last executing test programs: 3m49.190776869s ago: executing program 1 (id=1761): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000200)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160020000a00000000e000e218bcddf66ed538f252325000", 0x78, 0x2400c090, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = memfd_create(&(0x7f0000000080)=',\xea\x02', 0x4) dup(r5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000140)=0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r6], 0x28}}, 0x802) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 3m48.970612707s ago: executing program 1 (id=1764): unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040090) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x2, 0x1, 0x1, 0x2, 0xff}, &(0x7f0000000300)=0x20) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@local, @broadcast, @void, {@llc={0x4, {@llc={0xf8, 0x1, "bf", "e38b736ecb58ae787c273b471ee370e3b5189bd73d06249c0d"}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000001440)={'wg0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440)=0x14) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000000)={0x7, 0x9, 0x4}, 0xc) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="7365637572697479efffffffffffffff00"/26], &(0x7f0000000080)=0x2e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1c, 0x0, &(0x7f00000008c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033", 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m47.904987971s ago: executing program 1 (id=1771): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 3m45.421766481s ago: executing program 1 (id=1775): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0), 0xf7, 0x579, &(0x7f0000001200)="$eJzs3d1rXGkZAPDnTGby0UYTdS9WYdfiFtpFmzRbdzeIbCuIdwvKKnhXYzoNoZNMSSbbJiyS4h8giOiCN3rljeAfIEgvvFeEBfdeXFGKdhXcC90j52OaJpkx0+5MJkx+P3hz3nPeM+d53jPJmfOVOQGcWuci4lpEjEXEixExU06vlCV2i5LN9/7Dt5azkkSavvH3JJJyWjZbUpbM2fJlk8Vgn/PlcHN759ZSo1HfKMfnW2u35ze3dy6tri2t1Ffq61euLLyy+Oriy4uX+9LPrF+vffUvP/7BL7722m++cOdP1/928XtZvtNle7sf/Vask1q2Lh6pRsTGIIINwVjZn1q0fwAAcJJl+/ifjIjP5fv/MzGW7811N/5YPRl4dgAAAEA/pFen4z9JRAoAAACMrEp+D2xSmSvvBZiOSmVurriH95k4U2k0N1ufv9ncWr9R3Cs7G7XKzdVG/XLEuZliPMnGFx6dUSjGX8rbspLsuwf4RzNTefvccrNxYxgnPAAAAOAUOnvg+P9fM8XxPwAAADBiZoedAAAAADBwjv8BAABg9D3F8f/4IPIAAAAABuLrr7+elbT9/Osbb25v3Wq+eelGffPW3NrW8txyc+P23EqzudJIJyLWjlpeo9m8/cVY37o736pvtuY3t3eurzW31lvXV/c9ArttbCCdAgAAAPb5xGfvv5tExO6XpvIS7Wv73Y7M/a8AjIxKj/Ol2Y/3BpsLcLycgIfTq/r/m93mCyOsVgySYecBDM9RG4DJbnP8fhDZAAAAg3Dh0/ffTZPD1/+re+cGgBHV6/V/YPR0uf6fzhx3IsCxO+L6PzDCau4AhFPv8NX9iX1jnb68I1dc/792dIQ0PXJZAADAQE3nJanMldcCp6PyQVqI2aglN1cb9csR8fGI+ONMbSIbX8hfmfinAQAAAAAAAAAAAAAAAAAAAAAAAADoUZomkT6F6lO9CgAAABiGiMpfk/L5Xxdmzk8fPD8wnnyQPwr4wzRN7/z0jZ/cXWq1Nhay6f/Ip49HROvtcvpLwziDAQAAALS1n/JfHKfXhpwNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKPq/YdvLbfLccZ98JWImO0UvxqT+XAyahFx5p9JVB97XRIRY32Iv3svIp7tFD/J0orZMouD8SsRMZVnMfD4z6Vp2jH+2Y8cHU63+9n259qhv7/xvTk6//1Xi3L1o8bvvv2rPNr+jR2MXy22fx/rMcZn3vnV/GOj39qrThTt1c7bn3b8pMv294VOwaqHJ33nmzs73XJLfx5xoePnT7Iv1nxr7fb85vbOpdW1pZX6Sn39ypWFVxZfXXx58fL8zdVGvfzZMcYPn/v1h93iP/htxJkyfvtNT8sPltli8OWy/0sH+38+q9S6LXnPf9+5+/BTRbV2YBHx4F7ExRc6v//P5sOO6/9n/05z+edA1n6h/ExIdot6RJxrz/z8L//wfNf+35ssa0/+/l88uuu5F7/x/T/3OCsAcAw2t3duLTUa9Y0+VbJ9hENN370T0Xg7TdPelpPtlfYeNInYPdiU7cD1t18bUxHRpalzrOh1yc90TfW9qQ4r82RUrj7JzOnEE/2yJbsDTD7L44Ssw5NaGc9/IX/37SFvmgAAgD7b2/sfdiYAAAAAAAAAAAAAAAAAAABwenX8GrDJPn6d2MThmLvD6CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBH+FwAA//8xsdFY") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000700)) ptrace$cont(0x21, r0, 0x80000001, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noblock_validity}, {@delalloc}, {@quota}, {@errors_remount}, {@nomblk_io_submit}, {@dioread_nolock}, {@mb_optimize_scan}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$eJzs3U1sG2UaAOB3xnHTn+ymK+1Ku6seql2kIlV1kv5A4dReEZWKekDiApHjRlWcuIodaKJIpPcK0QMC1Eu5wYEjiAMHxIUjVy78SNyQKhqB1PQARo7HqZs6xQlxAvHzSE6+b2bs9/088449oxk5gL51tPEnjfhPRFxMIobb5g1ENvNoc7mV5cXi/eXFYhL1+qUfk0gi4t7yYrG1fJL9PxQRSxHx74j4PB9xPF17yX2tRnV+YWq8XC7NZv2R2vTVker8wokr0+OTpcnSzKmnnzlz9vSZsZNj7ener7f38psb641vbr5x48vnbt/84MMjS8W3xpM4F0PZvPZxbKfme5KPc+umn+5FsF2U7HYCbEkuq/NGKf0rhiOXVX0n9fadw+COpAf0UH0wor6mrQn0gUTRQ59qfQ9oHP+2Hjv5/ePO+eYBSCPuyvJi8fVoxR9onpuI/avHJgd/Sh46Mmkcbx7eyUTZk5auR8TowMCj23+SbX9bN7odCdJTn51vrqhH13+6tv+JDvufoda50z+otf9byfZ/Kx3i5zbY/13sMsYvL3337obxrw/GfzvGT9biJx3ipxHxSpfxb734ydmN5tXfizgWneO3JI8/Pzxy+Uq5NNr82zHGp8eOPLvx+CMObhC/ec52/2oi7ePfl+WUdjn+j7/46H9Lj4n/5P8fv/47vf8HIuLNLuP/4977z28078715G7jW8Bm138S+bjdZfynzh39Oms6awgAAAAAAAAAANsoXb2WLUkLa+00LRSa9/D+Mw6m5Uq1dvxyZW5monnN2+HIp60rrYab/aTRH8uux231T67rn8plAXMHVvuFYqU8sctjBwAAAAAAAAAAAAAAAAAAgD+LQ+vu//85t3r///qfqwb2qo1/8hvY69Q/9K+H6z/ZtTyAnefzH/pWXf1D/1L/0L/UP/Qv9Q/9q2P9H2jvfL9juQA7y+c/9C/1DwAAAAAAAAAAAAAAAAAAAAAAAAAAPXHxwoXGo35/ebHY6E8MzM9NVV49MVGqThWm54qFYmX2amGyUpkslwrFyvTvvV5SqVwdjZm5ayO1UrU2Up1feHm6MjfT+k3RUr7nIwIAAAAAAAAAAAAAAAAAAIC/nqHVR5IWIvLNfpoWChF/i4jDSSSXr5RLoxHx94j4KpcfbPTHdjtpAAAAAAAAAAAAAAAAAAAA2GOq8wtT4+VyabZ3jYEsVHfP+rbW03wGNrNwRCxtbxqNV9z0s/LZG9jb1dQnjVyX22EfNl5Yv/EDAAAAAAAAAAAAAAAAAAA76sHdv90+49feJgQAAAAAAAAAAAAAAAAAAAB9Kf0hiYjG49jwE0Pr5+5LVnKr/yPitVuX3r42XqvNjjWm312bXnsnm35yN/IHutWq0zQiGnUMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPFCdX5gaL5dLs1tsDHaxzG6PEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGArfgsAAP//wTjPdQ==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x500, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 3m43.796591453s ago: executing program 1 (id=1785): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}, 0xec}, {{0x0, 0x0, 0x0}, 0xe8c0}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="2000000010000107003f0000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 3m43.493421213s ago: executing program 1 (id=1789): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x2000000000000) socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$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") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x894c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x70, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r5, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x9}, 0x4401, 0x8, 0x1, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r7, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd}) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00 \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf250b000000180001801400020064756d6d793000"/38], 0x2c}}, 0x200488c0) 3m43.467075014s ago: executing program 32 (id=1789): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x2000000000000) socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$eJzs3M9uG0UYAPBvN/9I0tZB4oAKh0ggCAKSOhCgCInCGU7AA0RJWircpmqMREsOBXHixAFx49BX4AGqCiEh8Qq8AKpUoTQXbkZr7zpOHCd2Y8dJ+/tJI8/sjj3zeZ3VzGZ3AnhqzUbEpYgYiYjFiCjl29M8xZ1Gyuo92tpc2d7aXEmiVvvs3ySSfFvxWUn+Op0X5tKI9IeIF+60t7tx6/ZXy5XK2s28vFC9dmNh49btN69eW76ydmXtevndi+Xy0uJ75bf7FusvL792ceTjS+d//bt0f2l8fDLr75l8X2scPZnuvGs2ZpvfyV5Lj9XYyTU+7A4AANCVNB/7j9bH/6UYqecaSrGwOdTOAQAAAH1R+zB/BQAAAJ5gibk/AAAAPOGK+wAebW2uFGmItyMcu4cfRcTMzrPN2834R+OZvM7YAJ9vnY2IG68kpSzFUZ5DBgDo0v1s/HNhv/FfGs+31JuIqI+HJvvc/uyecvv4J33Q5yZ3ycZ/H0TEdtv4Ly2qzIzkpbP1oeJYcvlqZe1CRJyLiLkYm8jK5Q6fX+u0AEwui/+P5Oy5ImXtZ687NdIHoxO737O6XF1+/Ih3e/hdxPnR/eJPmuPfLISpI7Qx8u3d9zvtOzz+wardjXh13+O/c+CSg9cnWqj/HhaKX0W7/77/7dNO7Q87/uz4Tx0c/0zSul7TRu9t3Pvyrxc77Wud//Ty+x9PPq/ni3nZN8vV6s1yxHjySfv2xZ33FuWifhb/3Ev7//0X578kX+bpTH4O6NWPP/3+RjfxZylrv5gLHocs/tWejn/vmXfu/flFp/YPjz87/o01wObyLd2c/7rt4FG+OwAAADgt0vp1jSSdb+bTdH6+cb3juZhKK+sb1dcvr399fbVx/WMmxtLiSlep5XpoufFv9GZ5cU/5rYh4NiJ+Lk3Wy/Mr65XVYQcPAAAAT4npDvP/zD/HdhcCAAAAMHAzB+9Oj6sfAAAAwOAcMv8HAAAATrejrOvXlkn69DkDzoydjG7IyJzgzLDPTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfb/wEAAP//TtW0Wg==") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x894c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x70, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r5, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x9}, 0x4401, 0x8, 0x1, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r7, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd}) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00 \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf250b000000180001801400020064756d6d793000"/38], 0x2c}}, 0x200488c0) 8.200057215s ago: executing program 2 (id=2891): msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, 0x0, 0x0, 0xe800) unshare(0x28000600) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x2, 0x0, &(0x7f0000000780)) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x2076) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000440)=@sg0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r6 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x11b, 0x2, &(0x7f0000000900)=r5, 0x4) ioctl$TCXONC(r2, 0x540a, 0x3) socketpair(0x1e, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0xfffffffffffffd80) 7.352665082s ago: executing program 2 (id=2893): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f0000001740)="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", 0x2ea}], 0x4, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@noop, @noop, @rr={0x7, 0x17, 0x22, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @rand_addr, @dev]}, @generic={0x0, 0x2}]}}}], 0x50}, 0x0) 7.352354062s ago: executing program 2 (id=2894): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x1, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)) setreuid(0xee00, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x0, [], 0x2, 0x0, 0x0}, 0x108) syz_usb_connect(0x2, 0x36, &(0x7f0000000f00)=ANY=[], 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}}, 0x40000) 7.296354485s ago: executing program 3 (id=2853): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="77ba00000000000000001f000000"], 0x48}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, 0x0, 0x805) r5 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000480)='big_key\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000540)='nodots', r5) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001c26c4fda31c8c87d7a300000000000000000000850000000f000000ffe4006324b4e83508f2"], 0x0, 0xfffffdff, 0x0, 0x0, 0x82100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x46, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 6.541968359s ago: executing program 2 (id=2897): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c000180"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x4, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c0200"/43], 0x0, 0x34}, 0x28) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) set_mempolicy(0x8006, 0x0, 0x5) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x200, 0x0, 0xf}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x89, @local, 0x4e23, 0x0, 'dh\x00', 0x4, 0xfffffff7, 0x47}, 0x2c) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007"], 0x38}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0xffffffffffffffff, &(0x7f00000001c0)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x9, 0x8, 0x10000004}, {0x6, 0xe5, 0x3, 0x209}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 6.20789798s ago: executing program 3 (id=2853): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="77ba00000000000000001f000000"], 0x48}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, 0x0, 0x805) r5 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000480)='big_key\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000540)='nodots', r5) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001c26c4fda31c8c87d7a300000000000000000000850000000f000000ffe4006324b4e83508f2"], 0x0, 0xfffffdff, 0x0, 0x0, 0x82100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x46, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 5.019959208s ago: executing program 3 (id=2853): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="77ba00000000000000001f000000"], 0x48}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, 0x0, 0x805) r5 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000480)='big_key\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000540)='nodots', r5) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001c26c4fda31c8c87d7a300000000000000000000850000000f000000ffe4006324b4e83508f2"], 0x0, 0xfffffdff, 0x0, 0x0, 0x82100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x46, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.03956771s ago: executing program 0 (id=2903): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) 3.973271072s ago: executing program 5 (id=2906): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x3d, 0x0, 0x3, 0x6}, {0x9, 0x0, 0x0, 0x15}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) acct(&(0x7f00000005c0)='./file0\x00') r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_getscheduler(r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000010000000000000000000000000000000000fc7b5f3177e53a3bad6c4df15eedb27f8dc4d23a1b29667f7a62c40432102ed00aaef9f147208035475b51c05f6b840fc60bd192d42e06376d914a10a3e10bea2ab8da12296bbead5157b073899ca61bbe1bb5d8682379a0a7f99edf386aa8fcd6d38de8aba0511e6c085e1c87b4d56c4261c827bf06b00d4293ff9aa8424ca8abb7da68eee278a866676d386b23cb22e059925b2481642dc0bb2df1dead6233cd8485502064e6c9f253b7e505d100"/219], 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x43, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18050000080000000000000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="00000010000000000800000000000000c834fea74bcd6bf00e90f6ba2946f55ebffc7187000085000000950800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4) sendto(r0, &(0x7f00000001c0)="01ed1a11d9c366", 0x7, 0x40000, &(0x7f0000000200)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x80) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x7, 0x40000000}, 0x0, 0x0, 0x0) 3.896992224s ago: executing program 4 (id=2907): bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000)=r1, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001a00010000002080fbdbdf250a2e80000000c800000b7f0005001b001100000006001d004e220000400e420c8580225fe477fd4adbc2ae6b4367ef2ec428f4ff169fb3a18ff5dba0a6a8cd2793d2ae61a09b6949a516f0073450b79e2e9f474e3dfa1f7a164d3ee66467c899"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x20000050) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffe, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r4 = syz_open_pts(r3, 0x800) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0xff81, 0x0, 0x3, 0xfffffffe, 0x6, "db2d41b4e2df36108900"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000700)=0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x120, 0x20}, {0xffffffff80000001, 0x1be, 0xff, 0x0, 0x0, 0x4000, 0x0, 0x5}, {0x800, 0x0, 0xfffffffffffffff1}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x149a82, 0x0) sendfile(r7, r7, 0x0, 0x5) sendmmsg(r6, &(0x7f0000000880), 0x0, 0x8c6c1c902b10765) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) 3.852766105s ago: executing program 0 (id=2908): socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x7fc9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8012, 0x4, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/slabinfo\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000700)=""/4096, 0x36, 0x1000, 0x8}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, r2}}, './file0\x00'}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2088000}, 0x4060804) unshare(0xa280e84fbd9d462d) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) socket$kcm(0x10, 0x3, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0xff, @mcast1, 0x1}, 0x1c) 3.852421315s ago: executing program 5 (id=2909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8858}, 0x20004844) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmmsg$inet6(r0, &(0x7f0000004980)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x6, @mcast1, 0xda}, 0x1c, &(0x7f0000001f40)=[{0x0}, {&(0x7f0000001e80)="4054d394b341b43a14af9450bb9808ec78bb833b018fe05033edce830348611d45e184a22efe0f7b4ac55ef3c834cae1475cc834c5ff57ec1f98", 0x3a}, {&(0x7f0000001f00)="02b70eed352d5c18c88ca1b4f5a56c20c9eef011f8da71e1607f42ff", 0x1c}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x288}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000002240)="d7865065938847a8dd56db27e6fe5c5341aa96a7031cda2da77e70b5ea93a00f76104b41fbda26c90366bdf912c8d9dee41f551cb8", 0x35}], 0x1}}, {{&(0x7f00000022c0)={0xa, 0x4e22, 0x3, @mcast1, 0x48e}, 0x1c, &(0x7f0000003580)=[{&(0x7f0000002300)="11c5e733f7f4927d9c1dc2cefda63c341a9e92517d0030d9a237c3bfe257d7d732207feb5e", 0x25}, {&(0x7f0000002340)="f29ac5f18735b97702b4fb8674e30cdb2ca5ea282936cb1c67d6f374aa638fe551e4e7136323b640853ad393bbd672f739059176f6521677c457c2a956545808db72180da52454daec6b809246eaf845ba4b9d8e9b696a7ae97a02225e4c4dfebb7ba0701ecc40bc80752feecc695f8b23f43316ac8e54b32d08f7c6785c1909d662b9c85b2ac5e78f439ef285ed290af13a165ac92841e96d7f01032c18576b0836324921c4addf082061bbb249ac6ec566de666d6ad87f0bdd228391382cbd50ffe871a50a19a036a8c2ba64ccf0f09c0b4a17d898f23abb7d6a3e4f7162dfbe8de20fe5cec95336", 0xe9}, {&(0x7f0000002440)="155774d57d32fef6ba2c5e090bdec45e1800f5919df14ef49ce3954d32de7c7594c2c798d7ec36e62971426267ed960e15a5a01c3d7e8221daef7772fda789f7bf1eadc6d105abedee1cc14186c4b9b3b9a6b9db07d2e88b", 0x58}, {&(0x7f00000024c0)="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", 0xf9e}, {&(0x7f00000034c0)="4d5932e04d77343f68bf7477e37a3c40e0a3f068a75cad0058f3fe006b79dd047574e1fefc6ec4cd940890c73bec5e90a67cfda71d68ab97f610f7ad069c396ccc14eaab7606076e7c397e6cc548f1e63f7753964ef481421eea45a775e299f3ae2994adfd78c76f2a67354aea57a938dd562256292d7302456f66ee12f49a6e9b6e841347404c270bedfc75b0a3c1", 0x8f}], 0x5}}, {{&(0x7f0000003600)={0xa, 0x4e23, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0x1c, &(0x7f0000004900)=[{0x0}, {0x0}, {&(0x7f0000004740)="f69b6e687d7769a303", 0x9}, {&(0x7f0000004780)="c62791d2365a71ede60229974a9462ec48e8d2c17b42b17cc2c3f82302760da6a687ed249cd982242eb6439ed19595a2f8cb4af746241d29d33ce75265f257f7bb4ef5be56a3696395a35c34913c0e916eb5207e25800dcb246e0891770d0deebf3b9c8a5f79fa5454ed2e6eddd5864a6898ef03998299bf640c545d7eb0e3715fd54e633f72cd9417333f3fc0ca9b66f5aea61bddc59a738a3504d23af0b7b87b1f5dc31e35fe4ec499f5b78a7239d2d85b2f9a81875674544a303996803c97c3769f2b4d598f04cd88129c8b63fde60ac70bc73c", 0xd5}, {&(0x7f0000004880)="eea8086809f0933cc5764618a7173f66333d38f1d7344c69e88c8713ccdf52e024b89afb1556283450b58ab5cf252fecf8002011b1c2183ab7a64ad556877ac1519311215f0e4c9bd542049be4fb8db9a32e50aec001ba44ba0a427b6e90d3f2f7576ad7f5fdc23bf312291e864d5f485f710225", 0x74}], 0x5}}], 0x4, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="98", 0x1, 0x4004032, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff0001}, 0x1c) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280)="1a00000002000000", 0x8) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x7) getpid() r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r5, 0x8, 0x0, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 3.780219568s ago: executing program 0 (id=2910): syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904271d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4", 0xc7}], 0x1, 0x0, 0x0, 0x7400}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001080)={0x10006, 0x7, 0x3, 0x9, 0xf, "3c41502f9f4335aa62a9177afe68fa77d3da01"}) close_range(0xffffffffffffffff, r0, 0x2) r1 = dup(r0) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x72, &(0x7f00000008c0)=ANY=[], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, 0x0, 0x8090) io_uring_setup(0x6206, &(0x7f0000000400)={0x0, 0x1006478, 0x0, 0x0, 0x32a}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x28, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd, 0xb}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004001}, 0x8810) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x1000000, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$UHID_INPUT(r1, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) 3.71925745s ago: executing program 4 (id=2911): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x1, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="401ed8e43d9810f968bcce729af85e69160c5aee784e8cd8c38795ecbc497cafc4b8063c19b4da0adf4eedd8711e428942625a005915746527da6bfd4630d0bb7bcdcb77ecedf6f27eaa27a5ba31f3d419ad9400"/97, 0x61}], 0x1}, 0x20000010) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010105}, @in6={0xa, 0x4e21, 0x8000, @mcast2, 0x800}]}, &(0x7f0000000140)=0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[], 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) 3.697606351s ago: executing program 3 (id=2853): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="77ba00000000000000001f000000"], 0x48}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, 0x0, 0x805) r5 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000480)='big_key\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000540)='nodots', r5) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001c26c4fda31c8c87d7a300000000000000000000850000000f000000ffe4006324b4e83508f2"], 0x0, 0xfffffdff, 0x0, 0x0, 0x82100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x46, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.622293555s ago: executing program 0 (id=2912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010800010000000000000100fffe14000780080011400000000805001500000000000500010006000000050005000200000005000400000000000900020073797a320000000011000300686173683a69702c706f727400000000"], 0x60}}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getpgrp(0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25011f08104e244e2203000000ffff7f000d000000c3000020090000000e0000000000004007000000", @ANYRES32=0x0, @ANYBLOB="19000000ffffff7f22000000c2010000"], 0x4c}, 0x1, 0x0, 0x0, 0x404c0dc}, 0x8080) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x51c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x154, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x31, 0x4, 0x2, 0x20, 0x146, 0x64, 0x0, 0x4, 0x1, 0x0, @rand_addr=0x64010101, @local, {[@timestamp={0x44, 0x14, 0x6a, 0x0, 0xd, [0x862, 0x9, 0x8, 0x9]}, @lsrr={0x83, 0x7, 0xd9, [@dev={0xac, 0x14, 0x14, 0x24}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0xa7, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x1b}, @local]}, @end, @rr={0x7, 0x13, 0x77, [@empty, @remote, @multicast2, @remote]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0x8c, [@loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1]}, @timestamp_addr={0x44, 0x4c, 0xff, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@empty, 0x9}, {@loopback, 0x7}, {@private=0xa010100, 0xf1}, {@multicast2, 0x5}, {@empty, 0x100}, {@broadcast, 0x3}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x6}]}]}}, @echo={0x8, 0x0, 0x0, 0x1, 0x6, "dc647da172599383a5209851be0b827c2b6be3118f6e27a658396331c19f0df7c7130524578a9a0c286a0f221a10bf3374e79a9264bca2a873c83c49ac25ca37f95474e8fa725afbfe8190b85cfd791030034e27094d64ddc0ce3fbb3cd9ef60c587e4909b50f27620885d36ea436dedbc62ae5a837513aed492"}}}}}, &(0x7f0000000240)={0x0, 0x3, [0xcf7, 0xc36, 0x2f9, 0x1df]}) 2.620687875s ago: executing program 5 (id=2913): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000800)={0x3, 0x4}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r5, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r6, &(0x7f0000000840)=ANY=[@ANYRES64=r5, @ANYRES32=r1, @ANYBLOB="1a79d77f74c3713a34edcb85", @ANYRES8=r0, @ANYRES8=r5, @ANYRESDEC=r3, @ANYRES32=r4, @ANYBLOB="a98499fcdbfc97ad41b676c438d798ba6082e3b6f5013416c3996125f349979d71ef2611e2459d4532c6ce383f5248"], 0x100b) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfc, 0x565, &(0x7f0000000280)="$eJzs3U9rXFUbAPDnTpI2bd/XplCKupBAF1ZqJ03inwou6lK0WNB9HZLbUDLplMykNLFgu7AbN1IEEQviB3DvsvgF/BQFLRQpQRduInfmTjpNZpJJOk2mzu8HNznnnjs598yZc+bceW6YAAbWePajEPFKRHyTRBxtKRuOvHC8cdzq45sz2ZbE2tqnfyaR5Puaxyf57yN55uWI+PWriNOFzfVWl1fmS+VyupjnJ2oL1yaqyytnriyU5tK59OrU9PS5t6en3nv3nZ619Y2Lf3//yf0Pz319cvW7nx8eu5vE+fhfXtbajmdwKyI+a2bGYzx/Tkbi/IYDJ3tQWT9J9vsE2JWhfJyPRDYHHI2hfNQD/31fRsQaMKAS4x8GVHMd0Ly279F18Avj0QeNC6DN7R9ufDYSo/Vro8OryVNXRtn17lgP6s/q+OWPe3ezLXr3OQTAtm7djoizw8Ob578kn/9272wXx2ysw/wHe+d+tv55s936p7C+/ok2658jbcbubmw//gsPe1BNR9n67/2269/1oNXYUJ77f33NN5JcvlJOs7ntpYg4FSMHs/xW8Zxzqw/WOpW1rv+yLau/uRbMz+Ph8MGnHzNbqpWepc2tHt2OeLXt+jdZ7//k6f6vh7Ky5+Nil3WcSO+91qls+/ZHHp14PtZ+ini9bf8/iWglW8cnJ+qvh4nmq2Kzv+6c+K1T/d21//nJ+v/w1u0fS1rjtdWd1/Hj6D9pp7Kdvv6b8doDSSPMeiDP3yjVaouT2f6PN++fevL4Zr55fNb+Uye3nv+SNvPfoYj4vMv23zl+p+Oh/dD/szvq/50nHnz0xQ+d6u+u/9+qp07le7qZ/7o9wWd57gAAAAAAAKDfFOox1aRQXE8XCsVi4/6O43G4UK5Ua6cvV5auzjZir2MxUmhGuo+23A8xmd8P28xPbchPR8SxiPh26FA9X5yplGf3u/EAAAAAAAAAAAAAAAAAAADQJ45EjLb7///M70P7fXbAc+crv2FwdR7/eUkvvukJ6Eve/2FwGf8wuIx/GFzGPwwu4x8G14bxP7pf5wHsPe//MLiMfwAAAAAAAAAAAAAAAAAAAAAAAAAAAOipixcuZNva6uObM1l+9vry0nzl+pnZtDpfXFiaKc5UFq8V5yqVuXJanKksbPf3ypXKtcmpWLoxUUurtYnq8sqlhcrS1dqlKwulufRSOrInrQIAAAAAAAAAAAAAAAAAAIAXS3V5Zb5ULqeLEhK7Sgz3x2lI9Dix3zMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADzxbwAAAP//yr431g==") r7 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000000)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0xe1, 0xf2, 0x3, 0x64, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0xabcc3fce78919994, 0x1, 0x7}}) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000340)='hybla', 0x0) sendmmsg$inet(r7, 0x0, 0x0, 0x40) sendto$inet(r7, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r11) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000380)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r3, @ANYRES16=r12, @ANYRES8=r4, @ANYRES32=r9, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x2000c894}, 0x80) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008800}, 0x4008070) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) 2.619725955s ago: executing program 2 (id=2914): bpf$MAP_CREATE(0x300000000000018, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x1, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0xfed7}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x12}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa340}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2400) 2.618892095s ago: executing program 4 (id=2915): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x23, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x330b}, 0x50) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14796, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4083, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) pipe2$9p(0x0, 0x0) 1.802831442s ago: executing program 5 (id=2916): unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040090) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x2, 0x1, 0x1, 0x2, 0xff}, &(0x7f0000000300)=0x20) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x21, &(0x7f00000003c0)={@local, @broadcast, @void, {@llc={0x4, {@llc={0xf8, 0x1, "bf", "e38b736ecb58ae787c273b471ee370e3"}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000001440)={'wg0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440)=0x14) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000000)={0x7, 0x9, 0x4}, 0xc) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="7365637572697479efffffffffffffff00"/26], &(0x7f0000000080)=0x2e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1c, 0x0, &(0x7f00000008c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033", 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.636419837s ago: executing program 4 (id=2917): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = shmget(0x3, 0x3000, 0x1, &(0x7f0000042000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) r4 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000540)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x800, 0x4, 0x6, 0x8, 0x6, r8}) shmctl$IPC_SET(r1, 0x1, &(0x7f00000004c0)={{0x2, r3, r4, r6, r7, 0x10, 0xfffa}, 0x1000, 0x8, 0x5, 0x3, r8, r9, 0x5}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) flock(r0, 0x2) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) accept(r10, 0x0, 0x0) setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f0000000100)=0xfffffffe, 0x4) r11 = openat$cgroup_freezer_state(r0, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRESOCT=r10, @ANYRESOCT=r7, @ANYRESHEX, @ANYRES32, @ANYRESDEC=r11], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x23, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14], 0x90}}, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r15, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r16 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r16, 0x0, 0x0) 1.560820929s ago: executing program 3 (id=2853): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="77ba00000000000000001f000000"], 0x48}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, 0x0, 0x805) r5 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000480)='big_key\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000540)='nodots', r5) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001c26c4fda31c8c87d7a300000000000000000000850000000f000000ffe4006324b4e83508f2"], 0x0, 0xfffffdff, 0x0, 0x0, 0x82100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x46, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.512570661s ago: executing program 4 (id=2918): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) 368.574208ms ago: executing program 0 (id=2919): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000f00), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000010c0)={'team0\x00', 0x0}) r3 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001680), 0x400, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001680), 0x400, 0x0) poll(&(0x7f0000002080)=[{r4}], 0x1, 0xff) (async) poll(&(0x7f0000002080)=[{r4}], 0x1, 0xff) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000002100)=0x19) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000002100)=0x19) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) cachestat(r5, &(0x7f0000000000), &(0x7f0000000040), 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7057d7229c28f661245be4d05ced", @ANYRES32=r2, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x48850) 368.155528ms ago: executing program 5 (id=2920): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x300, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 367.649048ms ago: executing program 2 (id=2921): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r1, &(0x7f0000000000)='\x00', 0x2, 0x1100) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400002b884d43ddbfa7b200000000000a00000a14000000180a010800294434d0f6a100000000000000230000021400000011000124bbcf13714db9d54e85f80000"], 0x3c}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x2, &(0x7f0000000200), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2c, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000e00000004000000000000", @ANYRES32=r5, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r5, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d000900000008000300e0"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140)={[{@nojournal_checksum}, {@auto_da_alloc}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r6 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r6, 0x0, 0x2, 0x4) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYBLOB="030000"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x4816c0e2d6faeb47, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0xc, 0x11000, 0x5, 0x2, 0x9000000f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 367.298928ms ago: executing program 4 (id=2922): syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904271d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4", 0xc7}], 0x1, 0x0, 0x0, 0x7400}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001080)={0x10006, 0x7, 0x3, 0x9, 0xf, "3c41502f9f4335aa62a9177afe68fa77d3da01"}) close_range(0xffffffffffffffff, r0, 0x2) r1 = dup(r0) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x72, &(0x7f00000008c0)=ANY=[], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, 0x0, 0x8090) io_uring_setup(0x6206, &(0x7f0000000400)={0x0, 0x1006478, 0x0, 0x0, 0x32a}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x28, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd, 0xb}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004001}, 0x8810) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x1000000, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$UHID_INPUT(r1, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) 241.974792ms ago: executing program 5 (id=2923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8858}, 0x20004844) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmmsg$inet6(r0, &(0x7f0000004980)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x6, @mcast1, 0xda}, 0x1c, &(0x7f0000001f40)=[{0x0}, {&(0x7f0000001e80)="4054d394b341b43a14af9450bb9808ec78bb833b018fe05033edce830348611d45e184a22efe0f7b4ac55ef3c834cae1475cc834c5ff57ec1f98", 0x3a}, {&(0x7f0000001f00)="02b70eed352d5c18c88ca1b4f5a56c20c9eef011f8da71e1607f42ff", 0x1c}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x288}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000002240)="d7865065938847a8dd56db27e6fe5c5341aa96a7031cda2da77e70b5ea93a00f76104b41fbda26c90366bdf912c8d9dee41f551cb8", 0x35}], 0x1}}, {{&(0x7f00000022c0)={0xa, 0x4e22, 0x3, @mcast1, 0x48e}, 0x1c, &(0x7f0000003580)=[{&(0x7f0000002300)="11c5e733f7f4927d9c1dc2cefda63c341a9e92517d0030d9a237c3bfe257d7d732207feb5e", 0x25}, {&(0x7f0000002340)="f29ac5f18735b97702b4fb8674e30cdb2ca5ea282936cb1c67d6f374aa638fe551e4e7136323b640853ad393bbd672f739059176f6521677c457c2a956545808db72180da52454daec6b809246eaf845ba4b9d8e9b696a7ae97a02225e4c4dfebb7ba0701ecc40bc80752feecc695f8b23f43316ac8e54b32d08f7c6785c1909d662b9c85b2ac5e78f439ef285ed290af13a165ac92841e96d7f01032c18576b0836324921c4addf082061bbb249ac6ec566de666d6ad87f0bdd228391382cbd50ffe871a50a19a036a8c2ba64ccf0f09c0b4a17d898f23abb7d6a3e4f7162dfbe8de20fe5cec95336", 0xe9}, {&(0x7f0000002440)="155774d57d32fef6ba2c5e090bdec45e1800f5919df14ef49ce3954d32de7c7594c2c798d7ec36e62971426267ed960e15a5a01c3d7e8221daef7772fda789f7bf1eadc6d105abedee1cc14186c4b9b3b9a6b9db07d2e88b", 0x58}, {&(0x7f00000024c0)="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", 0xf9e}, {&(0x7f00000034c0)="4d5932e04d77343f68bf7477e37a3c40e0a3f068a75cad0058f3fe006b79dd047574e1fefc6ec4cd940890c73bec5e90a67cfda71d68ab97f610f7ad069c396ccc14eaab7606076e7c397e6cc548f1e63f7753964ef481421eea45a775e299f3ae2994adfd78c76f2a67354aea57a938dd562256292d7302456f66ee12f49a6e9b6e841347404c270bedfc75b0a3c1", 0x8f}], 0x5}}, {{&(0x7f0000003600)={0xa, 0x4e23, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0x1c, &(0x7f0000004900)=[{0x0}, {0x0}, {&(0x7f0000004740)="f69b6e687d7769a303", 0x9}, {&(0x7f0000004780)="c62791d2365a71ede60229974a9462ec48e8d2c17b42b17cc2c3f82302760da6a687ed249cd982242eb6439ed19595a2f8cb4af746241d29d33ce75265f257f7bb4ef5be56a3696395a35c34913c0e916eb5207e25800dcb246e0891770d0deebf3b9c8a5f79fa5454ed2e6eddd5864a6898ef03998299bf640c545d7eb0e3715fd54e633f72cd9417333f3fc0ca9b66f5aea61bddc59a738a3504d23af0b7b87b1f5dc31e35fe4ec499f5b78a7239d2d85b2f9a81875674544a303996803c97c3769f2b4d598f04cd88129c8b63fde60ac70bc73c", 0xd5}, {&(0x7f0000004880)="eea8086809f0933cc5764618a7173f66333d38f1d7344c69e88c8713ccdf52e024b89afb1556283450b58ab5cf252fecf8002011b1c2183ab7a64ad556877ac1519311215f0e4c9bd542049be4fb8db9a32e50aec001ba44ba0a427b6e90d3f2f7576ad7f5fdc23bf312291e864d5f485f710225", 0x74}], 0x5}}], 0x4, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="98", 0x1, 0x4004032, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff0001}, 0x1c) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280)="1a00000002000000", 0x8) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x7) getpid() r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r5, 0x8, 0x0, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 92.469477ms ago: executing program 0 (id=2924): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c000180"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x4, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c0200"/43], 0x0, 0x34}, 0x28) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) set_mempolicy(0x8006, 0x0, 0x5) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x200, 0x0, 0xf}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x89, @local, 0x4e23, 0x0, 'dh\x00', 0x4, 0xfffffff7, 0x47}, 0x2c) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007"], 0x38}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0xffffffffffffffff, &(0x7f00000001c0)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x9, 0x8, 0x10000004}, {0x6, 0xe5, 0x3, 0x209}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 0s ago: executing program 3 (id=2853): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="77ba00000000000000001f000000"], 0x48}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, 0x0, 0x805) r5 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000480)='big_key\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000540)='nodots', r5) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001c26c4fda31c8c87d7a300000000000000000000850000000f000000ffe4006324b4e83508f2"], 0x0, 0xfffffdff, 0x0, 0x0, 0x82100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x46, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) kernel console output (not intermixed with test programs): ): dx_probe:934: inode #2: comm syz.0.2605: Corrupt directory, running e2fsck is recommended [ 548.495933][T12930] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.2605: corrupted in-inode xattr: e_value size too large [ 548.519550][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.631536][T12938] loop2: detected capacity change from 0 to 1024 [ 548.660099][T12938] EXT4-fs: Ignoring removed nobh option [ 548.665966][T12938] EXT4-fs: Ignoring removed i_version option [ 548.669778][ T28] audit: type=1400 audit(262446.550:23031): avc: denied { ioctl } for pid=12933 comm="syz.0.2607" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37360 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 548.672140][T12938] ext4: Unknown parameter 'obj_role' [ 548.772020][T12944] loop2: detected capacity change from 0 to 256 [ 548.928621][T12948] loop0: detected capacity change from 0 to 512 [ 548.935175][T12941] loop3: detected capacity change from 0 to 1024 [ 548.960906][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2612'. [ 548.961177][ T28] audit: type=1400 audit(262446.840:23032): avc: denied { write } for pid=12946 comm="syz.0.2612" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 548.998057][T12941] EXT4-fs (loop3): shut down requested (0) [ 549.144219][T12965] loop0: detected capacity change from 0 to 512 [ 549.159426][T12965] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 549.171828][T12965] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.2617: bad orphan inode 131083 [ 549.182864][T12965] loop0: lost filesystem error report for type 5 error -117 [ 549.201319][T12968] EXT4-fs: Ignoring removed bh option [ 549.217498][T12968] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 549.228165][T12968] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2618: corrupted in-inode xattr: e_value size too large [ 549.250089][T12968] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 549.253827][T12968] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2618: couldn't read orphan inode 15 (err -117) [ 549.263037][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 549.263096][ C0] EXT4-fs (loop3): initial error at time 262447: ext4_iget_extra_inode:5128: inode 15 [ 549.263232][ C0] EXT4-fs (loop3): last error at time 262447: ext4_iget_extra_inode:5128: inode 15 [ 549.300926][T12968] loop3: lost filesystem error report for type 5 error -117 [ 549.316718][T12968] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.2618: Unrecognised inode hash code 4 [ 549.335688][T12968] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2618: Corrupt directory, running e2fsck is recommended [ 549.349283][T12968] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.2618: Unrecognised inode hash code 4 [ 549.360984][T12968] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2618: Corrupt directory, running e2fsck is recommended [ 549.375631][T12968] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2618: corrupted in-inode xattr: e_value size too large [ 549.463471][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2623'. [ 549.486298][T12989] netlink: 'syz.3.2624': attribute type 15 has an invalid length. [ 549.497820][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2624'. [ 549.510831][T12989] netlink: 'syz.3.2624': attribute type 15 has an invalid length. [ 549.511138][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 549.519069][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2624'. [ 549.528554][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 549.545637][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 549.558331][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 549.575778][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2625'. [ 549.894644][T13018] Failed to initialize the IGMP autojoin socket (err -2) [ 550.155153][T13018] program syz.2.2635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 550.596352][T13025] FAULT_INJECTION: forcing a failure. [ 550.596352][T13025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.612352][T13025] CPU: 0 UID: 0 PID: 13025 Comm: syz.0.2637 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 550.612410][T13025] Tainted: [W]=WARN [ 550.612431][T13025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 550.612471][T13025] Call Trace: [ 550.612491][T13025] [ 550.612512][T13025] __dump_stack+0x1d/0x30 [ 550.612576][T13025] dump_stack_lvl+0x95/0xd0 [ 550.612689][T13025] dump_stack+0x15/0x1b [ 550.612724][T13025] should_fail_ex+0x263/0x280 [ 550.612746][T13025] should_fail+0xb/0x20 [ 550.612762][T13025] should_fail_usercopy+0x1a/0x20 [ 550.612865][T13025] copy_folio_from_iter_atomic+0x24d/0x10b0 [ 550.613020][T13025] ? shmem_write_begin+0xfc/0x1f0 [ 550.613083][T13025] ? shmem_write_begin+0x135/0x1f0 [ 550.613159][T13025] generic_perform_write+0x2c1/0x490 [ 550.613214][T13025] shmem_file_write_iter+0xc5/0xf0 [ 550.613348][T13025] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 550.613422][T13025] vfs_write+0x5a6/0x9f0 [ 550.613470][T13025] ksys_write+0xdc/0x1a0 [ 550.613557][T13025] __x64_sys_write+0x40/0x50 [ 550.613662][T13025] x64_sys_call+0x27e1/0x3020 [ 550.613737][T13025] do_syscall_64+0x12c/0x3b0 [ 550.613826][T13025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.613874][T13025] RIP: 0033:0x7f3b03c0ce59 [ 550.613925][T13025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.613974][T13025] RSP: 002b:00007f3b02667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 550.614032][T13025] RAX: ffffffffffffffda RBX: 00007f3b03e85fa0 RCX: 00007f3b03c0ce59 [ 550.614077][T13025] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000009 [ 550.614116][T13025] RBP: 00007f3b02667090 R08: 0000000000000000 R09: 0000000000000000 [ 550.614153][T13025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.614165][T13025] R13: 00007f3b03e86038 R14: 00007f3b03e85fa0 R15: 00007ffd44144b88 [ 550.614223][T13025] [ 550.852340][T13022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 550.868273][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2638'. [ 550.919917][T13022] xt_HMARK: spi-set and port-set can't be combined [ 551.052153][T13035] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2636: bg 0: block 217: padding at end of block bitmap is not set [ 551.072471][T13035] EXT4-fs (loop5): Remounting filesystem read-only [ 551.082419][T13030] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 551.122536][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 551.127268][T13030] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.133887][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 551.153120][T13039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.173900][T13039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.193569][ T3394] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 551.205493][ T3394] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 551.213261][ T3394] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 551.221402][ T3394] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 551.229319][ T3394] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 551.246813][T13030] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 551.264643][T13030] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.346082][T13049] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2643'. [ 551.355127][ T3394] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 551.355156][ T3394] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 551.355183][ T3394] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 551.355260][ T3394] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 551.393322][T13030] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 551.403340][T13030] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.456923][T13030] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 551.466966][T13030] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.555600][T13053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13053 comm=syz.4.2644 [ 551.570096][T13053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13053 comm=syz.4.2644 [ 551.665005][ T3442] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 551.673995][ T3442] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.715379][ T3442] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 551.724506][ T3442] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.920498][ T3442] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 551.976345][ T3442] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.001087][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 552.009700][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.024059][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2645'. [ 552.080989][T13061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.089676][T13061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.337265][T13068] set_capacity_and_notify: 6 callbacks suppressed [ 552.337302][T13068] loop4: detected capacity change from 0 to 512 [ 552.351159][T13068] EXT4-fs: Ignoring removed bh option [ 552.359527][T13068] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 552.369983][T13068] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2649: corrupted in-inode xattr: e_value size too large [ 552.384438][T13068] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 552.384565][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 552.400171][ C0] EXT4-fs (loop4): initial error at time 262450: ext4_iget_extra_inode:5128: inode 15 [ 552.409815][ C0] EXT4-fs (loop4): last error at time 262450: ext4_iget_extra_inode:5128: inode 15 [ 552.419441][T13068] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2649: couldn't read orphan inode 15 (err -117) [ 552.431983][T13068] loop4: lost filesystem error report for type 5 error -117 [ 552.435241][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 552.435258][ T28] audit: type=1400 audit(262450.320:23070): avc: denied { write } for pid=13067 comm="syz.4.2649" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 552.470445][ T28] audit: type=1400 audit(262450.320:23071): avc: denied { write } for pid=13067 comm="syz.4.2649" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 552.483892][T13068] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.2649: Unrecognised inode hash code 4 [ 552.492236][ T28] audit: type=1400 audit(262450.330:23072): avc: denied { write } for pid=13067 comm="syz.4.2649" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 552.504322][T13068] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2649: Corrupt directory, running e2fsck is recommended [ 552.524856][ T28] audit: type=1400 audit(262450.330:23073): avc: denied { write } for pid=13067 comm="syz.4.2649" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 552.524890][ T28] audit: type=1400 audit(262450.350:23074): avc: denied { write } for pid=13067 comm="syz.4.2649" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 552.582043][T13068] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.2649: Unrecognised inode hash code 4 [ 552.604364][T13068] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2649: Corrupt directory, running e2fsck is recommended [ 552.618247][T13070] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2649: corrupted in-inode xattr: e_value size too large [ 552.666519][T13074] loop4: detected capacity change from 0 to 128 [ 552.686332][T13074] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 552.701414][T13074] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 552.712979][T13074] FAT-fs (loop4): Filesystem has been set read-only [ 552.722219][T13074] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 552.796341][ T28] audit: type=1400 audit(262450.680:23075): avc: denied { create } for pid=13078 comm="syz.4.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 552.836474][T13082] loop3: detected capacity change from 0 to 1024 [ 552.843340][T13082] EXT4-fs: Ignoring removed bh option [ 552.860505][ T28] audit: type=1400 audit(262450.740:23076): avc: denied { write } for pid=13081 comm="syz.3.2654" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 552.900750][ T28] audit: type=1400 audit(262450.760:23077): avc: denied { audit_read } for pid=13078 comm="syz.4.2653" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 552.949983][T13089] loop3: detected capacity change from 0 to 256 [ 553.062233][T13091] Failed to initialize the IGMP autojoin socket (err -2) [ 553.460528][T13098] loop4: detected capacity change from 0 to 512 [ 553.474736][T13098] EXT4-fs: Ignoring removed nobh option [ 553.555779][T13098] __nla_validate_parse: 1 callbacks suppressed [ 553.555912][T13098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2656'. [ 553.763043][T13105] netlink: 'syz.2.2658': attribute type 15 has an invalid length. [ 553.975094][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2661'. [ 554.124946][ T3394] hid-generic 0000:3000000:0000.0004: hidraw1: HID v0.00 Device [sy] on syz0 [ 554.653570][T13115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2661'. [ 554.949088][T13116] fido_id[13116]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 555.125785][ T28] audit: type=1326 audit(262453.000:23078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.4.2662" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bc57ce59 code=0x7ffc0000 [ 555.125815][ T28] audit: type=1326 audit(262453.000:23079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.4.2662" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bc57ce59 code=0x7ffc0000 [ 555.142724][T13118] FAULT_INJECTION: forcing a failure. [ 555.142724][T13118] name failslab, interval 1, probability 0, space 0, times 0 [ 555.142796][T13118] CPU: 0 UID: 0 PID: 13118 Comm: syz.4.2662 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 555.142864][T13118] Tainted: [W]=WARN [ 555.142872][T13118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 555.142887][T13118] Call Trace: [ 555.142904][T13118] [ 555.142912][T13118] __dump_stack+0x1d/0x30 [ 555.142935][T13118] dump_stack_lvl+0x95/0xd0 [ 555.142954][T13118] dump_stack+0x15/0x1b [ 555.142972][T13118] should_fail_ex+0x263/0x280 [ 555.142990][T13118] ? audit_log_d_path+0x8d/0x150 [ 555.143100][T13118] should_failslab+0x8c/0xb0 [ 555.143135][T13118] __kmalloc_cache_noprof+0x5f/0x400 [ 555.143243][T13118] audit_log_d_path+0x8d/0x150 [ 555.143269][T13118] audit_log_d_path_exe+0x42/0x70 [ 555.143369][T13118] audit_log_task+0x1e8/0x250 [ 555.143390][T13118] audit_seccomp+0x60/0x100 [ 555.143407][T13118] ? __seccomp_filter+0x8db/0x1350 [ 555.143435][T13118] __seccomp_filter+0x8ec/0x1350 [ 555.143484][T13118] ? __rcu_read_unlock+0x4e/0x70 [ 555.143511][T13118] ? __fget_files+0x184/0x1c0 [ 555.143534][T13118] ? mutex_lock+0x57/0x90 [ 555.143714][T13118] ? mutex_unlock+0x4e/0x90 [ 555.143740][T13118] __secure_computing+0x81/0x150 [ 555.143766][T13118] do_syscall_64+0xce/0x3b0 [ 555.143831][T13118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.143854][T13118] RIP: 0033:0x7fc1bc57ce59 [ 555.143870][T13118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.143888][T13118] RSP: 002b:00007fc1bafd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.143905][T13118] RAX: ffffffffffffffda RBX: 00007fc1bc7f5fa0 RCX: 00007fc1bc57ce59 [ 555.144073][T13118] RDX: 000000000404c0c4 RSI: 0000200000000140 RDI: 000000000000000c [ 555.144085][T13118] RBP: 00007fc1bafd7090 R08: 0000000000000000 R09: 0000000000000000 [ 555.144098][T13118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.144109][T13118] R13: 00007fc1bc7f6038 R14: 00007fc1bc7f5fa0 R15: 00007fff61fcc928 [ 555.144126][T13118] [ 555.167143][T13118] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2662'. [ 555.250481][T13132] loop5: detected capacity change from 0 to 512 [ 555.305270][T13128] loop4: detected capacity change from 0 to 512 [ 555.387401][T13135] loop2: detected capacity change from 0 to 512 [ 555.470937][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2665'. [ 555.477063][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2666'. [ 555.989298][T13166] loop3: detected capacity change from 0 to 512 [ 556.000532][T13166] EXT4-fs: Ignoring removed nobh option [ 556.022619][ T23] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 556.039076][T13167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.062256][T13167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.132960][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2672'. [ 556.672885][T13176] fido_id[13176]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 556.709042][T13180] loop4: detected capacity change from 0 to 1024 [ 556.910186][T13180] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 556.950989][T13180] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.2680: lblock 2 mapped to illegal pblock 2 (length 1) [ 556.992820][T13180] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 556.994432][T13180] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.2680: lblock 0 mapped to illegal pblock 48 (length 1) [ 557.003567][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 557.003584][ C1] EXT4-fs (loop4): initial error at time 262454: ext4_map_blocks:791: inode 3: block 2 [ 557.003631][ C1] EXT4-fs (loop4): last error at time 262454: ext4_map_blocks:791: inode 3: block 2 [ 557.107647][T13180] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 557.107783][T13180] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.2680: Failed to acquire dquot type 0 [ 557.147500][T13180] loop4: lost filesystem error report for type 5 error -117 [ 557.147595][T13180] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 557.217793][T13180] loop4: lost filesystem error report for type 5 error -117 [ 557.217968][T13180] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.2680: mark_inode_dirty error [ 557.273392][T13180] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 557.273537][T13180] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 557.328187][T13180] EXT4-fs (loop4): 1 orphan inode deleted [ 557.356656][ T49] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 557.381892][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2685'. [ 557.385084][ T49] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 0 [ 557.428139][T13194] set_capacity_and_notify: 2 callbacks suppressed [ 557.428226][T13194] loop5: detected capacity change from 0 to 512 [ 557.448062][T13195] loop3: detected capacity change from 0 to 512 [ 557.467709][T13195] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 557.478970][T13195] EXT4-fs (loop3): 1 truncate cleaned up [ 557.495723][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 557.495784][ T28] audit: type=1400 audit(262455.380:23140): avc: denied { write } for pid=13192 comm="syz.3.2686" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 557.550592][ T3298] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 557.568469][ T28] audit: type=1400 audit(262455.440:23141): avc: denied { write } for pid=13193 comm="syz.5.2682" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 557.576589][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2689'. [ 557.596769][ T3298] loop4: lost filesystem error report for type 5 error -117 [ 557.614691][ T3298] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 557.632358][ T3298] loop4: lost filesystem error report for type 5 error -117 [ 557.632461][ T3298] EXT4-fs error (device loop4): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 557.651458][ T3298] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 557.700585][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2690'. [ 557.737512][T13207] FAULT_INJECTION: forcing a failure. [ 557.737512][T13207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.757074][T13205] loop4: detected capacity change from 0 to 512 [ 557.765279][T13207] CPU: 1 UID: 0 PID: 13207 Comm: syz.5.2690 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 557.765307][T13207] Tainted: [W]=WARN [ 557.765313][T13207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 557.765389][T13207] Call Trace: [ 557.765397][T13207] [ 557.765407][T13207] __dump_stack+0x1d/0x30 [ 557.765435][T13207] dump_stack_lvl+0x95/0xd0 [ 557.765460][T13207] dump_stack+0x15/0x1b [ 557.765482][T13207] should_fail_ex+0x263/0x280 [ 557.765508][T13207] should_fail+0xb/0x20 [ 557.765532][T13207] should_fail_usercopy+0x1a/0x20 [ 557.765557][T13207] _copy_to_user+0x20/0xa0 [ 557.765587][T13207] simple_read_from_buffer+0xb5/0x130 [ 557.765703][T13207] proc_fail_nth_read+0x10e/0x150 [ 557.765736][T13207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 557.765767][T13207] vfs_read+0x1ab/0x7f0 [ 557.765889][T13207] ? __rcu_read_unlock+0x4e/0x70 [ 557.765914][T13207] ? __fget_files+0x184/0x1c0 [ 557.765981][T13207] ? mutex_lock+0x57/0x90 [ 557.766011][T13207] ksys_read+0xdc/0x1a0 [ 557.766095][T13207] __x64_sys_read+0x40/0x50 [ 557.766127][T13207] x64_sys_call+0x2886/0x3020 [ 557.766155][T13207] do_syscall_64+0x12c/0x3b0 [ 557.766228][T13207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.766253][T13207] RIP: 0033:0x7fd91fb3d68e [ 557.766271][T13207] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 557.766291][T13207] RSP: 002b:00007fd91e5d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 557.766358][T13207] RAX: ffffffffffffffda RBX: 00007fd91e5d76c0 RCX: 00007fd91fb3d68e [ 557.766375][T13207] RDX: 000000000000000f RSI: 00007fd91e5d70a0 RDI: 0000000000000005 [ 557.766390][T13207] RBP: 00007fd91e5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 557.766403][T13207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.766416][T13207] R13: 00007fd91fdf6038 R14: 00007fd91fdf5fa0 R15: 00007ffd999ad5a8 [ 557.766504][T13207] [ 557.800866][T13211] loop0: detected capacity change from 0 to 512 [ 558.003200][ T28] audit: type=1400 audit(262455.880:23142): avc: denied { write } for pid=13204 comm="syz.4.2688" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 558.069395][ T28] audit: type=1400 audit(262455.950:23143): avc: denied { write } for pid=13210 comm="syz.0.2692" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 558.386339][T13229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.399342][T13229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.462601][T13233] loop0: detected capacity change from 0 to 512 [ 558.488383][ T28] audit: type=1400 audit(262456.370:23144): avc: denied { write } for pid=13232 comm="syz.0.2700" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 558.512237][T13231] syzkaller0: entered promiscuous mode [ 558.518743][T13231] syzkaller0: entered allmulticast mode [ 558.686597][T13244] loop2: detected capacity change from 0 to 512 [ 558.751172][ T28] audit: type=1400 audit(262456.630:23145): avc: denied { write } for pid=13243 comm="syz.2.2703" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 558.887801][T13249] __nla_validate_parse: 1 callbacks suppressed [ 558.887821][T13249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2701'. [ 558.923023][T13253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2704'. [ 558.947733][T13253] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2704'. [ 558.974971][T13253] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2704'. [ 559.134904][T13268] loop5: detected capacity change from 0 to 512 [ 559.151147][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2712'. [ 559.160256][T13271] netlink: 'syz.4.2712': attribute type 30 has an invalid length. [ 559.169357][ T28] audit: type=1400 audit(262457.050:23146): avc: denied { write } for pid=13267 comm="syz.5.2711" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 559.207794][T13273] loop2: detected capacity change from 0 to 256 [ 559.259333][T13271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=13271 comm=syz.4.2712 [ 559.411503][ T28] audit: type=1400 audit(262457.290:23147): avc: denied { read } for pid=13282 comm="syz.4.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 559.461551][T13287] loop4: detected capacity change from 0 to 256 [ 559.565611][T13294] futex_wake_op: syz.4.2718 tries to shift op by -1; fix this program [ 559.574258][T13277] loop5: detected capacity change from 0 to 1024 [ 559.602936][ T28] audit: type=1400 audit(262457.480:23148): avc: denied { write } for pid=13276 comm="syz.5.2714" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 559.605041][T13277] EXT4-fs (loop5): shut down requested (0) [ 559.656914][ T9866] EXT4-fs unmount: 48 callbacks suppressed [ 559.656930][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.678867][ T28] audit: type=1400 audit(262457.560:23149): avc: denied { create } for pid=13297 comm="syz.4.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 559.727447][T13303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.739072][T13303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.747995][T13303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2721'. [ 560.306548][T13323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2728'. [ 560.361485][T13327] FAULT_INJECTION: forcing a failure. [ 560.361485][T13327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.374761][T13327] CPU: 1 UID: 0 PID: 13327 Comm: syz.3.2730 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 560.374803][T13327] Tainted: [W]=WARN [ 560.374813][T13327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 560.374851][T13327] Call Trace: [ 560.374861][T13327] [ 560.374924][T13327] __dump_stack+0x1d/0x30 [ 560.374955][T13327] dump_stack_lvl+0x95/0xd0 [ 560.374985][T13327] dump_stack+0x15/0x1b [ 560.375010][T13327] should_fail_ex+0x263/0x280 [ 560.375035][T13327] should_fail+0xb/0x20 [ 560.375139][T13327] should_fail_usercopy+0x1a/0x20 [ 560.375166][T13327] _copy_to_user+0x20/0xa0 [ 560.375227][T13327] simple_read_from_buffer+0xb5/0x130 [ 560.375426][T13327] proc_fail_nth_read+0x10e/0x150 [ 560.375466][T13327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 560.375504][T13327] vfs_read+0x1ab/0x7f0 [ 560.375541][T13327] ? __rcu_read_unlock+0x4e/0x70 [ 560.375609][T13327] ? __fget_files+0x184/0x1c0 [ 560.375635][T13327] ? mutex_lock+0x57/0x90 [ 560.375667][T13327] ksys_read+0xdc/0x1a0 [ 560.375705][T13327] __x64_sys_read+0x40/0x50 [ 560.375812][T13327] x64_sys_call+0x2886/0x3020 [ 560.375846][T13327] do_syscall_64+0x12c/0x3b0 [ 560.375892][T13327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.375931][T13327] RIP: 0033:0x7fd74a37d68e [ 560.375986][T13327] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 560.376009][T13327] RSP: 002b:00007fd748e16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 560.376034][T13327] RAX: ffffffffffffffda RBX: 00007fd748e176c0 RCX: 00007fd74a37d68e [ 560.376114][T13327] RDX: 000000000000000f RSI: 00007fd748e170a0 RDI: 0000000000000005 [ 560.376150][T13327] RBP: 00007fd748e17090 R08: 0000000000000000 R09: 0000000000000000 [ 560.376167][T13327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.376184][T13327] R13: 00007fd74a636038 R14: 00007fd74a635fa0 R15: 00007fff1d476fc8 [ 560.376225][T13327] [ 560.623901][T13337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2733'. [ 560.738802][T13339] EXT4-fs: Ignoring removed i_version option [ 560.746190][T13339] EXT4-fs: Ignoring removed bh option [ 560.876894][T13339] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2734: inode #13: comm syz.3.2734: iget: illegal inode # [ 560.891853][T13339] loop3: lost filesystem error report for type 5 error -117 [ 560.894781][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 560.909931][ C1] EXT4-fs (loop3): initial error at time 262458: ext4_orphan_get:1397 [ 560.919381][ C1] EXT4-fs (loop3): last error at time 262458: ext4_orphan_get:1397 [ 561.196564][T13339] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2734: couldn't read orphan inode 13 (err -117) [ 561.213338][T13339] loop3: lost filesystem error report for type 5 error -117 [ 561.232331][T13351] EXT4-fs: Ignoring removed nobh option [ 561.253346][T13331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.295148][T13339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.350338][T13351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.386706][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2735'. [ 561.488882][T13355] netlink: 'syz.0.2737': attribute type 3 has an invalid length. [ 561.528388][T13331] EXT4-fs (loop2): shut down requested (0) [ 561.686804][T13339] EXT4-fs error (device loop3): ext4_resize_begin:60: comm syz.3.2734: resize_inode disabled but reserved GDT blocks non-zero [ 561.704656][T13355] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 561.801388][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.846501][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.884325][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2741'. [ 561.937761][T13362] tipc: Enabled bearer , priority 10 [ 561.998290][T13371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.049780][T13371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.063174][T13373] EXT4-fs (loop3): 1 truncate cleaned up [ 562.063564][T13373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.092355][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.628016][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.724849][T13394] set_capacity_and_notify: 5 callbacks suppressed [ 562.724920][T13394] loop4: detected capacity change from 0 to 512 [ 562.807119][T13394] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 562.839092][T13394] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.2748: corrupted xattr entries [ 562.850587][T13394] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 562.853725][T13394] EXT4-fs (loop4): Remounting filesystem read-only [ 562.863075][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 562.863093][ C0] EXT4-fs (loop4): initial error at time 262460: xattr_find_entry:337: inode 15 [ 562.863128][ C0] EXT4-fs (loop4): last error at time 262460: xattr_find_entry:337: inode 15 [ 562.894295][T13394] EXT4-fs (loop4): 1 truncate cleaned up [ 562.901098][T13394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.239238][T13399] loop5: detected capacity change from 0 to 512 [ 563.454978][T13399] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 563.531248][T13399] EXT4-fs (loop5): orphan cleanup on readonly fs [ 563.566652][T13399] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 563.622745][T13399] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 563.641453][T13399] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #16: comm syz.5.2750: corrupted xattr block 31: invalid header [ 563.681042][T13399] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 563.681181][T13399] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 563.690475][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 563.690493][ C0] EXT4-fs (loop5): initial error at time 262461: ext4_xattr_delete_inode:2972: inode 16 [ 563.690532][ C0] EXT4-fs (loop5): last error at time 262461: ext4_xattr_delete_inode:2972: inode 16 [ 563.773165][T13399] EXT4-fs (loop5): 1 orphan inode deleted [ 563.782581][T13412] FAULT_INJECTION: forcing a failure. [ 563.782581][T13412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.786150][T13399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 563.795653][T13412] CPU: 1 UID: 0 PID: 13412 Comm: syz.2.2755 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 563.795790][T13412] Tainted: [W]=WARN [ 563.795857][T13412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.795892][T13412] Call Trace: [ 563.795953][T13412] [ 563.795978][T13412] __dump_stack+0x1d/0x30 [ 563.796042][T13412] dump_stack_lvl+0x95/0xd0 [ 563.796114][T13412] dump_stack+0x15/0x1b [ 563.796282][T13412] should_fail_ex+0x263/0x280 [ 563.796344][T13412] should_fail+0xb/0x20 [ 563.796465][T13412] should_fail_usercopy+0x1a/0x20 [ 563.796522][T13412] _copy_to_user+0x20/0xa0 [ 563.796603][T13412] simple_read_from_buffer+0xb5/0x130 [ 563.796749][T13412] proc_fail_nth_read+0x10e/0x150 [ 563.796876][T13412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.796948][T13412] vfs_read+0x1ab/0x7f0 [ 563.797047][T13412] ? __rcu_read_unlock+0x4e/0x70 [ 563.797109][T13412] ? __fget_files+0x184/0x1c0 [ 563.797199][T13412] ? mutex_lock+0x57/0x90 [ 563.797285][T13412] ksys_read+0xdc/0x1a0 [ 563.797358][T13412] __x64_sys_read+0x40/0x50 [ 563.797467][T13412] x64_sys_call+0x2886/0x3020 [ 563.797536][T13412] do_syscall_64+0x12c/0x3b0 [ 563.797605][T13412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.797624][T13412] RIP: 0033:0x7f11d76bd68e [ 563.797663][T13412] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 563.797762][T13412] RSP: 002b:00007f11d6135fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 563.797863][T13412] RAX: ffffffffffffffda RBX: 00007f11d61366c0 RCX: 00007f11d76bd68e [ 563.797902][T13412] RDX: 000000000000000f RSI: 00007f11d61360a0 RDI: 0000000000000004 [ 563.798001][T13412] RBP: 00007f11d6136090 R08: 0000000000000000 R09: 0000000000000000 [ 563.798036][T13412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.798074][T13412] R13: 00007f11d7976128 R14: 00007f11d7976090 R15: 00007fffd09c0488 [ 563.798209][T13412] [ 564.100867][T13414] loop2: detected capacity change from 0 to 1024 [ 564.131226][T13414] EXT4-fs: test_dummy_encryption option not supported [ 564.306124][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 564.306141][ T28] audit: type=1400 audit(262462.190:23155): avc: denied { getopt } for pid=13392 comm="syz.5.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 564.558561][T13417] loop2: detected capacity change from 0 to 512 [ 564.656298][T13417] EXT4-fs (loop2): 1 orphan inode deleted [ 564.672380][T13417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.715944][ T30] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 564.803388][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 564.892994][T13422] syzkaller0: entered promiscuous mode [ 564.947649][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.957261][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.967265][T13422] syzkaller0: entered allmulticast mode [ 566.174013][T13433] __nla_validate_parse: 1 callbacks suppressed [ 566.174037][T13433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2763'. [ 566.229617][T13439] netlink: 'syz.4.2758': attribute type 10 has an invalid length. [ 566.252325][T13439] syz_tun: entered promiscuous mode [ 566.342087][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.388834][T13439] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 566.670278][T13458] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 566.680353][ T28] audit: type=1400 audit(262464.560:23156): avc: denied { shutdown } for pid=13430 comm="syz.3.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 566.719722][T13455] loop4: detected capacity change from 0 to 1024 [ 566.760032][T13455] EXT4-fs: Ignoring removed bh option [ 566.817734][T13460] loop2: detected capacity change from 0 to 512 [ 566.837956][T13455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 566.862498][T13460] EXT4-fs: Ignoring removed bh option [ 566.894684][ T28] audit: type=1400 audit(262464.770:23157): avc: denied { write } for pid=13454 comm="syz.4.2767" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 566.927828][T13460] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 566.956504][T13460] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2769: corrupted in-inode xattr: e_value size too large [ 566.983228][T13437] loop5: detected capacity change from 0 to 1024 [ 567.011372][T13460] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 567.011701][T13460] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2769: couldn't read orphan inode 15 (err -117) [ 567.020989][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 567.021027][ C0] EXT4-fs (loop2): initial error at time 262464: ext4_iget_extra_inode:5128: inode 15 [ 567.021104][ C0] EXT4-fs (loop2): last error at time 262464: ext4_iget_extra_inode:5128: inode 15 [ 567.124850][T13437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.141372][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 567.152376][T13460] loop2: lost filesystem error report for type 5 error -117 [ 567.171707][T13460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.179105][T13470] loop4: detected capacity change from 0 to 512 [ 567.213036][ T28] audit: type=1400 audit(262465.090:23158): avc: denied { write } for pid=13459 comm="syz.2.2769" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 567.239810][T13460] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2769: corrupted in-inode xattr: e_value size too large [ 567.264170][T13437] EXT4-fs (loop5): shut down requested (0) [ 567.275706][T13437] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 567.295892][T13470] EXT4-fs: Ignoring removed bh option [ 567.320471][ T28] audit: type=1400 audit(262465.090:23159): avc: denied { write } for pid=13459 comm="syz.2.2769" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 567.342771][T13437] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 567.354239][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.364207][T13470] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 567.386446][T13470] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2770: corrupted in-inode xattr: e_value size too large [ 567.444186][ T28] audit: type=1400 audit(262465.090:23160): avc: denied { write } for pid=13459 comm="syz.2.2769" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 567.470948][T13470] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 567.471285][T13470] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2770: couldn't read orphan inode 15 (err -117) [ 567.480644][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 567.480720][ C0] EXT4-fs (loop4): initial error at time 262465: ext4_iget_extra_inode:5128: inode 15 [ 567.480782][ C0] EXT4-fs (loop4): last error at time 262465: ext4_iget_extra_inode:5128: inode 15 [ 567.521357][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.534322][T13473] loop2: detected capacity change from 0 to 512 [ 567.579302][T13473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.603083][ T28] audit: type=1400 audit(262465.090:23161): avc: denied { write } for pid=13459 comm="syz.2.2769" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 567.623815][T13470] loop4: lost filesystem error report for type 5 error -117 [ 567.639033][ T28] audit: type=1400 audit(262465.140:23162): avc: denied { write } for pid=13436 comm="syz.5.2765" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 567.669460][ T28] audit: type=1400 audit(262465.550:23163): avc: denied { write } for pid=13472 comm="syz.2.2771" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 567.674474][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2771'. [ 567.694549][T13470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.715239][T13483] loop0: detected capacity change from 0 to 1024 [ 567.732644][T13470] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.2770: Unrecognised inode hash code 4 [ 567.737912][T13483] EXT4-fs: test_dummy_encryption option not supported [ 567.759345][T13470] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2770: Corrupt directory, running e2fsck is recommended [ 567.791749][T13481] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 567.798903][T13470] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.2770: Unrecognised inode hash code 4 [ 567.811618][T13481] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.836152][T13470] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2770: Corrupt directory, running e2fsck is recommended [ 567.859383][T13488] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2770: corrupted in-inode xattr: e_value size too large [ 567.912350][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.989140][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.012884][T13487] loop5: detected capacity change from 0 to 1024 [ 568.022329][T13481] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 568.022393][T13481] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.186753][T13497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.211019][T13497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.230008][T13497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2778'. [ 568.239964][T13487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.284319][T13487] EXT4-fs (loop5): shut down requested (0) [ 568.294340][T13481] bridge0: port 3(netdevsim1) entered disabled state [ 568.315493][T13481] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 568.342251][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.352027][T13481] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 568.361780][T13481] bridge0: port 3(netdevsim1) entered disabled state [ 568.372258][T13481] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 568.383538][T13481] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.473299][T13481] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 568.483940][T13481] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.553144][ T3442] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 568.562977][ T3442] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.577893][ T3442] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 568.586815][ T3442] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.595412][ T3442] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 568.603689][ T3442] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.618037][ T3442] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 568.633702][ T3442] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.663095][T13506] loop3: detected capacity change from 0 to 512 [ 568.683319][T13506] EXT4-fs: Ignoring removed bh option [ 568.695802][T13506] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 568.706241][T13506] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2781: corrupted in-inode xattr: e_value size too large [ 568.720716][T13506] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 568.720946][T13506] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2781: couldn't read orphan inode 15 (err -117) [ 568.730158][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 568.730192][ C0] EXT4-fs (loop3): initial error at time 262466: ext4_iget_extra_inode:5128: inode 15 [ 568.730254][ C0] EXT4-fs (loop3): last error at time 262466: ext4_iget_extra_inode:5128: inode 15 [ 568.768458][T13506] loop3: lost filesystem error report for type 5 error -117 [ 568.769676][T13506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.796521][T13506] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2781: corrupted in-inode xattr: e_value size too large [ 568.824300][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.075970][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2782'. [ 569.104775][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2782'. [ 569.836721][T13522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2785'. [ 569.947917][T13518] loop5: detected capacity change from 0 to 1024 [ 570.018722][T13525] loop3: detected capacity change from 0 to 1024 [ 570.028804][T13518] EXT4-fs: Ignoring removed bh option [ 570.066233][T13525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 570.110676][T13518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 570.128864][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 570.128878][ T28] audit: type=1400 audit(262468.010:23175): avc: denied { write } for pid=13519 comm="syz.3.2782" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 570.185404][T13535] loop0: detected capacity change from 0 to 512 [ 570.217106][ T351] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 6) [ 570.240068][T13535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.256978][ T28] audit: type=1400 audit(262468.060:23176): avc: denied { write } for pid=13517 comm="syz.5.2780" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 570.290795][ T3581] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 570.297138][T13503] Bluetooth: hci0: command 0x1003 tx timeout [ 570.327549][ T351] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 570.355994][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2789'. [ 570.366670][ T351] EXT4-fs (loop3): This should not happen!! Data will be lost [ 570.366670][ T351] [ 570.403485][ T28] audit: type=1400 audit(262468.220:23177): avc: denied { write } for pid=13534 comm="syz.0.2789" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 570.429029][ T351] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 570.460908][T13545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.496745][T13545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.513901][ T351] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 570.533721][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.544568][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2782'. [ 570.556396][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 570.567246][ T351] EXT4-fs (loop3): This should not happen!! Data will be lost [ 570.567246][ T351] [ 570.805280][T13520] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2782: bg 0: block 112: padding at end of block bitmap is not set [ 570.819969][T13520] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1556 with max blocks 2048 with error 28 [ 570.833294][T13520] EXT4-fs (loop3): This should not happen!! Data will be lost [ 570.833294][T13520] [ 570.843240][T13520] EXT4-fs (loop3): Total free blocks count 0 [ 570.849402][T13520] EXT4-fs (loop3): Free/Dirty block details [ 570.855587][T13520] EXT4-fs (loop3): free_blocks=0 [ 570.900901][ T3305] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 571.232974][T13550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.241679][T13550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.249728][T13550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2794'. [ 571.279706][T13554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.295999][T13556] loop3: detected capacity change from 0 to 4096 [ 571.304352][T13554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.316144][T13552] loop5: detected capacity change from 0 to 512 [ 571.326281][T13552] EXT4-fs: Ignoring removed bh option [ 571.336626][T13552] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 571.340285][T13556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.359367][T13556] netlink: 'syz.3.2793': attribute type 21 has an invalid length. [ 571.368548][T13556] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2793'. [ 571.378426][ T28] audit: type=1400 audit(262469.260:23178): avc: denied { write } for pid=13555 comm="syz.3.2793" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 571.407284][T13552] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2792: corrupted in-inode xattr: e_value size too large [ 571.441733][T13552] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 571.442057][T13552] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2792: couldn't read orphan inode 15 (err -117) [ 571.451440][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 571.451481][ C1] EXT4-fs (loop5): initial error at time 262469: ext4_iget_extra_inode:5128: inode 15 [ 571.451540][ C1] EXT4-fs (loop5): last error at time 262469: ext4_iget_extra_inode:5128: inode 15 [ 571.489975][T13552] loop5: lost filesystem error report for type 5 error -117 [ 571.491184][T13552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.513280][ T28] audit: type=1400 audit(262469.390:23179): avc: denied { write } for pid=13551 comm="syz.5.2792" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 571.534994][ T28] audit: type=1400 audit(262469.390:23180): avc: denied { write } for pid=13551 comm="syz.5.2792" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 571.556550][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.559988][ T28] audit: type=1400 audit(262469.420:23181): avc: denied { write } for pid=13551 comm="syz.5.2792" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 571.585008][T13552] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2792: corrupted in-inode xattr: e_value size too large [ 571.587282][ T28] audit: type=1400 audit(262469.450:23182): avc: denied { write } for pid=13551 comm="syz.5.2792" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 571.644980][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.716899][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2798'. [ 571.751962][T13564] loop5: detected capacity change from 0 to 512 [ 571.770880][T13564] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 571.794229][T13564] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #11: comm syz.5.2796: corrupted inode contents [ 571.807448][T13564] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 571.807862][T13564] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #11: comm syz.5.2796: mark_inode_dirty error [ 571.817244][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 571.817300][ C1] EXT4-fs (loop5): initial error at time 262469: mb_free_blocks:2049: inode 11: block 64 [ 571.817630][ C1] EXT4-fs (loop5): last error at time 262469: ext4_do_update_inode:5690: inode 11 [ 571.854940][T13564] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 571.856564][T13564] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2796: invalid indirect mapped block 1 (level 1) [ 571.888278][T13564] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 571.890056][T13564] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #11: comm syz.5.2796: corrupted inode contents [ 571.913264][T13564] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 571.915156][T13564] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 571.935553][T13564] loop5: lost filesystem error report for type 5 error -117 [ 571.939981][T13564] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #11: comm syz.5.2796: corrupted inode contents [ 571.967347][T13575] loop3: detected capacity change from 0 to 512 [ 571.982395][T13564] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 571.983104][T13564] EXT4-fs error (device loop5): ext4_truncate:4690: inode #11: comm syz.5.2796: mark_inode_dirty error [ 572.027837][T13575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.040308][T13564] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 572.041382][T13578] loop4: detected capacity change from 0 to 1024 [ 572.043219][T13564] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 572.051696][ T28] audit: type=1400 audit(262469.930:23183): avc: denied { write } for pid=13574 comm="syz.3.2801" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 572.059113][T13578] EXT4-fs: Ignoring removed bh option [ 572.100149][T13564] loop5: lost filesystem error report for type 5 error -117 [ 572.103202][T13564] EXT4-fs (loop5): 1 truncate cleaned up [ 572.120011][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.123181][T13564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.160375][T13578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 572.162378][T13564] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.2796: iget: bogus i_mode (3355) [ 572.176469][ T28] audit: type=1400 audit(262470.040:23184): avc: denied { write } for pid=13563 comm="syz.5.2796" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 572.269411][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.310829][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 572.373258][T13591] Failed to initialize the IGMP autojoin socket (err -2) [ 572.465359][T13589] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 572.465375][T13589] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 572.465404][T13589] System zones: 0-1, 15-15, 18-18, 34-34 [ 572.483618][T13589] EXT4-fs (loop5): orphan cleanup on readonly fs [ 572.497629][T13589] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 572.498217][T13589] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 572.499747][T13589] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2806: bad orphan inode 16 [ 572.531097][T13589] loop5: lost filesystem error report for type 5 error -117 [ 572.533743][T13589] ext4_test_bit(bit=15, block=18) = 1 [ 572.547583][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 572.547743][ C1] EXT4-fs (loop5): initial error at time 262470: ext4_orphan_get:1423 [ 572.547793][ C1] EXT4-fs (loop5): last error at time 262470: ext4_orphan_get:1423 [ 572.570959][T13589] is_bad_inode(inode)=0 [ 572.571039][T13589] NEXT_ORPHAN(inode)=0 [ 572.571096][T13589] max_ino=32 [ 572.571119][T13589] i_nlink=2 [ 572.573644][T13589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 572.618171][T13589] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 572.650049][T13591] program syz.4.2807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 572.663186][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.678141][T13595] FAULT_INJECTION: forcing a failure. [ 572.678141][T13595] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 572.678251][T13595] CPU: 0 UID: 0 PID: 13595 Comm: syz.5.2808 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 572.678284][T13595] Tainted: [W]=WARN [ 572.678342][T13595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 572.678353][T13595] Call Trace: [ 572.678359][T13595] [ 572.678367][T13595] __dump_stack+0x1d/0x30 [ 572.678394][T13595] dump_stack_lvl+0x95/0xd0 [ 572.678416][T13595] dump_stack+0x15/0x1b [ 572.678436][T13595] should_fail_ex+0x263/0x280 [ 572.678483][T13595] should_fail_alloc_page+0xf2/0x100 [ 572.678550][T13595] __alloc_frozen_pages_noprof+0x108/0x350 [ 572.678580][T13595] alloc_pages_mpol+0xb3/0x260 [ 572.678607][T13595] alloc_pages_noprof+0x8f/0x140 [ 572.678633][T13595] __pud_alloc+0x47/0x460 [ 572.678685][T13595] handle_mm_fault+0x1eae/0x2e70 [ 572.678723][T13595] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 572.678774][T13595] do_user_addr_fault+0x3fd/0x1050 [ 572.678812][T13595] exc_page_fault+0x62/0xa0 [ 572.678845][T13595] asm_exc_page_fault+0x26/0x30 [ 572.678863][T13595] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 572.678915][T13595] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 1e 02 00 66 2e [ 572.678952][T13595] RSP: 0018:ffffc900013afdf0 EFLAGS: 00050202 [ 572.678966][T13595] RAX: ffff8881019cf100 RBX: 0000000000000002 RCX: 0000000000000002 [ 572.678977][T13595] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: ffffc900013afe18 [ 572.678992][T13595] RBP: 0000000000000002 R08: 000000000000028c R09: 0000000000000000 [ 572.679006][T13595] R10: 0001c900013afe18 R11: 0001c900013afe19 R12: 00002000000003c0 [ 572.679094][T13595] R13: 0000000000000002 R14: ffffc900013afe18 R15: 00002000000003c0 [ 572.679112][T13595] _copy_from_user+0x6f/0xb0 [ 572.679172][T13595] __sys_bind+0x106/0x290 [ 572.679316][T13595] __x64_sys_bind+0x3f/0x50 [ 572.679337][T13595] x64_sys_call+0x2b30/0x3020 [ 572.679359][T13595] do_syscall_64+0x12c/0x3b0 [ 572.679451][T13595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.679478][T13595] RIP: 0033:0x7fd91fb7ce59 [ 572.679497][T13595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.679519][T13595] RSP: 002b:00007fd91e5d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 572.679598][T13595] RAX: ffffffffffffffda RBX: 00007fd91fdf5fa0 RCX: 00007fd91fb7ce59 [ 572.679614][T13595] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000003 [ 572.679626][T13595] RBP: 00007fd91e5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 572.679640][T13595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.679653][T13595] R13: 00007fd91fdf6038 R14: 00007fd91fdf5fa0 R15: 00007ffd999ad5a8 [ 572.679749][T13595] [ 572.720072][T13597] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 572.720134][T13597] System zones: 1-12 [ 572.720317][T13597] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2809: corrupted in-inode xattr: e_value size too large [ 573.009452][T13597] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 573.009684][T13597] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2809: couldn't read orphan inode 15 (err -117) [ 573.018915][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 573.018933][ C0] EXT4-fs (loop5): initial error at time 262470: ext4_iget_extra_inode:5128: inode 15 [ 573.018961][ C0] EXT4-fs (loop5): last error at time 262470: ext4_iget_extra_inode:5128: inode 15 [ 573.056414][T13597] loop5: lost filesystem error report for type 5 error -117 [ 573.057100][T13597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.091581][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.138107][T13602] netlink: 'syz.3.2811': attribute type 21 has an invalid length. [ 573.149776][T13602] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2811'. [ 573.159140][T13602] netlink: 'syz.3.2811': attribute type 4 has an invalid length. [ 573.223740][T13607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.237887][T13609] set_capacity_and_notify: 2 callbacks suppressed [ 573.237919][T13609] loop5: detected capacity change from 0 to 512 [ 573.251197][T13607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.262002][T13607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2812'. [ 573.281874][T13611] loop3: detected capacity change from 0 to 1024 [ 573.288238][T13609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.348481][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.365825][T13615] FAULT_INJECTION: forcing a failure. [ 573.365825][T13615] name failslab, interval 1, probability 0, space 0, times 0 [ 573.380276][T13615] CPU: 1 UID: 0 PID: 13615 Comm: syz.5.2815 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 573.380338][T13615] Tainted: [W]=WARN [ 573.380345][T13615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 573.380358][T13615] Call Trace: [ 573.380364][T13615] [ 573.380372][T13615] __dump_stack+0x1d/0x30 [ 573.380396][T13615] dump_stack_lvl+0x95/0xd0 [ 573.380417][T13615] dump_stack+0x15/0x1b [ 573.380503][T13615] should_fail_ex+0x263/0x280 [ 573.380524][T13615] should_failslab+0x8c/0xb0 [ 573.380556][T13615] kmem_cache_alloc_noprof+0x66/0x3f0 [ 573.380605][T13615] ? alloc_empty_file+0x70/0x1e0 [ 573.380647][T13615] alloc_empty_file+0x70/0x1e0 [ 573.380670][T13615] alloc_file_pseudo+0xf6/0x190 [ 573.380696][T13615] __shmem_file_setup+0x226/0x260 [ 573.380782][T13615] shmem_file_setup+0x3b/0x50 [ 573.380802][T13615] memfd_alloc_file+0x4e/0x300 [ 573.380832][T13615] __se_sys_memfd_create+0x2e1/0x3b0 [ 573.380957][T13615] __x64_sys_memfd_create+0x31/0x40 [ 573.381027][T13615] x64_sys_call+0x1f22/0x3020 [ 573.381122][T13615] do_syscall_64+0x12c/0x3b0 [ 573.381165][T13615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.381188][T13615] RIP: 0033:0x7fd91fb7ce59 [ 573.381204][T13615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.381264][T13615] RSP: 002b:00007fd91e5d6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 573.381284][T13615] RAX: ffffffffffffffda RBX: 0000000000000459 RCX: 00007fd91fb7ce59 [ 573.381303][T13615] RDX: 00007fd91e5d6ee0 RSI: 0000000000000000 RDI: 00007fd91fc12f4f [ 573.381384][T13615] RBP: 0000200000000240 R08: 00000000ffffffff R09: 0000000000000000 [ 573.381397][T13615] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000006c0 [ 573.381410][T13615] R13: 00007fd91e5d6ee0 R14: 00007fd91e5d6ea0 R15: 00002000000001c0 [ 573.381479][T13615] [ 573.629570][T13618] loop2: detected capacity change from 0 to 1024 [ 573.637690][T13618] EXT4-fs: Ignoring removed bh option [ 573.661184][T13618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 573.752857][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 573.873387][T13624] Failed to initialize the IGMP autojoin socket (err -2) [ 573.881564][ T30] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 573.891817][ T30] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.925812][ T30] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 573.935945][ T30] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.987264][ T30] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 573.997557][ T30] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.045959][ T30] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 574.064026][ T30] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.231451][T13659] loop5: detected capacity change from 0 to 512 [ 574.269550][T13659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 574.286086][T13624] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.327752][T13624] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.342452][T13669] loop0: detected capacity change from 0 to 256 [ 574.365911][T13624] bridge_slave_0: entered allmulticast mode [ 574.417665][T13624] bridge_slave_0: entered promiscuous mode [ 574.427229][T13624] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.434564][T13624] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.441763][T13624] bridge_slave_1: entered allmulticast mode [ 574.448492][T13624] bridge_slave_1: entered promiscuous mode [ 574.455770][T13663] Failed to initialize the IGMP autojoin socket (err -2) [ 574.473242][ T30] bridge_slave_1: left allmulticast mode [ 574.507880][ T30] bridge_slave_1: left promiscuous mode [ 574.513602][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.533149][T13670] program syz.4.2822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 574.573589][ T30] bridge_slave_0: left allmulticast mode [ 574.585385][ T30] bridge_slave_0: left promiscuous mode [ 574.597737][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.693598][ T30] bond0 (unregistering): (slave gretap1): Releasing active interface [ 574.739109][ T30] bond2 (unregistering): (slave geneve2): Releasing active interface [ 574.847051][ T30] bond0 (unregistering): Released all slaves [ 574.851118][ T30] bond1 (unregistering): Released all slaves [ 574.864736][ T30] bond2 (unregistering): Released all slaves [ 574.938613][T13624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.965513][T13624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.010207][T13624] smc: adding net device veth1_to_team with user defined pnetid S [ 575.034350][T13624] team0: Port device team_slave_0 added [ 575.073686][T13624] team0: Port device team_slave_1 added [ 575.085997][ T30] tipc: Left network mode [ 575.142329][ T30] hsr_slave_0: left promiscuous mode [ 575.142664][ T30] hsr_slave_1: left promiscuous mode [ 575.142916][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.143420][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.254931][T13693] loop0: detected capacity change from 0 to 512 [ 575.309164][ T30] team0 (unregistering): Port device team_slave_1 removed [ 575.330975][ T30] team0 (unregistering): Port device team_slave_0 removed [ 575.339643][T13693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.371598][T13696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.384793][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 575.384806][ T28] audit: type=1400 audit(262473.260:23192): avc: denied { write } for pid=13692 comm="syz.0.2825" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 575.422753][T13696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.447675][T13624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.475794][T13624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.507186][T13699] loop4: detected capacity change from 0 to 512 [ 575.514582][T13699] EXT4-fs: Ignoring removed nomblk_io_submit option [ 575.541815][T13624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.554490][T13699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.585048][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.596202][T13624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.605850][T13699] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 575.616383][ T28] audit: type=1400 audit(262473.480:23193): avc: denied { write } for pid=13698 comm="syz.4.2827" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 575.638780][T13624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.665118][T13699] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 575.677302][T13703] loop6: detected capacity change from 0 to 7 [ 575.683985][T13699] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.2827: Failed to acquire dquot type 1 [ 575.725708][T13624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.743802][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 575.753061][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 575.761669][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 575.770851][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 575.783938][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 575.793908][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 575.804002][T13703] loop6: unable to read partition table [ 575.812905][T13703] loop_reread_partitions: partition scan of loop6 (-ý? %`{5 FLQk݊A) failed (rc=-5) [ 575.838632][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 575.847828][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 575.856458][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 575.865657][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 575.873989][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 575.883184][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 575.892154][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 575.901348][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 575.909547][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 575.918737][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 575.954430][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.037742][T13708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.077262][ T30] IPVS: stop unused estimator thread 0... [ 576.087379][T13624] hsr_slave_0: entered promiscuous mode [ 576.102415][T13708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.121620][T13624] hsr_slave_1: entered promiscuous mode [ 576.132144][T13708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2829'. [ 576.143002][T13624] debugfs: 'hsr0' already exists in 'hsr' [ 576.157302][T13624] Cannot create hsr debugfs directory [ 576.210401][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 576.267757][ T28] audit: type=1400 audit(262474.150:23194): avc: denied { write } for pid=13710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.309325][T13724] loop5: detected capacity change from 0 to 512 [ 576.311389][ T28] audit: type=1400 audit(262474.180:23195): avc: denied { read } for pid=13723 comm="syz.5.2830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 576.338606][T13724] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 576.373435][ T28] audit: type=1400 audit(262474.190:23196): avc: denied { write } for pid=13727 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.396250][T13724] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2830: invalid indirect mapped block 9 (level 0) [ 576.409590][T13724] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 576.411643][T13724] EXT4-fs (loop5): 1 truncate cleaned up [ 576.420809][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 576.420824][ C1] EXT4-fs (loop5): initial error at time 262474: ext4_free_branches:1023: inode 11 [ 576.420860][ C1] EXT4-fs (loop5): last error at time 262474: ext4_free_branches:1023: inode 11 [ 576.455594][T13724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.474681][ T28] audit: type=1400 audit(262474.350:23197): avc: denied { write } for pid=13723 comm="syz.5.2830" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 576.547475][T13732] loop0: detected capacity change from 0 to 512 [ 576.566030][T13732] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 576.575148][T13732] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 576.584227][T13732] System zones: 0-1, 15-15, 18-18, 34-34 [ 576.604685][T13732] EXT4-fs (loop0): orphan cleanup on readonly fs [ 576.607342][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.613140][T13732] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 576.631717][T13732] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 576.647792][T13732] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 576.657140][T13732] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.2831: bad orphan inode 16 [ 576.668310][T13732] loop0: lost filesystem error report for type 5 error -117 [ 576.669264][T13732] ext4_test_bit(bit=15, block=18) = 1 [ 576.677405][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 576.677463][ C1] EXT4-fs (loop0): initial error at time 262474: ext4_orphan_get:1423 [ 576.677515][ C1] EXT4-fs (loop0): last error at time 262474: ext4_orphan_get:1423 [ 576.708892][T13732] is_bad_inode(inode)=0 [ 576.715610][T13732] NEXT_ORPHAN(inode)=0 [ 576.720157][T13732] max_ino=32 [ 576.723610][T13732] i_nlink=2 [ 576.746064][T13732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 576.785051][T13732] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 576.821419][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.895722][T13740] FAT-fs (loop0): bogus number of reserved sectors [ 576.902392][T13740] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 576.915362][T13740] FAT-fs (loop0): Can't find a valid FAT filesystem [ 577.149083][T13624] netdevsim netdevsim2 netdevsim0: renamed from eth5 [ 577.161663][T13624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 577.177758][T13624] netdevsim netdevsim2 netdevsim1: renamed from eth6 [ 577.196779][T13624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 577.222148][T13624] netdevsim netdevsim2 netdevsim2: renamed from eth7 [ 577.242782][T13624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 577.255836][T13624] netdevsim netdevsim2 netdevsim3: renamed from eth8 [ 577.268314][T13624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 577.937362][T13624] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.962107][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.962152][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.974147][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.974183][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.220915][T13763] EXT4-fs: Ignoring removed bh option [ 578.237326][T13763] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 578.454215][T13753] set_capacity_and_notify: 2 callbacks suppressed [ 578.454238][T13753] loop5: detected capacity change from 0 to 1024 [ 578.564087][ T28] audit: type=1400 audit(262476.440:23198): avc: denied { write } for pid=13770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.845080][T13763] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.2837: corrupted in-inode xattr: e_value size too large [ 578.886121][T13753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.904066][T13763] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 578.905178][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 578.921805][ C0] EXT4-fs (loop0): initial error at time 262476: ext4_iget_extra_inode:5128: inode 15 [ 578.926396][T13753] EXT4-fs (loop5): shut down requested (0) [ 578.931798][ C0] EXT4-fs (loop0): last error at time 262476: ext4_iget_extra_inode:5128: inode 15 [ 578.941459][T13763] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2837: couldn't read orphan inode 15 (err -117) [ 578.941594][T13763] loop0: lost filesystem error report for type 5 error -117 [ 579.000160][T13757] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 579.022720][T13763] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.2837: corrupted in-inode xattr: e_value size too large [ 579.046751][T13757] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 579.381212][T13820] loop3: detected capacity change from 0 to 512 [ 579.394762][T13820] EXT4-fs: Ignoring removed nobh option [ 579.507057][T13820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2838'. [ 579.874840][T13624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.908197][T13810] loop4: detected capacity change from 0 to 1024 [ 580.174454][T13624] veth0_vlan: entered promiscuous mode [ 580.185509][T13834] loop5: detected capacity change from 0 to 1024 [ 580.194078][T13624] veth1_vlan: entered promiscuous mode [ 580.201651][T13834] ext4: Unknown parameter 'uid' [ 580.284172][T13624] veth0_macvtap: entered promiscuous mode [ 580.345997][T13624] veth1_macvtap: entered promiscuous mode [ 580.391863][T13849] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2844'. [ 580.405529][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 580.405617][ T28] audit: type=1326 audit(262478.280:23227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.0.2843" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b03c0ce59 code=0x7ffc0000 [ 580.448933][T13852] EXT4-fs (loop4): shut down requested (0) [ 580.493751][T13810] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 580.513892][T13853] loop5: detected capacity change from 0 to 512 [ 580.530764][T13624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.554942][ T28] audit: type=1326 audit(262478.280:23228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.0.2843" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b03c0cbc2 code=0x7ffc0000 [ 580.585545][T13810] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 580.615493][T13624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.658968][T13624] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 580.711432][ T28] audit: type=1400 audit(262478.590:23229): avc: denied { write } for pid=13840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.756569][T13624] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 580.794179][ T28] audit: type=1400 audit(262478.670:23230): avc: denied { write } for pid=13861 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.819271][T13624] wireguard: wg0: Could not create IPv4 socket [ 580.839658][T13624] wireguard: wg1: Could not create IPv4 socket [ 580.860559][T13624] wireguard: wg2: Could not create IPv4 socket [ 580.869947][ T28] audit: type=1326 audit(262478.730:23231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.0.2843" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b03c0ce59 code=0x7ffc0000 [ 580.877280][T13853] tmpfs: Unknown parameter 'L' [ 580.895408][ T28] audit: type=1326 audit(262478.730:23232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.0.2843" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b03c0ce59 code=0x7ffc0000 [ 580.925508][ T28] audit: type=1326 audit(262478.730:23233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.0.2843" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3b03c0cc57 code=0x7ffc0000 [ 580.950729][ T28] audit: type=1326 audit(262478.730:23234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.0.2843" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3b03bc9b51 code=0x7ffc0000 [ 581.024568][ T28] audit: type=1326 audit(262478.730:23235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.0.2843" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3b03c0dc49 code=0x7ffc0000 [ 581.059279][T13868] loop4: detected capacity change from 0 to 512 [ 581.088173][T13868] EXT4-fs: Ignoring removed bh option [ 581.104782][T13868] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 581.113229][ T28] audit: type=1326 audit(262478.730:23236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.0.2843" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3b03bc9bbb code=0x7ffc0000 [ 581.158122][T13868] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2845: corrupted in-inode xattr: e_value size too large [ 581.186392][T13868] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 581.188985][T13868] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2845: couldn't read orphan inode 15 (err -117) [ 581.198269][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 581.198302][ C1] EXT4-fs (loop4): initial error at time 262479: ext4_iget_extra_inode:5128: inode 15 [ 581.198387][ C1] EXT4-fs (loop4): last error at time 262479: ext4_iget_extra_inode:5128: inode 15 [ 581.237795][T13868] loop4: lost filesystem error report for type 5 error -117 [ 581.238784][T13885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.298763][T13868] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2845: corrupted in-inode xattr: e_value size too large [ 581.332811][T13885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.415139][T13900] netlink: 'syz.4.2850': attribute type 10 has an invalid length. [ 581.433553][T13900] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2850'. [ 581.486140][T13878] loop5: detected capacity change from 0 to 4096 [ 581.534842][T13878] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 581.723294][T13927] loop0: detected capacity change from 0 to 512 [ 581.760224][T13927] EXT4-fs: Ignoring removed bh option [ 581.784363][T13927] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 581.821687][T13927] loop0: detected capacity change from 0 to 512 [ 581.841528][T13917] Failed to initialize the IGMP autojoin socket (err -2) [ 581.871780][T13927] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.2855: corrupted inode contents [ 581.890029][ T351] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 581.895120][T13927] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #2: comm syz.0.2855: mark_inode_dirty error [ 581.922008][T13927] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.2855: corrupted inode contents [ 581.944143][ T351] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.951692][T13927] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.2855: mark_inode_dirty error [ 581.975888][T13946] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #2: comm syz.0.2855: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 581.975888][T13946] [ 582.061351][T13946] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.2855: corrupted inode contents [ 582.097989][ T351] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 582.126871][T13946] EXT4-fs error (device loop0): ext4_append:88: inode #2: comm syz.0.2855: mark_inode_dirty error [ 582.130002][T13924] loop4: detected capacity change from 0 to 1024 [ 582.153176][ T351] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.155812][T13946] EXT4-fs error (device loop0) in ext4_append:100: Corrupt filesystem [ 582.332711][T13924] EXT4-fs (loop4): shut down requested (0) [ 582.341840][ T351] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 582.398643][T13924] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 582.499427][ T351] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.525807][T13924] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 582.617652][ T351] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 582.730500][ T351] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.904213][T13961] Failed to initialize the IGMP autojoin socket (err -2) [ 582.962614][T13992] EXT4-fs: Ignoring removed nobh option [ 582.982867][T13990] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 583.002466][T13990] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.2861: lblock 2 mapped to illegal pblock 2 (length 1) [ 583.044072][ T351] bridge_slave_1: left allmulticast mode [ 583.049847][ T351] bridge_slave_1: left promiscuous mode [ 583.056396][T13990] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 583.057482][T13990] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.2861: lblock 0 mapped to illegal pblock 48 (length 1) [ 583.062082][T13992] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2862'. [ 583.066601][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 583.066624][ C0] EXT4-fs (loop4): initial error at time 262480: ext4_map_blocks:791: inode 3: block 2 [ 583.066663][ C0] EXT4-fs (loop4): last error at time 262480: ext4_map_blocks:791: inode 3: block 2 [ 583.066801][T13990] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 583.067003][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.139987][T13990] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.2861: Failed to acquire dquot type 0 [ 583.163619][T13990] loop4: lost filesystem error report for type 5 error -117 [ 583.163729][T13990] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 583.180984][T13990] loop4: lost filesystem error report for type 5 error -117 [ 583.181063][T13990] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.2861: mark_inode_dirty error [ 583.199985][T13990] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 583.200099][T13990] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 583.240434][T13990] EXT4-fs (loop4): 1 orphan inode deleted [ 583.260610][T13992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2862'. [ 583.270301][ T4964] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 583.270340][ T4964] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 583.270533][ T4964] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 0 [ 583.270560][ T4964] loop4: lost filesystem error report for type 5 error -117 [ 583.312017][T13992] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2862'. [ 583.336778][T13992] netlink: 'syz.0.2862': attribute type 2 has an invalid length. [ 583.349247][ T351] bridge_slave_0: left allmulticast mode [ 583.368988][ T351] bridge_slave_0: left promiscuous mode [ 583.380709][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.383198][T13992] netlink: 'syz.0.2862': attribute type 3 has an invalid length. [ 583.406798][T13992] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2862'. [ 583.428420][T14013] EXT4-fs: Ignoring removed nobh option [ 583.482005][T14013] EXT4-fs (loop5): orphan cleanup on readonly fs [ 583.506224][T14013] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.2864: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 583.521286][T14013] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 583.521518][T14013] EXT4-fs (loop5): Remounting filesystem read-only [ 583.530715][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 583.530744][ C1] EXT4-fs (loop5): initial error at time 262481: ext4_xattr_inode_update_ref:1037: inode 11 [ 583.530784][ C1] EXT4-fs (loop5): last error at time 262481: ext4_xattr_inode_update_ref:1037: inode 11 [ 583.565048][T14013] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.5.2864: ea_inode dec ref err=-117 [ 583.577997][T14013] EXT4-fs (loop5): 1 orphan inode deleted [ 584.006594][ T3298] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 584.031762][ T3298] loop4: lost filesystem error report for type 5 error -117 [ 584.031901][ T3298] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 584.066034][ T3298] loop4: lost filesystem error report for type 5 error -117 [ 584.066193][ T3298] EXT4-fs error (device loop4): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 584.084982][ T3298] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 584.103816][T14073] set_capacity_and_notify: 4 callbacks suppressed [ 584.103847][T14073] loop0: detected capacity change from 0 to 1024 [ 584.132787][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2866'. [ 584.201319][ T351] bond4 (unregistering): (slave gretap1): Releasing active interface [ 584.229981][T14082] netlink: 'syz.5.2867': attribute type 27 has an invalid length. [ 584.242379][T14082] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2867'. [ 584.257901][T14089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.292498][T14089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.335120][T14100] loop4: detected capacity change from 0 to 128 [ 584.346474][T14100] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 584.399318][ T351] bond0 (unregistering): Released all slaves [ 584.411188][ T351] bond1 (unregistering): Released all slaves [ 584.421745][ T351] bond2 (unregistering): Released all slaves [ 584.434216][ T351] bond3 (unregistering): Released all slaves [ 584.446825][ T351] bond4 (unregistering): Released all slaves [ 584.450244][T14090] program syz.0.2868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 584.467733][ T351] bond5 (unregistering): Released all slaves [ 584.477154][ T351] bond6 (unregistering): Released all slaves [ 584.489308][T14081] Failed to initialize the IGMP autojoin socket (err -2) [ 584.497073][T14082] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 584.551209][ T351] hsr_slave_0: left promiscuous mode [ 584.566796][ T351] hsr_slave_1: left promiscuous mode [ 584.592952][ T351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.616878][ T351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.634337][ T351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.655292][ T351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.667371][T14126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.681995][T14126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.691085][ T351] veth1_macvtap: left promiscuous mode [ 584.701773][ T351] veth0_macvtap: left promiscuous mode [ 584.724347][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2874'. [ 584.794758][ T351] team0 (unregistering): Port device team_slave_1 removed [ 585.008397][T14122] Failed to initialize the IGMP autojoin socket (err -2) [ 585.201410][T14177] loop0: detected capacity change from 0 to 1024 [ 585.282017][T14177] loop0: detected capacity change from 0 to 1024 [ 585.311276][T14177] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 585.334420][T14177] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.2876: lblock 2 mapped to illegal pblock 2 (length 1) [ 585.377610][T14177] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 585.377744][T14177] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.2876: lblock 0 mapped to illegal pblock 48 (length 1) [ 585.377780][T14177] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 585.377922][T14177] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2876: Failed to acquire dquot type 0 [ 585.377955][T14177] loop0: lost filesystem error report for type 5 error -117 [ 585.378027][T14177] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 585.378043][T14177] loop0: lost filesystem error report for type 5 error -117 [ 585.378126][T14177] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.2876: mark_inode_dirty error [ 585.378152][T14177] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 585.378222][T14177] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 585.378337][T14177] EXT4-fs (loop0): 1 orphan inode deleted [ 585.395069][ T3442] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 585.542228][T14179] Failed to initialize the IGMP autojoin socket (err -2) [ 585.561208][ T3442] __quota_error: 108 callbacks suppressed [ 585.561226][ T3442] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 585.561341][ T3442] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 0 [ 585.649297][ T28] audit: type=1400 audit(262483.530:23340): avc: denied { write } for pid=14183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.686712][ T28] audit: type=1400 audit(262483.570:23341): avc: denied { write } for pid=14204 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.817233][ T28] audit: type=1400 audit(262483.700:23342): avc: denied { write } for pid=14208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.852172][T14201] loop5: detected capacity change from 0 to 1024 [ 585.871163][ T28] audit: type=1400 audit(262483.750:23343): avc: denied { write } for pid=14220 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.958900][ T28] audit: type=1400 audit(262483.840:23344): avc: denied { write } for pid=14200 comm="syz.5.2877" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 585.961250][T14201] EXT4-fs (loop5): shut down requested (0) [ 586.026764][T14201] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 586.041136][ T28] audit: type=1400 audit(262483.920:23345): avc: denied { write } for pid=14225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.069434][ T3303] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 586.069908][T14201] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 586.089994][ T3303] loop0: lost filesystem error report for type 5 error -117 [ 586.097110][ T3303] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 586.124900][T14239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2880'. [ 586.136935][ T28] audit: type=1400 audit(262484.020:23346): avc: denied { write } for pid=14236 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.164633][ T3303] loop0: lost filesystem error report for type 5 error -117 [ 586.164767][ T3303] EXT4-fs error (device loop0): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 586.194578][ T3303] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 586.292773][T14257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.307153][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2878'. [ 586.343646][T14257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.372652][T14243] Failed to initialize the IGMP autojoin socket (err -2) [ 586.440464][ T28] audit: type=1400 audit(262484.320:23347): avc: denied { write } for pid=14249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.497972][ T28] audit: type=1400 audit(262484.380:23348): avc: denied { write } for pid=14277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.520890][T14247] loop0: detected capacity change from 0 to 512 [ 586.555793][T14247] EXT4-fs: Ignoring removed bh option [ 586.586003][T14247] EXT4-fs (loop0): 1 truncate cleaned up [ 586.665041][T14285] loop4: detected capacity change from 0 to 512 [ 586.675672][T14285] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 586.722346][T14285] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.2883: corrupted xattr entries [ 586.738069][T14285] EXT4-fs (loop4): Remounting filesystem read-only [ 586.744614][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 586.744632][ C1] EXT4-fs (loop4): initial error at time 262484: xattr_find_entry:337: inode 15 [ 586.744662][ C1] EXT4-fs (loop4): last error at time 262484: xattr_find_entry:337: inode 15 [ 586.769098][T14285] EXT4-fs (loop4): 1 truncate cleaned up [ 587.890024][T14321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.239042][T14325] loop0: detected capacity change from 0 to 512 [ 588.573388][T14321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.694587][T14325] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 588.984794][T14301] Failed to initialize the IGMP autojoin socket (err -2) [ 590.066659][ T3298] EXT4-fs unmount: 26 callbacks suppressed [ 590.066709][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.076124][T14325] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.2884: corrupted xattr entries [ 591.087723][T14325] fserror_report: 1 callbacks suppressed [ 591.087734][T14325] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 591.093927][T14325] EXT4-fs (loop0): Remounting filesystem read-only [ 591.103080][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 591.103120][ C1] EXT4-fs (loop0): initial error at time 262488: xattr_find_entry:337: inode 15 [ 591.103142][ C1] EXT4-fs (loop0): last error at time 262488: xattr_find_entry:337: inode 15 [ 591.134287][T14325] EXT4-fs (loop0): 1 truncate cleaned up [ 591.140791][T14325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.254547][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 591.254565][ T28] audit: type=1400 audit(262489.120:23353): avc: denied { write } for pid=14337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.298925][ T28] audit: type=1400 audit(262489.180:23354): avc: denied { write } for pid=14355 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.470320][ T28] audit: type=1400 audit(262489.350:23355): avc: denied { write } for pid=14358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.512613][ T28] audit: type=1400 audit(262489.390:23356): avc: denied { write } for pid=14369 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.699432][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.724850][ T28] audit: type=1400 audit(262489.610:23357): avc: denied { write } for pid=14372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.750295][T14385] Failed to initialize the IGMP autojoin socket (err -2) [ 591.804631][T14384] syz.2.2891: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 591.823675][ T28] audit: type=1400 audit(262489.660:23358): avc: denied { write } for pid=14387 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.853404][T14392] loop0: detected capacity change from 0 to 1024 [ 591.861982][T14384] CPU: 1 UID: 0 PID: 14384 Comm: syz.2.2891 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 591.862017][T14384] Tainted: [W]=WARN [ 591.862023][T14384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 591.862036][T14384] Call Trace: [ 591.862049][T14384] [ 591.862085][T14384] __dump_stack+0x1d/0x30 [ 591.862116][T14384] dump_stack_lvl+0x95/0xd0 [ 591.862141][T14384] dump_stack+0x15/0x1b [ 591.862159][T14384] warn_alloc+0x145/0x1c0 [ 591.862183][T14384] ? rb_next+0x5c/0x80 [ 591.862323][T14384] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 591.862349][T14384] ? ctx_sched_in+0x3e9/0x410 [ 591.862385][T14384] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 591.862447][T14384] ? __rcu_read_unlock+0x4e/0x70 [ 591.862467][T14384] ? avc_has_perm_noaudit+0xab/0x130 [ 591.862542][T14384] vmalloc_user_noprof+0x7d/0xb0 [ 591.862568][T14384] ? xskq_create+0x80/0xe0 [ 591.862691][T14384] xskq_create+0x80/0xe0 [ 591.862841][T14384] xsk_init_queue+0x70/0xb0 [ 591.862932][T14384] xsk_setsockopt+0x477/0x640 [ 591.862968][T14384] ? __pfx_xsk_setsockopt+0x10/0x10 [ 591.863011][T14384] __sys_setsockopt+0x184/0x200 [ 591.863125][T14384] __x64_sys_setsockopt+0x64/0x80 [ 591.863151][T14384] x64_sys_call+0x2327/0x3020 [ 591.863247][T14384] do_syscall_64+0x12c/0x3b0 [ 591.863291][T14384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.863372][T14384] RIP: 0033:0x7fb2f028ce59 [ 591.863426][T14384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.863444][T14384] RSP: 002b:00007fb2eecdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 591.863464][T14384] RAX: ffffffffffffffda RBX: 00007fb2f0505fa0 RCX: 00007fb2f028ce59 [ 591.863481][T14384] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 591.863498][T14384] RBP: 00007fb2f0322d6f R08: 0000000000000004 R09: 0000000000000000 [ 591.863532][T14384] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 591.863560][T14384] R13: 00007fb2f0506038 R14: 00007fb2f0505fa0 R15: 00007ffd099aa5a8 [ 591.863584][T14384] [ 592.072030][T14384] Mem-Info: [ 592.075816][T14384] active_anon:15474 inactive_anon:1 isolated_anon:0 [ 592.075816][T14384] active_file:23888 inactive_file:2706 isolated_file:0 [ 592.075816][T14384] unevictable:0 dirty:448 writeback:0 [ 592.075816][T14384] slab_reclaimable:3715 slab_unreclaimable:48467 [ 592.075816][T14384] mapped:30009 shmem:555 pagetables:3550 [ 592.075816][T14384] sec_pagetables:0 bounce:0 [ 592.075816][T14384] kernel_misc_reclaimable:0 [ 592.075816][T14384] free:1833416 free_pcp:9434 free_cma:0 [ 592.127142][T14384] Node 0 active_anon:62268kB inactive_anon:4kB active_file:95552kB inactive_file:10756kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120148kB dirty:1772kB writeback:0kB shmem:2228kB kernel_stack:3936kB pagetables:14200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 592.164853][T14385] program syz.4.2886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 592.182734][T14384] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 592.216616][T14384] lowmem_reserve[]: 0 2878 7857 7857 [ 592.222522][T14384] Node 0 DMA32 free:2944360kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947988kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 592.265629][T14384] lowmem_reserve[]: 0 0 4978 4978 [ 592.271294][T14384] Node 0 Normal free:4374756kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63544kB inactive_anon:4kB active_file:95552kB inactive_file:10756kB unevictable:0kB writepending:1772kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:31564kB local_pcp:17040kB free_cma:0kB [ 592.324564][T14384] lowmem_reserve[]: 0 0 0 0 [ 592.334693][T14384] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 592.355834][T14400] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2892'. [ 592.365506][T14384] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 3*16kB (M) 1*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944360kB [ 592.412856][T14384] Node 0 Normal: 1684*4kB (UME) 1046*8kB (UM) 190*16kB (UM) 455*32kB (UME) 307*64kB (UM) 325*128kB (UME) 212*256kB (UME) 180*512kB (UM) 135*1024kB (UME) 95*2048kB (UME) 928*4096kB (UM) = 4374272kB [ 592.413231][T14384] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 592.413252][T14384] 27048 total pagecache pages [ 592.413274][T14384] 6 pages in swap cache [ 592.413283][T14384] Free swap = 124968kB [ 592.413291][T14384] Total swap = 124996kB [ 592.413300][T14384] 2097051 pages RAM [ 592.413308][T14384] 0 pages HighMem/MovableOnly [ 592.413317][T14384] 81655 pages reserved [ 592.455894][T14410] netlink: 642 bytes leftover after parsing attributes in process `syz.5.2892'. [ 592.485299][T14390] Failed to initialize the IGMP autojoin socket (err -2) [ 592.548197][T14419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.557886][T14419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.567096][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2894'. [ 592.580694][ T28] audit: type=1400 audit(262490.460:23359): avc: denied { write } for pid=14403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.635847][ T28] audit: type=1400 audit(262490.520:23360): avc: denied { write } for pid=14423 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.737504][ T28] audit: type=1400 audit(262490.620:23361): avc: denied { write } for pid=14426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.768251][ T28] audit: type=1400 audit(262490.650:23362): avc: denied { write } for pid=14437 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.385005][T14531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.390283][T14528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2895'. [ 593.405485][T14531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.424267][T14533] loop5: detected capacity change from 0 to 1024 [ 593.609448][T14537] Failed to initialize the IGMP autojoin socket (err -2) [ 593.780403][T14535] loop4: detected capacity change from 0 to 1024 [ 593.886799][T14535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.956838][T14535] EXT4-fs (loop4): shut down requested (0) [ 593.990011][T14535] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 593.997455][T14581] loop0: detected capacity change from 0 to 512 [ 594.000386][T14535] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 594.041848][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.116703][T14581] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 594.170465][T14581] EXT4-fs (loop0): 1 truncate cleaned up [ 594.183880][T14581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.701016][T14664] loop4: detected capacity change from 0 to 512 [ 594.717818][T14664] EXT4-fs: Ignoring removed bh option [ 594.739717][T14664] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 594.755233][T14659] Failed to initialize the IGMP autojoin socket (err -2) [ 594.775107][T14664] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2902: corrupted in-inode xattr: e_value size too large [ 594.812676][T14664] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 594.813053][T14664] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2902: couldn't read orphan inode 15 (err -117) [ 594.822273][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 594.822337][ C1] EXT4-fs (loop4): initial error at time 262492: ext4_iget_extra_inode:5128: inode 15 [ 594.822441][ C1] EXT4-fs (loop4): last error at time 262492: ext4_iget_extra_inode:5128: inode 15 [ 594.898472][T14664] loop4: lost filesystem error report for type 5 error -117 [ 594.899295][T14664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.966659][T14664] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2902: corrupted in-inode xattr: e_value size too large [ 595.010883][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.858103][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.884656][T14798] netlink: 'syz.4.2905': attribute type 16 has an invalid length. [ 595.951446][T14798] netlink: 600 bytes leftover after parsing attributes in process `syz.4.2905'. [ 596.134931][T14808] Failed to initialize the IGMP autojoin socket (err -2) [ 596.228247][T14847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.228404][T14847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.302880][ T28] kauditd_printk_skb: 270 callbacks suppressed [ 596.302896][ T28] audit: type=1400 audit(262494.180:23633): avc: denied { write } for pid=14844 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.344525][ T28] audit: type=1400 audit(262494.220:23634): avc: denied { write } for pid=14857 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.490611][ T28] audit: type=1400 audit(262494.370:23635): avc: denied { write } for pid=14860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.521464][ T28] audit: type=1400 audit(262494.400:23636): avc: denied { write } for pid=14871 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.390118][T14912] loop5: detected capacity change from 0 to 1024 [ 597.408798][T14912] EXT4-fs (loop5): filesystem too large to mount safely on this system [ 597.594857][T14922] macsec1: entered promiscuous mode [ 597.600267][T14922] macsec1: entered allmulticast mode [ 598.181622][T14935] Failed to initialize the IGMP autojoin socket (err -2) [ 598.197895][T14918] Failed to initialize the IGMP autojoin socket (err -2) [ 598.478956][T14935] program syz.5.2916 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.171338][ T28] audit: type=1400 audit(262496.650:23637): avc: denied { write } for pid=14961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.194269][ T28] audit: type=1400 audit(262496.670:23638): avc: denied { write } for pid=14972 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.216084][ T28] audit: type=1400 audit(262496.770:23639): avc: denied { write } for pid=14975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.239203][ T28] audit: type=1400 audit(262496.780:23640): avc: denied { write } for pid=14986 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.260919][ T28] audit: type=1400 audit(262497.000:23641): avc: denied { write } for pid=14997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.283811][ T28] audit: type=1400 audit(262497.020:23642): avc: denied { write } for pid=15008 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.565200][T15055] netlink: 'syz.5.2920': attribute type 1 has an invalid length. [ 599.584904][T15055] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2920'. [ 599.659674][T15061] loop2: detected capacity change from 0 to 1024 [ 599.685506][T15061] EXT4-fs: Ignoring removed bh option [ 599.715143][T15061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 599.799768][T15091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.799939][T15091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.826346][T15066] Failed to initialize the IGMP autojoin socket (err -2) [ 599.955983][T13624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 601.059636][T15227] ================================================================== [ 601.067740][T15227] BUG: KCSAN: data-race in copy_mm / percpu_counter_destroy_many [ 601.075469][T15227] [ 601.077793][T15227] write to 0xffff8881054dea58 of 8 bytes by task 15090 on cpu 1: [ 601.085514][T15227] percpu_counter_destroy_many+0xc7/0x2b0 [ 601.091249][T15227] __mmdrop+0x25d/0x3f0 [ 601.095406][T15227] finish_task_switch+0x225/0x320 [ 601.100431][T15227] __schedule+0x951/0xd40 [ 601.104760][T15227] schedule+0x5e/0xd0 [ 601.108741][T15227] do_nanosleep+0x95/0x330 [ 601.113176][T15227] hrtimer_nanosleep+0xf4/0x290 [ 601.118046][T15227] common_nsleep+0x62/0x80 [ 601.122463][T15227] __se_sys_clock_nanosleep+0x223/0x260 [ 601.128009][T15227] __x64_sys_clock_nanosleep+0x55/0x70 [ 601.133468][T15227] x64_sys_call+0x146e/0x3020 [ 601.138148][T15227] do_syscall_64+0x12c/0x3b0 [ 601.142750][T15227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.148700][T15227] [ 601.151025][T15227] read to 0xffff8881054de540 of 1664 bytes by task 15227 on cpu 0: [ 601.158909][T15227] copy_mm+0xe1/0x370 [ 601.162891][T15227] copy_process+0x1087/0x2370 [ 601.167609][T15227] kernel_clone+0x1c0/0x5f0 [ 601.172129][T15227] __x64_sys_clone+0x143/0x180 [ 601.176901][T15227] x64_sys_call+0x1222/0x3020 [ 601.181599][T15227] do_syscall_64+0x12c/0x3b0 [ 601.186223][T15227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.192132][T15227] [ 601.194460][T15227] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to send rpc fd=3 want=9192 sent=0 n=-1 (errno 32: Broken pipe) [ 601.200625][T15227] CPU: 0 UID: 0 PID: 15227 Comm: dhcpcd-run-hook Tainted: G W syzkaller #0 PREEMPT(lazy) [ 601.212047][T15227] Tainted: [W]=WARN [ 601.215852][T15227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 601.225908][T15227] ================================================================== [ 601.286986][T15241] netlink: 'syz.5.2925': attribute type 1 has an invalid length. [ 601.299752][T15240] loop2: detected capacity change from 0 to 512 [ 601.351653][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 601.351748][ T28] audit: type=1400 audit(262499.230:23671): avc: denied { write } for pid=15227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.402586][T15241] bond1: (slave geneve2): Opening slave failed [ 601.431767][ T28] audit: type=1400 audit(262499.310:23672): avc: denied { write } for pid=15247 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.436268][T15240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.499700][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2926'. [ 601.508698][ T28] audit: type=1400 audit(262499.380:23673): avc: denied { write } for pid=15239 comm="syz.2.2926" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 601.552042][ T3298] syz_tun (unregistering): left allmulticast mode [ 601.578339][ T3298] bond0: (slave syz_tun): Releasing backup interface [ 601.600867][T15091] syz_tun (unregistering): left allmulticast mode [ 601.616315][T15241] syz_tun (unregistering): left allmulticast mode [ 601.637552][ T28] audit: type=1400 audit(262499.520:23674): avc: denied { write } for pid=15251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.712330][ T28] audit: type=1400 audit(262499.550:23675): avc: denied { write } for pid=15263 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.781745][ T28] audit: type=1400 audit(262499.660:23676): avc: denied { write } for pid=15266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.829807][ T28] audit: type=1400 audit(262499.690:23677): avc: denied { write } for pid=15277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.872775][T15240] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.936330][ T28] audit: type=1400 audit(262499.820:23678): avc: denied { write } for pid=15280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.969528][ T28] audit: type=1400 audit(262499.850:23679): avc: denied { write } for pid=15291 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.011220][ T36] bridge_slave_0: left allmulticast mode [ 602.017010][ T36] bridge_slave_0: left promiscuous mode [ 602.022714][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.051795][ T36] bond3 (unregistering): (slave gretap1): Releasing active interface [ 602.094279][ T28] audit: type=1400 audit(262499.970:23680): avc: denied { write } for pid=15294 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.227959][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.237207][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.246324][ T36] bond0 (unregistering): Released all slaves [ 602.253943][ T36] bond1 (unregistering): Released all slaves [ 602.263002][ T36] bond2 (unregistering): Released all slaves [ 602.275501][ T36] bond3 (unregistering): Released all slaves [ 602.285180][ T36] bond4 (unregistering): Released all slaves [ 602.293925][ T36] bond5 (unregistering): Released all slaves [ 602.337701][ T36] tipc: Disabling bearer [ 602.346088][ T36] tipc: Disabling bearer [ 602.351724][ T36] tipc: Left network mode [ 602.408570][ T36] hsr_slave_0: left promiscuous mode [ 602.414263][ T36] hsr_slave_1: left promiscuous mode [ 602.420054][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.428275][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.457265][ T36] team0 (unregistering): Port device team_slave_1 removed [ 602.467792][ T36] team0 (unregistering): Port device team_slave_0 removed [ 602.787922][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.837758][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.877934][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.948245][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.038746][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.067552][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.118573][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.168099][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.244177][ T36] batadv1: left allmulticast mode [ 603.249388][ T36] batadv1: left promiscuous mode [ 603.254454][ T36] bridge0: port 3(batadv1) entered disabled state [ 603.261837][ T36] bridge_slave_1: left allmulticast mode [ 603.267969][ T36] bridge_slave_1: left promiscuous mode [ 603.273732][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.282007][ T36] bridge_slave_0: left allmulticast mode [ 603.287947][ T36] bridge_slave_0: left promiscuous mode [ 603.293665][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.304199][ T36] bridge_slave_1: left allmulticast mode [ 603.312914][ T36] bridge_slave_1: left promiscuous mode [ 603.319030][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.326895][ T36] bridge_slave_0: left allmulticast mode [ 603.332576][ T36] bridge_slave_0: left promiscuous mode [ 603.338553][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.427903][ T36] bond7 (unregistering): (slave gretap1): Releasing active interface [ 603.586689][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.596686][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.606868][ T36] bond0 (unregistering): Released all slaves [ 603.615222][ T36] bond1 (unregistering): Released all slaves [ 603.624472][ T36] bond2 (unregistering): Released all slaves [ 603.634088][ T36] bond3 (unregistering): Released all slaves [ 603.644003][ T36] bond4 (unregistering): Released all slaves [ 603.653092][ T36] bond5 (unregistering): Released all slaves [ 603.662445][ T36] bond6 (unregistering): Released all slaves [ 603.672381][ T36] bond7 (unregistering): Released all slaves [ 603.681391][ T36] bond8 (unregistering): Released all slaves [ 603.691653][ T36] bond9 (unregistering): Released all slaves [ 603.700781][ T36] bond10 (unregistering): Released all slaves [ 603.711317][ T36] bond11 (unregistering): Released all slaves [ 603.720576][ T36] bond12 (unregistering): Released all slaves [ 603.730269][ T36] bond13 (unregistering): Released all slaves [ 603.787759][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.797750][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.808010][ T36] bond0 (unregistering): Released all slaves [ 603.815905][ T36] bond1 (unregistering): Released all slaves [ 603.882164][ T36] tipc: Left network mode [ 603.890525][ T36] hsr_slave_0: left promiscuous mode [ 603.896443][ T36] hsr_slave_1: left promiscuous mode [ 603.902411][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.910077][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.919193][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.926664][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.936376][ T36] hsr_slave_0: left promiscuous mode [ 603.942196][ T36] hsr_slave_1: left promiscuous mode [ 603.947952][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.955875][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.963419][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.971313][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.984887][ T36] veth1_vlan: left allmulticast mode [ 603.990337][ T36] veth1_macvtap: left promiscuous mode [ 603.996138][ T36] veth0_macvtap: left promiscuous mode [ 604.001748][ T36] veth1_vlan: left promiscuous mode [ 604.007843][ T36] veth1_macvtap: left promiscuous mode [ 604.013354][ T36] veth0_macvtap: left promiscuous mode [ 604.019187][ T36] veth1_vlan: left promiscuous mode [ 604.025072][ T36] veth0_vlan: left promiscuous mode [ 604.147425][ T36] team0 (unregistering): Port device team_slave_1 removed [ 604.160875][ T36] team0 (unregistering): Port device team_slave_0 removed [ 604.233161][ T36] team0 (unregistering): Port device team_slave_1 removed [ 604.245412][ T36] team0 (unregistering): Port device team_slave_0 removed [ 607.073724][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 607.073742][ T28] audit: type=1400 audit(262504.950:23744): avc: denied { write } for pid=15794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.107821][ T28] audit: type=1400 audit(262504.990:23745): avc: denied { write } for pid=15805 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.196120][ T28] audit: type=1400 audit(262505.080:23746): avc: denied { write } for pid=15807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.226684][ T28] audit: type=1400 audit(262505.110:23747): avc: denied { write } for pid=15818 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.319051][ T28] audit: type=1400 audit(262505.200:23748): avc: denied { write } for pid=15820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.349416][ T28] audit: type=1400 audit(262505.230:23749): avc: denied { write } for pid=15831 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.444277][ T28] audit: type=1400 audit(262505.320:23750): avc: denied { write } for pid=15833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.476301][ T28] audit: type=1400 audit(262505.360:23751): avc: denied { write } for pid=15844 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.594399][ T28] audit: type=1400 audit(262505.470:23752): avc: denied { write } for pid=15847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.625846][ T28] audit: type=1400 audit(262505.510:23753): avc: denied { write } for pid=15858 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1