop3: detected capacity change from 0 to 512 [ 1029.641403][T24703] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.6022: inode has both inline data and extents flags [ 1029.676120][T24693] loop4: detected capacity change from 0 to 2048 [ 1029.684209][T24703] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1029.690700][T24700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58838 sclass=netlink_route_socket pid=24700 comm=syz.6.6023 [ 1029.699974][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1029.699995][ C1] EXT4-fs (loop3): initial error at time 2000000723: ext4_orphan_get:1399: inode 15 [ 1029.700029][ C1] EXT4-fs (loop3): last error at time 2000000723: ext4_orphan_get:1399: inode 15 [ 1029.703988][T24703] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.6022: couldn't read orphan inode 15 (err -117) [ 1029.772208][ T28] audit: type=1400 audit(2000000723.629:2882): avc: denied { write } for pid=24691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.824458][T24693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1029.839843][T24703] loop3: lost filesystem error report for type 5 error -117 [ 1029.849401][T24703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.881906][ T28] audit: type=1400 audit(2000000723.739:2883): avc: denied { write } for pid=24723 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.912876][ T28] audit: type=1400 audit(2000000723.769:2884): avc: denied { write } for pid=24702 comm="syz.3.6022" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1029.993420][T24683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1030.022292][T24437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.066893][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.137990][T24169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.322934][T24437] veth0_vlan: entered promiscuous mode [ 1030.337342][T24437] veth1_vlan: entered promiscuous mode [ 1030.551640][T24762] loop3: detected capacity change from 0 to 1024 [ 1030.595187][T24762] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1030.642151][T24762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1030.856075][T24750] loop4: detected capacity change from 0 to 512 [ 1030.876361][T24437] veth0_macvtap: entered promiscuous mode [ 1030.956820][T24437] veth1_macvtap: entered promiscuous mode [ 1031.050244][T24769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6028'. [ 1031.075386][T24437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.141263][T24437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.186941][T18075] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.230207][T18075] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.266825][T18075] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.300248][T18075] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.745783][T24776] gre0 speed is unknown, defaulting to 1000 [ 1032.041565][T24169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.100289][T24750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1032.124225][T24750] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1032.308033][T24786] gre0 speed is unknown, defaulting to 1000 [ 1032.337154][T24788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6030'. [ 1032.358330][T24788] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6030'. [ 1032.447268][T24790] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6032'. [ 1032.509921][T24791] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.6025: iget: bad i_size value: 2533274857506816 [ 1032.647402][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.665781][T24797] loop6: detected capacity change from 0 to 1024 [ 1032.702288][T24797] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1032.746041][T24797] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.6035: lblock 2 mapped to illegal pblock 2 (length 1) [ 1032.790992][T24801] loop2: detected capacity change from 0 to 2048 [ 1032.800770][T24797] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1032.800970][T24797] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.6035: lblock 0 mapped to illegal pblock 48 (length 1) [ 1032.810103][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1032.810121][ C0] EXT4-fs (loop6): initial error at time 2000000726: ext4_map_blocks:791: inode 3: block 2 [ 1032.810157][ C0] EXT4-fs (loop6): last error at time 2000000726: ext4_map_blocks:791: inode 3: block 2 [ 1032.856070][T24804] netlink: 'syz.3.6034': attribute type 1 has an invalid length. [ 1032.891415][T24801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1032.924351][T24797] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1032.924491][T24797] EXT4-fs error (device loop6): ext4_acquire_dquot:7032: comm syz.6.6035: Failed to acquire dquot type 0 [ 1032.983681][T24797] loop6: lost filesystem error report for type 5 error -117 [ 1032.983889][T24797] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1033.014328][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 1033.014344][ T28] audit: type=1326 audit(2000000726.879:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24798 comm="syz.4.6036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc094f0d68e code=0x7ffc0000 [ 1033.069457][T24797] loop6: lost filesystem error report for type 5 error -117 [ 1033.070458][T24797] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.6035: mark_inode_dirty error [ 1033.079842][ T28] audit: type=1326 audit(2000000726.909:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24798 comm="syz.4.6036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc094f0d68e code=0x7ffc0000 [ 1033.143624][T24797] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1033.143864][T24797] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1033.150130][ T28] audit: type=1326 audit(2000000726.909:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24798 comm="syz.4.6036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc094f0d68e code=0x7ffc0000 [ 1033.162583][T24797] EXT4-fs (loop6): 1 orphan inode deleted [ 1033.195216][T22346] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:33: lblock 1 mapped to illegal pblock 1 (length 1) [ 1033.209811][ T28] audit: type=1326 audit(2000000726.929:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24798 comm="syz.4.6036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc094f0d68e code=0x7ffc0000 [ 1033.215925][T24797] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1033.237845][T22346] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1033.261905][T24809] netlink: 'syz.3.6037': attribute type 1 has an invalid length. [ 1033.279058][T22346] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1033.290200][T22346] EXT4-fs error (device loop6): ext4_release_dquot:7068: comm kworker/u8:33: Failed to release dquot type 0 [ 1033.305923][T24809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6037'. [ 1033.306852][ T28] audit: type=1326 audit(2000000726.929:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24798 comm="syz.4.6036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc094f0d68e code=0x7ffc0000 [ 1033.376131][ T28] audit: type=1326 audit(2000000726.949:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24798 comm="syz.4.6036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc094f0d68e code=0x7ffc0000 [ 1033.436660][T24797] veth1_to_bond: entered allmulticast mode [ 1033.439363][ T28] audit: type=1326 audit(2000000726.949:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24798 comm="syz.4.6036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc094f4ce59 code=0x7ffc0000 [ 1033.478022][ T28] audit: type=1326 audit(2000000726.949:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24798 comm="syz.4.6036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc094f4ce59 code=0x7ffc0000 [ 1033.513593][T24796] veth1_to_bond: left allmulticast mode [ 1033.529479][ T28] audit: type=1326 audit(2000000726.979:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24798 comm="syz.4.6036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc094f4ce59 code=0x7ffc0000 [ 1033.701513][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.724423][T17728] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1033.761926][T17728] loop6: lost filesystem error report for type 5 error -117 [ 1033.762097][T17728] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1033.809374][T24437] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.834169][T17728] loop6: lost filesystem error report for type 5 error -117 [ 1033.836778][T17728] EXT4-fs error (device loop6): ext4_quota_off:7316: inode #3: comm syz-executor: mark_inode_dirty error [ 1033.887705][T17728] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1034.277227][T24820] loop2: detected capacity change from 0 to 1024 [ 1034.349792][T24820] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1034.455024][T24820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.940788][T24808] loop3: detected capacity change from 0 to 1024 [ 1034.995708][T24824] loop6: detected capacity change from 0 to 2048 [ 1035.050783][T24824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1035.213830][T24808] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1035.657772][T24808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1035.748521][T24808] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1035.773299][T24437] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.852939][T24818] Set syz1 is full, maxelem 65536 reached [ 1035.862014][T24831] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1035.977337][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.020440][T24809] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 1036.020440][T24809] program syz.3.6037 not setting count and/or reply_len properly [ 1036.032572][T24833] loop2: detected capacity change from 0 to 512 [ 1036.045677][T24833] EXT4-fs: Ignoring removed bh option [ 1036.050351][T24836] syzkaller0: entered promiscuous mode [ 1036.063142][T24833] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1036.066335][T24836] syzkaller0: entered allmulticast mode [ 1036.093319][T24833] EXT4-fs (loop2): 1 truncate cleaned up [ 1036.099716][T24833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1036.165926][T24437] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.183082][T24169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1036.304839][T24845] loop5: detected capacity change from 0 to 512 [ 1036.326141][T24845] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1036.341649][T24845] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1036.349209][T24845] EXT4-fs warning (device loop5): ext4_enable_quotas:7267: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 1036.364212][T24845] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1036.375004][T24847] xt_NFQUEUE: number of queues (65533) out of range (got 65539) [ 1036.388741][T24845] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.6047: bad orphan inode 768 [ 1036.402281][T24845] loop5: lost filesystem error report for type 5 error -117 [ 1036.402945][T24845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1036.456034][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.549205][T24855] gre0 speed is unknown, defaulting to 1000 [ 1036.574782][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.669887][T24858] loop6: detected capacity change from 0 to 4096 [ 1036.711120][T24858] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.758051][T24860] loop5: detected capacity change from 0 to 2048 [ 1036.798718][T24860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1037.070801][T24863] ================================================================== [ 1037.078940][T24863] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 1037.087035][T24863] [ 1037.089369][T24863] write to 0xffff88810d1d2ee0 of 8 bytes by task 24864 on cpu 1: [ 1037.097099][T24863] filemap_splice_read+0x52a/0x790 [ 1037.102233][T24863] ext4_file_splice_read+0x8f/0xb0 [ 1037.107371][T24863] splice_direct_to_actor+0x261/0x680 [ 1037.112766][T24863] do_splice_direct+0x119/0x1a0 [ 1037.117639][T24863] do_sendfile+0x37d/0x640 [ 1037.122073][T24863] __x64_sys_sendfile64+0x105/0x150 [ 1037.127300][T24863] x64_sys_call+0x2dc4/0x3020 [ 1037.132008][T24863] do_syscall_64+0x136/0x3c0 [ 1037.136617][T24863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.142531][T24863] [ 1037.144874][T24863] write to 0xffff88810d1d2ee0 of 8 bytes by task 24863 on cpu 0: [ 1037.152620][T24863] filemap_splice_read+0x52a/0x790 [ 1037.157762][T24863] ext4_file_splice_read+0x8f/0xb0 [ 1037.162916][T24863] splice_direct_to_actor+0x261/0x680 [ 1037.168319][T24863] do_splice_direct+0x119/0x1a0 [ 1037.173200][T24863] do_sendfile+0x37d/0x640 [ 1037.177678][T24863] __x64_sys_sendfile64+0x105/0x150 [ 1037.182912][T24863] x64_sys_call+0x2dc4/0x3020 [ 1037.187626][T24863] do_syscall_64+0x136/0x3c0 [ 1037.192242][T24863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.198154][T24863] [ 1037.200496][T24863] value changed: 0x000000000000031c -> 0x000000000000031d [ 1037.207623][T24863] [ 1037.209961][T24863] Reported by Kernel Concurrency Sanitizer on: [ 1037.216130][T24863] CPU: 0 UID: 0 PID: 24863 Comm: syz.6.6051 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1037.227224][T24863] Tainted: [W]=WARN [ 1037.231049][T24863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1037.241125][T24863] ================================================================== [ 1037.771295][T17313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.029501][T24869] loop2: detected capacity change from 0 to 512 [ 1038.046061][T17728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.064157][T24853] loop4: detected capacity change from 0 to 2048 [ 1038.332757][T24869] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.6052: corrupted inode contents [ 1038.347637][T24869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1038.350035][T24869] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.6052: mark_inode_dirty error [ 1038.362705][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1038.362926][ C0] EXT4-fs (loop2): initial error at time 2000000732: ext4_do_update_inode:5690: inode 16 [ 1038.364023][ C0] EXT4-fs (loop2): last error at time 2000000732: ext4_do_update_inode:5690: inode 16 [ 1038.413934][T24869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1038.422397][T24869] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.6052: corrupted inode contents [ 1038.480682][T24869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1038.485661][T24869] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.6052: mark_inode_dirty error [ 1038.517634][T24869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1038.526335][T24869] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.6052: corrupted inode contents [ 1038.553613][T24869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1038.562667][T24853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1038.615134][T24869] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1038.626343][T24869] loop2: lost filesystem error report for type 5 error -117 [ 1038.632277][T24869] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.6052: corrupted inode contents [ 1038.655746][T24869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1038.662075][T24869] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.6052: mark_inode_dirty error [ 1038.689146][T24869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1038.696230][T24869] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1038.720800][T24869] loop2: lost filesystem error report for type 5 error -117 [ 1038.743320][T24869] EXT4-fs (loop2): 1 truncate cleaned up [ 1038.781665][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1038.781683][ T28] audit: type=1400 audit(2000000732.609:2952): avc: denied { write } for pid=24852 comm="syz.4.6049" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1038.799320][T24869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.830831][T24869] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.912280][T18075] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1038.936080][T18075] EXT4-fs error (device loop2): ext4_release_dquot:7068: comm kworker/u8:14: Failed to release dquot type 1 [ 1039.203283][T13132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.739524][T24437] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.