last executing test programs: 12m24.644451128s ago: executing program 4 (id=5038): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540), 0x0}, 0x20) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') socket$can_bcm(0x1d, 0x2, 0x2) semctl$GETALL(0x0, 0x0, 0xd, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4219, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x43a1bd76, 0x5, 0x20000000000007, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x800004000000000, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$inet6(0xa, 0x3, 0x7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x1}, 0x2002, 0x1000, 0x7, 0x7, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94010000100001002dbd700000000000ff020000000000000000000000000001ac141411000000000000000000000000fffeecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000ffffffff32000000ffffffff000000000000000000000000fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000feffffffffffffff00000000000000000900000000000000fdffffffffffffff0408400000000000090000000000000092020000000000000000b01c050000000000000000000000000000000a0002002c00000000000000580002006362632863616d656c6c69612900"/204], 0x194}}, 0x44050) 12m21.050002571s ago: executing program 4 (id=5045): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_io_uring_setup(0x30da, &(0x7f00000002c0)={0x0, 0x6968, 0x10000, 0x1, 0x2cd}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) 12m19.865331429s ago: executing program 4 (id=5048): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x2, &(0x7f0000000140)=""/29) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, r4, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x3, 0x2002) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200"], 0xfe44, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x10026, 0x10003, 0xffedfff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8919, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0x1}}], 0x2, 0x400c405) 12m15.880312175s ago: executing program 4 (id=5062): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x20, 0x6, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x8, 0x9c, &(0x7f0000001300)=""/156, 0x41000, 0xa}, 0x94) 12m15.778450128s ago: executing program 4 (id=5064): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x6}, 0x204, 0x0, 0x7bb00, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) unshare(0x2a020400) r1 = getpid() r2 = syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) close(r3) r5 = syz_open_procfs(r1, &(0x7f00000005c0)='net/icmp6\x00') move_mount(r5, &(0x7f00000000c0)='./mnt\x00', r5, 0x0, 0x177) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000700)={r6, &(0x7f0000000600)='\x00', 0x141800, &(0x7f0000000640)={@_ha_fsid={[0x1, 0x5]}, {0x9, 0x1, 0x7, 0x3}}, 0x800, &(0x7f0000000680), &(0x7f00000006c0)=0x10}) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") 12m14.259353986s ago: executing program 4 (id=5068): r0 = socket(0x29, 0x3, 0xffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x83, 0x7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', 0x0}) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x800c0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xe58b, 0x830d}, 0x0, 0x3, 0x0, 0x7, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000040)={0x90, @tick, 0x0, {0x6, 0x9}, 0x8a, 0x1, 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)=ANY=[@ANYBLOB="1c0000002e00090025bd7000fddbdf2505fff8"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close_range(r2, r3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r1, {}, {0xffe0, 0xa}, {0x1, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 11m57.530104606s ago: executing program 32 (id=5068): r0 = socket(0x29, 0x3, 0xffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x83, 0x7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', 0x0}) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x800c0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xe58b, 0x830d}, 0x0, 0x3, 0x0, 0x7, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000040)={0x90, @tick, 0x0, {0x6, 0x9}, 0x8a, 0x1, 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)=ANY=[@ANYBLOB="1c0000002e00090025bd7000fddbdf2505fff8"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close_range(r2, r3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r1, {}, {0xffe0, 0xa}, {0x1, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 10m57.769343658s ago: executing program 2 (id=5388): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000380)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@auto_da_alloc}]}, 0x1, 0x46d, &(0x7f0000000bc0)="$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") r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000019c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000004c0)={0x20, r2, 0x5a697397f1c7a8af, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) 10m57.147572477s ago: executing program 2 (id=5390): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x1, 0x2, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000049000/0x2000)=nil, 0x2000, 0x300000b, 0x20010, 0xffffffffffffffff, 0x19530000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_usbip_server_init(0x1) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000540)={[{@noinit_itable}, {@nodioread_nolock}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@usrquota}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") write$usbip_server(r2, &(0x7f0000000500)=ANY=[], 0x3f8e) shutdown(0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x10001) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$NILFS_IOCTL_GET_BDESCS(r3, 0xc0186e87, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f00000001c0), 0x4) setsockopt$inet6_buf(r5, 0x29, 0xcf, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) 10m51.873936854s ago: executing program 2 (id=5409): bpf$BPF_PROG_DETACH(0x8, 0x0, 0xa) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r2}, 0x38) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x3eb3, &(0x7f0000000040)={0x0, 0xe955, 0xc000, 0x3, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a01"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x213000, &(0x7f0000000280)="988b896bdeb639088e29513db5ed6d902930e585fcdca360a620400b9c2d3c9ef273d6396f4c2e3649a85d23701948c802d442a86f7e7408bbabe1732933de27338c4c2abcfd8cfc544e187a8047e29b10887f032fa9ce70c1713f86256062e2df8f103d4babf7dd490ef3991585f2171ef66dca1320636e9642f58b5f12012ef8b45abb73b6977b6bb1ccf042d6835aa2c1307082feb927831d1e25f9ed70fc51259f375df13e952fb702f9f9a677dd14ac63cd5fa96c8834ea60748deeb3e691dbbf0e9a1bebe5a22f8194a9bc74fbd00aba7d2b32b21686ee94f441f37cb75b411729b9a019bd68143532", 0xec, &(0x7f0000000380), &(0x7f0000000440), &(0x7f0000000480)="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") (async) r5 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0xfffffffffffffffd) 10m50.859490806s ago: executing program 2 (id=5410): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$cgroup_int(r1, &(0x7f0000000080)=0x7, 0x12) recvmsg$can_bcm(r0, 0x0, 0x40002000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 10m50.259488805s ago: executing program 2 (id=5415): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x2, &(0x7f0000000140)=""/29) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, r4, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x3, 0x2002) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000"], 0xfe44, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x10026, 0x10003, 0xffedfff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8919, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0x1}}], 0x2, 0x400c405) 10m47.980286477s ago: executing program 2 (id=5419): r0 = socket(0x29, 0x3, 0xffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x83, 0x7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', 0x0}) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x800c0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xe58b, 0x830d}, 0x0, 0x3, 0x0, 0x7, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r8, 0x0, 0x440e0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) r9 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000040)={0x90, @tick, 0x0, {0x6, 0x9}, 0x8a, 0x1, 0x1}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close_range(r3, r4, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 10m32.245709815s ago: executing program 33 (id=5419): r0 = socket(0x29, 0x3, 0xffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x83, 0x7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', 0x0}) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x800c0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xe58b, 0x830d}, 0x0, 0x3, 0x0, 0x7, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r8, 0x0, 0x440e0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) r9 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000040)={0x90, @tick, 0x0, {0x6, 0x9}, 0x8a, 0x1, 0x1}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close_range(r3, r4, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 2m46.579641448s ago: executing program 3 (id=7270): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x83ff, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x4, 0x80, 0x25, 0xa7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10810, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_config_ext={0x58, 0x5}, 0x30c0, 0xa, 0x2, 0x8, 0x4, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="217926bd7000ffdbdf250300000004000500050002000a00000008000800ac1e010106000100", @ANYRES32=0x0, @ANYBLOB="060001004e22000014000700"], 0x58}}, 0x4004) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'veth1_to_bond\x00', &(0x7f00000005c0)=@ethtool_wolinfo={0x5, 0x3, 0x7, "0067e287807f"}}) socket(0x1, 0x803, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x24060004) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x10) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000400), 0x0, 0x0, 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r5 = io_uring_setup(0x7fbf, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, 0x0, 0x1) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffffef, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r5], 0x78}}, 0x20000010) mount$cgroup(0x0, 0x0, 0x0, 0x10012, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) 2m42.500163527s ago: executing program 3 (id=7281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000001540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) 2m41.946920755s ago: executing program 3 (id=7284): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2b, 0x25dfdbdb, {0x2, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x1, 0x1000c}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x6}]}, 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r3 = getpgid(0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) finit_module(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="29c726bd7000fedbc8251900000008000300"], 0x1c}}, 0x0) r7 = getpid() ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x48800) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r8, 0x0, 0x0, 0x65, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x817, 0x82008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x2000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) 2m40.51532571s ago: executing program 3 (id=7288): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000001c0)=0x3d) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_ENDIAN(0x47, 0x1) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7d, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x5, 0x400}, 0x90) epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000000)={0x8, 0x978, 0x3, 0x80000000, 0x100000001, 0xc1f, 0x9, 0xffffffffffffff7f}, &(0x7f0000000040)={0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x2, 0x0, 0x6}, &(0x7f0000000080)={0x8, 0x1ff, 0x7fffffff, 0x2a8d, 0x2, 0x180000000000000, 0x5, 0x7}, &(0x7f00000000c0)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000100)={[0x5]}, 0x8}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={&(0x7f00000015c0), 0x6}, 0x400, 0x0, 0x7, 0xe, 0x6, 0x8001, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1, 0xb0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0xd0, 0xe0}, &(0x7f0000001400)=0xc) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x13, 0x15, "fee8a2ab78fc179f51f8a0e9a1af1e0b91c2f0fd967ab7f890020000000003002b78cc33a55f4c0c0000000000000000000000000000001b00", "28095397ba01177d02458dac00", "908f000e00000000000000000000001a00020000001900", [0x4, 0x80000001]}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000001a80)=0x5, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x2000, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) 2m39.315223138s ago: executing program 3 (id=7290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000009c0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, 0x0, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40000) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r4}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000), 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x80) 2m37.943204141s ago: executing program 3 (id=7297): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffd, 0x0, 0x0, 'queue0\x00'}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000800)="4792", 0x2, 0x4c180, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0}, 0x14) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r5, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$inet_sctp(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003640)=[{0x0}], 0x1, 0x0, 0x0, 0x24040000}, 0x1) 2m37.775076917s ago: executing program 34 (id=7297): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffd, 0x0, 0x0, 'queue0\x00'}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000800)="4792", 0x2, 0x4c180, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0}, 0x14) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r5, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$inet_sctp(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003640)=[{0x0}], 0x1, 0x0, 0x0, 0x24040000}, 0x1) 14.044879207s ago: executing program 5 (id=7954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r3, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000240)=[{0x3, 0x2, 0x4, 0x5}]}) pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) 13.493691324s ago: executing program 5 (id=7961): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000181401000000000000000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x200040c0}, 0x400c040) r1 = open(&(0x7f0000000200)='./file0/file0\x00', 0x2c88c3, 0x40) r2 = gettid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x11, 0x4, 0x4, 0x39b}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r3, &(0x7f0000000540)}, 0x20) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r4) socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048044}, 0x24008000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000000000073119c0000000000851000000200000095000000000000009500a50500000000da99307e32a31df84df5339468d6ab609447015891ac95362a79765059e102319621deaa7ceaeada126eec3181684a32c89238adcffbc27f770af522b93b55e054ce98f8541f4323ecec05dceaff0ded77f965cc5d15ab0879241d3f953f9c5e51b1d93c26c76997521e4f674c9f8f85a7c2cd828ad1988b01243b2c94141081f50173c74ff1933f1acbafbef28bfb4d"], &(0x7f0000000080)='GPL\x00', 0x5, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) socket(0x10, 0x3, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 12.752741898s ago: executing program 5 (id=7968): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x5, 0x7, 0x1000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x3, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {0x14, 0xb, 0xfd}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c0, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x42ff}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x2a5f13df9afa8791, 0x70bd2c, 0x27dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xffe1}, {0x1, 0xfff1}, {0x10, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="00006005aaaaaaaaaa06000000aaeabb88a8120088a8f0ff0800458900140068000009119078"], 0x2e) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, &(0x7f0000000300)={{@align=0x200, {0x1, 0x9, 0x3, 0x3}}, {{[0x9, 0x7fff, 0x1, 0x4]}, 0x0, 0x1, 0x6, 0x0, &(0x7f0000000cc0)=[{{@_ha_fsid={[0x7e29, 0x8]}, {0x8000, 0x7, 0x6, 0x3}}, 0x3, 0x0, 'minixdf'}, {{@align=0x9, {0x4, 0x6, 0x1, 0x400}}, 0x400, 0x0, 'lazytime'}, {{@align=0x4bf, {0x401, 0x8000, 0x6, 0x7}}, 0x6, 0x0, 'minixdf'}, {{@_ha_fsid={[0x3, 0xe]}, {0x8, 0x4, 0x0, 0x7}}, 0x3ac7, 0x0, 'minixdf'}]}}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0xa) r8 = io_uring_setup(0x50b4, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x18, 0x0, 0x1) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r9, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) renameat(r1, &(0x7f0000000080)='./file1\x00', r2, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 12.494405486s ago: executing program 0 (id=7971): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) read$msr(r1, &(0x7f00000002c0)=""/108, 0x6c) socket$netlink(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) write(r2, &(0x7f0000000180)="11b60ecc213340d48c78c66356bce16e74d5eaf780175a7405c266cf37123e5d3765032e192811572eeb19c1a6ad0aca68cb486b8998dc4d4c06d36c1f06ceff6b7c2e773f6533e8c4f7416b5401a4d1e160bcbb9b461597d900c1cb1ba229d9350f068785e22c75df1eea011a4141244f15b7c062e7303d1bb77157c0ac26c7ab8241", 0x83) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x1, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x9, 0x7fffffffffffffff}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x800000200b}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x20000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff72, 0x8}, 0x0, 0xffd, 0x101, 0xd, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffb, 0x1, 0x4}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 12.283191113s ago: executing program 0 (id=7973): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x22081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@abort}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a04f1a, &(0x7f00000000c0), 0x82, 0x4a8, &(0x7f0000001c40)="$eJzs3LtvHMUfAPDvrl+/X54GAiQhAkOEsHjYsRMgBQ0IJIogQFAEqIztRFGcGMVGwlGUGIRCg4QiQQ2USPwFdDQIqJCQqKBHQRGkSUAUh/ZuNzmvffEj5zsn9/lIZ8/c7N7M7Ozszs74HEDHGsh+JBFbIuLXiNheiy7cYKD26+rlM+N/Xz4znkSl8tqfETEfceXymfFi02K/zXlkMI1IP0zyTBaamTt9fGxqavJUHh+ePfHO8Mzc6SeOnRg7Onl08uTowYMH9o88/dTok02pZ1avK7vPTu/Z9eIbF14aP3zh7R++zsq7JU+vr8ea9C5+ayCr+F+VqnLaw/H/m8puo9laF06621gQVqUrIrLm6sn6f6VSOVeXtj1e+GCZ3Tevc/GAdZTdm/qWeD+/L85XGkpumArcCpJodwmA9iju99nzb/Fq4fCj7S49W3sAyup9NX/VUrojzbfpKT3fNtNARBye/+fz7BXNmIcAAFjGx+OfHYrHlxr/pXFPLfBH9mNbvobSHxF3RMSdEXFXROyIiLsjqtveGxE7V5Jp3QJBeWlo8fgnvVjapKmrC9n475l8bWvh+K8Y/UV/Vx7bWq1/T3Lk2NTkvvyYDEZPXxYfuUEe3z7/8yeN0urHf9kry78YC+bluNhdmqCbGJsdqw5Km+DS+xG7u+PfSqVSqn9y7UAnEbErInav7qO3FYFjj361p9FGy9d/0cdd14QzofJlxCO19p+PUv0LyeL1yd6t19cnh/8XU5P7houzYrEffzr/SqP8V17/9ZG1/6aF53+e8sVcHuh/q369diYarFxuaZjH+d8+avhMs9bzvzd5vXo9KpZd3xubnT01EtGbHKrGF7w/en3fIl5sn9V/cG9EZHlU61/smVavcZG3/30RsSdfL7s/Ih7Iy/5gRDwUEXsb1j7i++cap22E9p+oa/8kyuf/zrO130X7z6060HX8u28a5b+y9j9QDQ3m71Svf8tYaQHXfuQAAADg1pFWZ26SdOhaOE2Hhmp/2LsjNqVT0zOzjx2ZfvfkRG2Gpz960mKma3vdfOhIMp9/Yi0+ms8VF+n783njT7uiGh8an56aaHPdodNtbtD/M793tbt0wLpbah1tdIkvtAG3n3L/TxdGz73cysIALeX72tC5lun/aavKAbSe+z90rqX6/7lS3FoA3J7c/6Fz6f/QufR/6Fyl/t8Vv7SrJEALreHr/AIbJvDq0Gr26otm5h7pBjkI5UDx70nqklb+/yBuGOi7+RK+eZPFSKNVB7PNFyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAm+S8AAP//i1LmAQ==") r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) write$tun(r5, &(0x7f0000000100)=ANY=[], 0xfdef) syz_open_dev$usbfs(0x0, 0x76, 0x101701) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x28}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1800}, 0x48) 8.920986619s ago: executing program 0 (id=7978): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000181401000000000000000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x200040c0}, 0x400c040) r1 = open(&(0x7f0000000200)='./file0/file0\x00', 0x2c88c3, 0x40) r2 = gettid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x11, 0x4, 0x4, 0x39b}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r3, &(0x7f0000000540)}, 0x20) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r4) socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048044}, 0x24008000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000000000073119c0000000000851000000200000095000000000000009500a50500000000da99307e32a31df84df5339468d6ab609447015891ac95362a79765059e102319621deaa7ceaeada126eec3181684a32c89238adcffbc27f770af522b93b55e054ce98f8541f4323ecec05dceaff0ded77f965cc5d15ab0879241d3f953f9c5e51b1d93c26c76997521e4f674c9f8f85a7c2cd828ad1988b01243b2c94141081f50173c74ff1933f1acbafbef28bfb4d"], &(0x7f0000000080)='GPL\x00', 0x5, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.842553642s ago: executing program 5 (id=7979): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 8.56803319s ago: executing program 5 (id=7982): socket$nl_generic(0x11, 0x3, 0x10) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) write$tcp_mem(r0, &(0x7f00000001c0)={0x4, 0x20, 0x5, 0x20, 0x401}, 0x48) r2 = socket(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB, @ANYRESOCT=r4], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x40040040) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 8.186813492s ago: executing program 5 (id=7986): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x8000, 0x8, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @rand_addr=0x64010101}, 0x10, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2a020480) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 8.084714335s ago: executing program 0 (id=7988): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106019, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b0000000031420002bbd7000ffdbdf250900020073797a320000000008004100736977001400073f973e6e643000000000000000000000000900020073797a32000000000800410072786500140033006c6f00000000000000000000000000000900020073797a3000000000080041007369770014003300687372300000000000000000000000000900020073797a32000000000800410073697700140033006c6f00"/176], 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x20004081) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3c, 0x51c, &(0x7f0000000780)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, r0, 0x1, 0xffffffffffffffff, 0x3) msgget$private(0x0, 0x1c0) futex(0x0, 0x6, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0, 0x2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/ipc\x00') rt_sigqueueinfo(r0, 0x38, &(0x7f0000000240)={0x40, 0x1000, 0x3}) syz_io_uring_setup(0x20110, 0x0, 0x0, 0x0, 0x0) mlockall(0x7) 5.868713875s ago: executing program 1 (id=7996): socket$nl_generic(0x11, 0x3, 0x10) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) write$tcp_mem(r0, &(0x7f00000001c0)={0x4, 0x20, 0x5, 0x20, 0x401}, 0x48) r2 = socket(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB, @ANYRESOCT=r4], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x40040040) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 5.70918488s ago: executing program 1 (id=7998): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000181401000000000000000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x200040c0}, 0x400c040) open(&(0x7f0000000200)='./file0/file0\x00', 0x2c88c3, 0x40) r1 = gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x11, 0x4, 0x4, 0x39b}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000540)}, 0x20) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r3) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048044}, 0x24008000) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.128903839s ago: executing program 6 (id=8000): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106019, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b0000000031420002bbd7000ffdbdf250900020073797a320000000008004100736977001400073f973e6e643000000000000000000000000900020073797a32000000000800410072786500140033006c6f00000000000000000000000000000900020073797a3000000000080041007369770014003300687372300000000000000000000000000900020073797a32000000000800410073697700140033006c6f00"/176], 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x20004081) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3c, 0x51c, &(0x7f0000000780)="$eJzs3c9vI1cdAPDvTOLd7G5KUkCoVKJUtChbwdpJQ9sIISgXOFUCyn0JiRNFseModsomqmgq/gMuIHHixAWJPwAJ9cAfgCpVggvigACBEGzhgAR00IzHataxk9Bm7TT+fKQXvzfjme97Y/l5frzMBDCxnoyIFyNiKiKeiYi5cnpapjjqpvx9b99/dS1PSWTZy39LIimn9daVl6cj4la52ExEfOOrEd9OTsZtHxxurzYa9b2yXOs0d2vtg8M7W83VzfpmfWd5een5lRdWnltZzErvq53zvcxPvvLFX3z2O7+/+5fb382r9YWPRSX62nGRuk2vFNuiJ99Gew8j2BhMle2pjLsiAACcS76P/+GI+FSx/z8XU8XeXJ+pcdQMAAAAuCjZl2bjP0lEBgAAAFxZaUTMRpJWy7EAs5Gm18pzAx+Nm2mj1e58ZqO1v7Oez4uYj0q6sdWoL5ZjheejkuTlpXKMba/8bF95OSIeLUaJ3ijK1bVWY33M5z4AAABgUtzqO/7/51xa5M824P8EAAAAgMtrfmgBAAAAuCoc8gMAAMDV13/8737/AAAAcKV87aWX8pT1nn+9/srB/nbrlTvr9fZ2tbm/Vl1r7e1WN1utzeKefc2z1tdotXY/Fzv792qdertTax8c3m229nc6d7ceeAQ2AAAAMEKPfvKN3yQRcfT5G0WK8j6AAA/447grAFwkQ/1gcrmLN0yuyrgrAIxdcsZ8g3cAAOCDb+HjJ6//957/79wAXG3G+gDA5HH9HyZX5cwRgNdHVBNg1KbLcwAf6haHftmHXv//1XkjZVnEm3PHpzi/CAAAozVbpCStlscBs5Gm1WrEIxHpfFSSja1GfbE8Pvj1XOV6Xl4qlkzOHDMMAAAAAAAAAAAAAAAAAAAAAAAAAHRlWRIZAAAAcKVFpH9Oirv5RyzMPT3bf37gWvKvufhTWfjRyz+4t9rp7C3l0/9ePMvrWkR0flhOf9azAgEAAGBkkqOhs7rH6eXr0khrBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAEePv+q2u9NMq4f/1yRMwPij8dM8XrTFQi4uY/kpg+tlwSEVMXEP/o9Yh4bFD8JN7JsteirMWg+Dcecvz5YtMMjp9GxK0LiA+T7I28/3lx0PcvjSeL18Hfv+kyvV/D+7+0jPxY0c8N6n8eObG25sAYj7/1s1o3VzkZ//WIx6cH9z+9/jcZEv+pE2v7d5ZlJ+N/65uHh8Pan/04YmHg70/yQKxap7lbax8c3tlqrm7WN+s7y8tLz6+8sPLcymJtY6tRL/8OjPH9T/z8nWHx8/bfHBD/d7/t9r+ntf/pYSvt89+37t3/SDd74gPI499+auDv70wMiZ+Wv32fLvP5/IVe/qibP+6Jn775xGntXx+y/c/6/G+fs/3PfP17fzjnWwGAEWgfHG6vNhr1vVMyM+d4zwcx88uZS1GN/zOTvdb95C5Lfd5rJt9bfXdKr1WXoGLHMtlIYl0v9ufPu9S1EbV9rN0SAADwELy70z/umgAAAAAAAAAAAAAAAAAAAMDkGsWt1PpjHo2nqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp/pfAAAA//91ftv2") socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, r0, 0x1, 0xffffffffffffffff, 0x3) msgget$private(0x0, 0x1c0) futex(0x0, 0x6, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0, 0x2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/ipc\x00') rt_sigqueueinfo(r0, 0x38, &(0x7f0000000240)={0x40, 0x1000, 0x3}) syz_io_uring_setup(0x20110, 0x0, 0x0, 0x0, 0x0) mlockall(0x7) 5.119497079s ago: executing program 1 (id=8001): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x28}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mq_open(0x0, 0xc1, 0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000010c0)={'gre0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="bb1338ea0d6c017f4163f2164d028f8a629a1643021539db2f66", 0x1a, 0x40010, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f0000000900)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1}, 0xaa}, {{&(0x7f0000000a40)=@llc, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)=""/219, 0xdb}, {&(0x7f0000000bc0)=""/201, 0xc9}], 0x2}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002200)=""/82, 0x52}, {&(0x7f0000002280)=""/116, 0x74}, {&(0x7f0000002300)=""/141, 0x8d}, {&(0x7f00000023c0)=""/85, 0x55}, {&(0x7f0000002440)=""/189, 0xbd}, {&(0x7f0000002500)}, {&(0x7f0000002540)=""/177, 0xb1}, {&(0x7f0000002600)=""/48, 0x30}], 0x9, &(0x7f0000002700)=""/126, 0x7e}, 0x10}], 0x3, 0x0, &(0x7f0000002840)={0x0, 0x989680}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x546, &(0x7f0000000180)="$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") openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) accept4(r2, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x26, 0x80000, 0x10, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xb, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_submit(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) 3.075928724s ago: executing program 6 (id=8004): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x4e21, 0xc, 0x2}, {0x0, 0x4, 0x1, 0x4, 0x0, 0x100000000009}, {0x1ff, 0xffffffffe, 0x4053e5, 0x5bf34ad8}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in=@local, 0x3102, 0x3, 0x0, 0x0, 0x6, 0xfffffffd, 0x2}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 2.910968869s ago: executing program 6 (id=8005): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000ff0f0000000000000800000000000000280c000000000000000000000000000000000000000000000000000000000000000000000000000004000000ffff0000d4ffffffffffffff050000000000000001000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007bfd870276aa397500000000d58b3ab100"/704]) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4800) 2.138086243s ago: executing program 7 (id=8006): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2b, 0x25dfdbdb, {0x2, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x1, 0x1000c}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x6}]}, 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, 0x0, 0x0) r2 = getpgid(0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x49880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) finit_module(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="29c726bd7000fedbc8251900000008000300"], 0x1c}}, 0x0) r7 = getpid() ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x48800) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r8, 0x0, 0x0, 0x65, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x817, 0x82008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x2000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) 2.027240697s ago: executing program 1 (id=8007): socket$nl_generic(0x11, 0x3, 0x10) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) write$tcp_mem(r0, &(0x7f00000001c0)={0x4, 0x20, 0x5, 0x20, 0x401}, 0x48) r2 = socket(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB, @ANYRESOCT=r4], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x40040040) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 1.771650065s ago: executing program 1 (id=8008): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x83ff, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="217926bd7000ffdbdf250300000004000500050002000a00000008000800ac1e010106000100", @ANYRES32=0x0, @ANYBLOB="060001004e22000014000700"], 0x58}}, 0x4004) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'veth1_to_bond\x00', &(0x7f00000005c0)=@ethtool_wolinfo={0x5, 0x3, 0x7, "0067e287807f"}}) socket(0x1, 0x803, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x24060004) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x10) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000400), 0x0, 0x0, 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r4 = io_uring_setup(0x7fbf, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, 0x0, 0x1) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffffef, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4], 0x78}}, 0x20000010) mount$cgroup(0x0, 0x0, 0x0, 0x10012, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) 1.563922351s ago: executing program 7 (id=8009): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2e, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) 1.494758323s ago: executing program 0 (id=8010): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000181401000000000000000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x200040c0}, 0x400c040) open(&(0x7f0000000200)='./file0/file0\x00', 0x2c88c3, 0x40) r1 = gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x11, 0x4, 0x4, 0x39b}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000540)}, 0x20) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r3) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.434719795s ago: executing program 6 (id=8011): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="217926bd7000ffdbdf250300000004000500050002000a00000008000800ac1e010106000100", @ANYRES32=0x0, @ANYBLOB="060001004e22000014000700"], 0x58}}, 0x4004) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'veth1_to_bond\x00', &(0x7f00000005c0)=@ethtool_wolinfo={0x5, 0x3, 0x7, "0067e287807f"}}) socket(0x1, 0x803, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x24060004) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x10) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000400), 0x0, 0x0, 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r6 = io_uring_setup(0x7fbf, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, 0x0, 0x1) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffffef, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r6], 0x78}}, 0x20000010) mount$cgroup(0x0, 0x0, 0x0, 0x10012, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) 1.178858164s ago: executing program 7 (id=8012): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0)) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x5884) 984.131579ms ago: executing program 7 (id=8013): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0xb) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x200000000180, 0x100000}}, 0x40) 687.549759ms ago: executing program 6 (id=8014): timer_delete(0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000000)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x45a, &(0x7f0000000d80)="$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") mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) open_tree(0xffffffffffffff9c, 0x0, 0x100) bpf$PROG_LOAD(0x5, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) 582.092602ms ago: executing program 0 (id=8015): r0 = socket(0x11, 0xa, 0x5) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0xfffffffffffffb5e}, 0x2840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_setup(0x5, &(0x7f0000000240)=0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000380)={0x4, 0x80, 0x9c, 0x2, 0x9b, 0x2, 0x0, 0x1, 0x6a20, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000280), 0x3}, 0x1008a4, 0x8000, 0xd, 0x2, 0xca23, 0xff, 0x2, 0x0, 0x10001, 0x0, 0x7d9c}) r3 = inotify_init() timer_create(0x7, &(0x7f0000000180)={0x0, 0x1a, 0x4, @thr={&(0x7f00000000c0)="90e63b74e2a2", &(0x7f0000000140)="85721e16122aa2658a0631b3e94bbad0a80e5ddd721396f18582aa79af593e97db1b5c463f40bd7265701b3145fa8d3a3349051f5f5f0dfa6805c8ce88e6eb"}}, &(0x7f00000001c0)=0x0) timer_settime(r4, 0x1, &(0x7f0000000200)={{0x77359400}, {0x77359400}}, 0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) sendto$inet(r0, 0x0, 0x0, 0x800, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b00), 0x1, 0x4ca, &(0x7f0000000540)="$eJzs3c9vVFsdAPDv3P6kr++1T0n8ERVEFA1hph2gIaxwozGExEhcuYDaDk3TmU7TmSKtLMr/YCKJK/0TXJi4MGHl3p3ujAkuTFCJhpq4mJc7cwttmSkNlLmk8/kkJ3PPvXPv9xzoPef223ZOAAPrbERsR8RoRNyNiKlsfyErcaNT0ve9eP5wYef5w4VCjMbtfxXax9N9seec1EfZNccj4kffj/hp4fW4jc2tlflqtbKe1UvN2lqpsbn1t+Xa/FJlqbJaLs/Nzs1cu3y1fGx9PVP77bPvLd/88R9+/9Wnf9r+zs/TZk1mx/b2Y6/pd4zZ6frIyzip4Yi4+Y7X/VAMZf0ZzbshvJUkIj4XEefS+7+Vd2sAgH5otaaiNbW3DgCcdEk7B1ZIilkuYDKSpFjs5PBOx0RSrTeaF+/VN1YXO7my6RhJ7i1XKzNZrnA6RgppfTbLle3WywfqlyPi04j4xdipdr24UK8u5vngAwAD7KMD8/9/xzrzPwBwwo3n3QAAoO/M/wAweMz/ADB4zP8AMHjM/wAweMz/ADB4zP8AMFB+eOtWWlo72edfL97f3Fip37+0WGmsFGsbC8WF+vpacaleX2p/Zk/tTder1utrs1di40GpWWk0S43NrTu1+sZq8077c73vVEb60isA4DCfnnnyl0JEbF8/1S6xZy0HczWcbEneDQByM5R3A4DcDOfdACA3vscHuizRu0/PXxF63PMUQwt84C58Sf4fBpX8Pwwu+X8YXPL/MLharYI1/wFgwMjxA+/h5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw4k22SyEpZmuBT0aSFIsRH0fEdIwU7i1XKzMR8UlE/HlsZCytz6YnjubdcgDg7SX/KGTrf12YOj958Oho4X9jkU33P/vV7V8+mG8212fT/f8eO5W9p/k4218+NJClBgEgJ7vz9O48vuvF84cLu6Wf7Xn23c7iomncnax0jgzHcPt1vP3gMPGfQlbvSJ9Xho4h/vajiPhit/4X2rmR6Wzl04Px09gf9zV+si9+0j7WeU3/LT5/DG2BQfMkHX9udLv/kjjbfu1+/4+3R6h3tzv+7bw2/iUvx7+hHuPf2aPGuPLHH/Q89ijiy8Pd4hey4XW8Hatb/PNHjP/Xr3zt3P4zX2n9OuJCdI2/74xSs7ZWamxuXVquzS9Vliqr5fLc7NzMtctXy6V2jrq0m6l+3T+vX/zksP5P9Ig//ob+f/OI/f/N/+/+5OuHxP/2N7r//58+JH46J37riPHnJ37Xc/nuNP5i9/5n5/Tu/8Ujxn/6963FI74VAOiDxubWyny1Wlm30beN9NntA2iGjdw20q+A47jOF95jU/MemYD37dVNn3dLAAAAAAAAAAAAAACAXvrxB0959xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICT67MAAAD//x4p1Yw=") chmod(&(0x7f00000002c0)='./file1\x00', 0x8) 459.299316ms ago: executing program 1 (id=8016): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x28}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mq_open(0x0, 0xc1, 0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000010c0)={'gre0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="bb1338ea0d6c017f4163f2164d028f8a629a1643021539db2f66", 0x1a, 0x40010, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f0000000900)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1}, 0xaa}, {{&(0x7f0000000a40)=@llc, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)=""/219, 0xdb}, {&(0x7f0000000bc0)=""/201, 0xc9}], 0x2}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002200)=""/82, 0x52}, {&(0x7f0000002280)=""/116, 0x74}, {&(0x7f0000002300)=""/141, 0x8d}, {&(0x7f00000023c0)=""/85, 0x55}, {&(0x7f0000002440)=""/189, 0xbd}, {&(0x7f0000002500)}, {&(0x7f0000002540)=""/177, 0xb1}, {&(0x7f0000002600)=""/48, 0x30}], 0x9, &(0x7f0000002700)=""/126, 0x7e}, 0x10}], 0x3, 0x0, &(0x7f0000002840)={0x0, 0x989680}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x546, &(0x7f0000000180)="$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") openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) accept4(r2, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x26, 0x80000, 0x10, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xb, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_submit(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) 294.987641ms ago: executing program 7 (id=8017): socket$nl_generic(0x11, 0x3, 0x10) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) write$tcp_mem(r0, &(0x7f00000001c0)={0x4, 0x20, 0x5, 0x20, 0x401}, 0x48) r2 = socket(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB, @ANYRESOCT=r4], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x40040040) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 214.542024ms ago: executing program 6 (id=8018): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2b, 0x25dfdbdb, {0x2, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x1, 0x1000c}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x6}]}, 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18000}, 0x0) r2 = getpgid(0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x49880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) finit_module(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="29c726bd7000fedbc8251900000008000300"], 0x1c}}, 0x0) r7 = getpid() ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x48800) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r8, 0x0, 0x0, 0x65, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x817, 0x82008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x2000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) 0s ago: executing program 7 (id=8019): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x800) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f00000000c0)={0x8, 0x2, 0xe, 0x46}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x1, 0x4, 0x18001, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000006800010027bd7000fddbdf250200020000000000080001000000000004000b002d0c18c791bbab8da04740225ff9fe9fc181ffaabb2283d7dae486202e747232cb5db3d323e9f688aaee15628bbdd6c74a3ff15667624900bb784da254b8858f290bba09a891d9662f412f248a0f7bfd274b7368c2a149fc2723c7f3a2e9c2c8ae425f0c13320474505f6b7730e76340ac0606a06b2e819c07ebbf"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000080) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): Use struct sctp_assoc_value instead [ 1804.801897][ T359] loop7: detected capacity change from 0 to 512 [ 1805.663723][T23670] usb usb4-port1: unable to enumerate USB device [ 1806.043317][ T398] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7638'. [ 1806.124749][ T398] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7638'. [ 1806.228032][ T406] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7639'. [ 1806.422037][ T416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7644'. [ 1806.950515][ T423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7645'. [ 1807.282549][ T433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=433 comm=syz.6.7647 [ 1807.322619][ T433] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7647'. [ 1807.928763][ T452] loop6: detected capacity change from 0 to 512 [ 1807.983753][ T452] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1807.991693][ T452] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1807.999702][ T452] System zones: 0-1, 15-15, 18-18, 34-34 [ 1808.002214][ T28] kauditd_printk_skb: 830 callbacks suppressed [ 1808.002226][ T28] audit: type=1400 audit(2000000644.177:111732): avc: denied { read } for pid=455 comm="syz.0.7655" dev="nsfs" ino=4026532893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1808.043827][ T28] audit: type=1400 audit(2000000644.187:111733): avc: denied { create } for pid=453 comm="syz.7.7654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1808.064841][ T28] audit: type=1400 audit(2000000644.187:111734): avc: denied { read write } for pid=453 comm="syz.7.7654" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1808.090012][ T28] audit: type=1400 audit(2000000644.187:111735): avc: denied { read write open } for pid=453 comm="syz.7.7654" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1808.116756][ T28] audit: type=1400 audit(2000000644.217:111736): avc: denied { read open } for pid=455 comm="syz.0.7655" path="net:[4026532893]" dev="nsfs" ino=4026532893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1808.147983][ T452] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1808.193534][ T452] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 1808.285630][ T28] audit: type=1400 audit(2000000644.247:111737): avc: denied { read } for pid=455 comm="syz.0.7655" dev="nsfs" ino=4026532893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1808.299668][ T452] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1808.315453][ T28] audit: type=1400 audit(2000000644.247:111738): avc: denied { open } for pid=455 comm="syz.0.7655" path="net:[4026532893]" dev="nsfs" ino=4026532893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1808.726956][ T452] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1808.766488][ T28] audit: type=1400 audit(2000000644.247:111739): avc: denied { create } for pid=455 comm="syz.0.7655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1808.788045][ T28] audit: type=1400 audit(2000000644.247:111740): avc: denied { read write } for pid=27818 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1808.803914][ T452] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.7652: bad orphan inode 16 [ 1808.833934][ T452] loop6: lost filesystem error report for type 5 error -117 [ 1808.838471][ T452] ext4_test_bit(bit=15, block=18) = 1 [ 1808.847426][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1808.847470][ C0] EXT4-fs (loop6): initial error at time 2000000645: ext4_orphan_get:1423 [ 1808.847521][ C0] EXT4-fs (loop6): last error at time 2000000645: ext4_orphan_get:1423 [ 1808.891841][ T452] is_bad_inode(inode)=0 [ 1808.911493][ T452] NEXT_ORPHAN(inode)=0 [ 1808.924313][ T452] max_ino=32 [ 1808.931199][ T475] loop0: detected capacity change from 0 to 128 [ 1808.938156][ T452] i_nlink=2 [ 1808.948086][ T452] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1808.962051][ T464] loop1: detected capacity change from 0 to 512 [ 1808.971547][ T475] vfat: Unknown parameter '' [ 1808.976845][ T464] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1808.987900][ T464] EXT4-fs (loop1): group descriptors corrupted! [ 1809.107733][ T475] loop0: detected capacity change from 0 to 164 [ 1809.137824][ T475] iso9660: Bad value for 'map' [ 1809.182517][ T452] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 1809.253903][ T464] xfrm0 speed is unknown, defaulting to 1000 [ 1809.260460][ T478] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7659'. [ 1809.508021][ T480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7660'. [ 1809.862723][T31501] kernel read not supported for file /newroot/240 (pid: 31501 comm: kworker/0:1) [ 1809.879623][T23558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1810.071584][ T496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7664'. [ 1810.152713][ T502] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7666'. [ 1810.250016][ T502] loop6: detected capacity change from 0 to 512 [ 1810.281545][ T502] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1810.310657][ T502] EXT4-fs (loop6): 1 truncate cleaned up [ 1810.334238][ T502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1810.897716][ T521] loop1: detected capacity change from 0 to 128 [ 1810.914569][ T521] vfat: Unknown parameter '' [ 1811.231768][ T525] loop5: detected capacity change from 0 to 512 [ 1811.242242][T23558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1811.254087][ T527] xfrm0 speed is unknown, defaulting to 1000 [ 1811.338652][ T525] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.7672: corrupted inode contents [ 1811.351243][ T525] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1811.351894][ T525] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.7672: mark_inode_dirty error [ 1811.361711][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1811.361926][ C0] EXT4-fs (loop5): initial error at time 2000000647: ext4_do_update_inode:5690: inode 16 [ 1811.362073][ C0] EXT4-fs (loop5): last error at time 2000000647: ext4_do_update_inode:5690: inode 16 [ 1811.401893][ T525] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1811.405373][ T525] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.7672: corrupted inode contents [ 1811.406160][ T537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7675'. [ 1811.415733][ T525] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1811.443244][ T525] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.7672: mark_inode_dirty error [ 1811.465924][ T525] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1811.466981][ T525] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.7672: corrupted inode contents [ 1811.488833][ T525] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1811.489804][ T525] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1811.508689][ T525] loop5: lost filesystem error report for type 5 error -117 [ 1811.509758][ T525] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.7672: corrupted inode contents [ 1811.529739][ T525] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1811.531269][ T525] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.7672: mark_inode_dirty error [ 1811.552518][ T525] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1811.553114][ T525] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1811.572744][ T525] loop5: lost filesystem error report for type 5 error -117 [ 1811.575742][ T525] EXT4-fs (loop5): 1 truncate cleaned up [ 1811.594403][ T525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1811.609273][ T525] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1811.654113][T31069] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:21: Failed to release dquot type 1 [ 1811.745673][T22122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1811.836356][ T546] netlink: 748 bytes leftover after parsing attributes in process `syz.6.7676'. [ 1811.884018][ T548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7677'. [ 1812.135294][ T553] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7679'. [ 1812.788633][ T567] loop1: detected capacity change from 0 to 1024 [ 1812.846618][ T559] loop7: detected capacity change from 0 to 164 [ 1812.896531][ T567] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1812.906891][ T567] EXT4-fs warning (device loop1): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop1. [ 1812.935225][ T559] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1812.944083][ T559] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1813.023033][ T28] kauditd_printk_skb: 688 callbacks suppressed [ 1813.023080][ T28] audit: type=1400 audit(2000000649.127:112428): avc: denied { read } for pid=551 comm="syz.5.7679" dev="nsfs" ino=4026533352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1813.060361][ T28] audit: type=1400 audit(2000000649.127:112429): avc: denied { read open } for pid=551 comm="syz.5.7679" path="net:[4026533352]" dev="nsfs" ino=4026533352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1813.085237][ T28] audit: type=1400 audit(2000000649.127:112430): avc: denied { create } for pid=551 comm="syz.5.7679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1813.107555][ T28] audit: type=1400 audit(2000000649.267:112431): avc: denied { read write } for pid=27818 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1813.143446][ T573] loop7: detected capacity change from 0 to 512 [ 1813.174813][ T573] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7681: bg 0: block 248: padding at end of block bitmap is not set [ 1813.193160][ T28] audit: type=1400 audit(2000000649.267:112432): avc: denied { open } for pid=27818 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1813.219903][ T573] loop7: lost filesystem error report for type 5 error -117 [ 1813.220134][ T573] Quota error (device loop7): write_blk: dquota write failed [ 1813.227691][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1813.227709][ C0] EXT4-fs (loop7): last error at time 2000000649: ext4_validate_block_bitmap:441 [ 1813.253398][ T573] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1813.264364][ T28] audit: type=1400 audit(2000000649.267:112433): avc: denied { ioctl } for pid=27818 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1813.291411][ T573] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.7681: Failed to acquire dquot type 1 [ 1813.303401][ T573] loop7: lost filesystem error report for type 5 error -117 [ 1813.318825][ T573] EXT4-fs (loop7): 1 truncate cleaned up [ 1813.345216][ T573] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1813.350232][ T28] audit: type=1400 audit(2000000649.267:112434): avc: denied { write } for pid=551 comm="syz.5.7679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1813.409981][ T581] loop6: detected capacity change from 0 to 256 [ 1813.416795][ T573] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1813.445844][ T581] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1813.458107][ T28] audit: type=1400 audit(2000000649.287:112435): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30036 daddr=10.128.0.193 dest=55644 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1813.502615][ T581] FAULT_INJECTION: forcing a failure. [ 1813.502615][ T581] name failslab, interval 1, probability 0, space 0, times 0 [ 1813.520603][ T581] CPU: 0 UID: 0 PID: 581 Comm: syz.6.7686 Tainted: G W syzkaller #0 PREEMPT(full) [ 1813.520634][ T581] Tainted: [W]=WARN [ 1813.520640][ T581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1813.520652][ T581] Call Trace: [ 1813.520666][ T581] [ 1813.520674][ T581] __dump_stack+0x1d/0x30 [ 1813.520698][ T581] dump_stack_lvl+0x95/0xd0 [ 1813.520717][ T581] dump_stack+0x15/0x1b [ 1813.520735][ T581] should_fail_ex+0x263/0x280 [ 1813.520764][ T581] should_failslab+0x8c/0xb0 [ 1813.520831][ T581] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1813.520862][ T581] ? alloc_empty_file+0x70/0x1e0 [ 1813.520887][ T581] alloc_empty_file+0x70/0x1e0 [ 1813.520956][ T581] path_openat+0x65/0x2050 [ 1813.521061][ T581] ? _parse_integer_limit+0x170/0x190 [ 1813.521088][ T581] ? _parse_integer+0x27/0x40 [ 1813.521109][ T581] ? kstrtoull+0x111/0x140 [ 1813.521160][ T581] ? kstrtouint+0x76/0xc0 [ 1813.521183][ T581] do_file_open+0x16c/0x290 [ 1813.521247][ T581] do_sys_openat2+0x94/0x130 [ 1813.521268][ T581] __x64_sys_open+0xe6/0x110 [ 1813.521289][ T581] x64_sys_call+0x14b9/0x3020 [ 1813.521361][ T581] do_syscall_64+0x12c/0x3b0 [ 1813.521464][ T581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.521486][ T581] RIP: 0033:0x7f0b6652ce59 [ 1813.521501][ T581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1813.521573][ T581] RSP: 002b:00007f0b64f87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1813.521595][ T581] RAX: ffffffffffffffda RBX: 00007f0b667a5fa0 RCX: 00007f0b6652ce59 [ 1813.521611][ T581] RDX: 0000000000000002 RSI: 0000000000143000 RDI: 0000200000000280 [ 1813.521628][ T581] RBP: 00007f0b64f87090 R08: 0000000000000000 R09: 0000000000000000 [ 1813.521640][ T581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1813.521651][ T581] R13: 00007f0b667a6038 R14: 00007f0b667a5fa0 R15: 00007ffd91806fa8 [ 1813.521668][ T581] [ 1813.791916][T31094] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1813.796816][ T588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7689'. [ 1813.841412][ T586] loop0: detected capacity change from 0 to 512 [ 1813.882658][ T586] EXT4-fs: Ignoring removed orlov option [ 1813.906533][ T586] EXT4-fs: Ignoring removed mblk_io_submit option [ 1813.948847][ T586] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.7687: corrupted in-inode xattr: e_value size too large [ 1813.963241][ T586] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1813.963531][ T586] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7687: couldn't read orphan inode 15 (err -117) [ 1813.985186][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1813.985205][ C1] EXT4-fs (loop0): initial error at time 2000000650: ext4_iget_extra_inode:5128: inode 15 [ 1813.985234][ C1] EXT4-fs (loop0): last error at time 2000000650: ext4_iget_extra_inode:5128: inode 15 [ 1814.011589][ T586] loop0: lost filesystem error report for type 5 error -117 [ 1814.012181][ T586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1814.201550][ T604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7687'. [ 1814.263551][ T606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1814.311868][ T607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1814.369835][ T607] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 1814.418665][ T609] netlink: 'syz.7.7688': attribute type 21 has an invalid length. [ 1814.439333][ T607] bond0: (slave vti0): Error -95 calling set_mac_address [ 1814.575197][ T606] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 1814.608437][ T606] bond0: (slave vti0): Error -95 calling set_mac_address [ 1814.887979][ T616] netlink: 'syz.5.7695': attribute type 4 has an invalid length. [ 1814.917672][ T616] __nla_validate_parse: 1 callbacks suppressed [ 1814.918355][ T616] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7695'. [ 1815.036541][ T616] .`: renamed from bond0 [ 1815.146329][T23359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1815.461399][ T624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7699'. [ 1815.566721][ T624] loop1: detected capacity change from 0 to 512 [ 1815.635084][ T624] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1815.697886][ T624] EXT4-fs (loop1): 1 truncate cleaned up [ 1815.721192][ T624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1815.739304][ T627] loop0: detected capacity change from 0 to 256 [ 1815.778413][ T627] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1815.980041][ T638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7701'. [ 1816.272964][ T643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7702'. [ 1816.383183][T27818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1816.398183][ T644] loop5: detected capacity change from 0 to 512 [ 1816.449736][ T644] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1816.489185][ T644] System zones: 1-12 [ 1816.508514][ T644] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.7703: corrupted in-inode xattr: e_value size too large [ 1816.523203][ T644] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1816.524105][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1816.540078][ C1] EXT4-fs (loop5): initial error at time 2000000652: ext4_iget_extra_inode:5128: inode 15 [ 1816.550471][ C1] EXT4-fs (loop5): last error at time 2000000652: ext4_iget_extra_inode:5128: inode 15 [ 1816.573687][ T644] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.7703: couldn't read orphan inode 15 (err -117) [ 1816.673657][ T644] loop5: lost filesystem error report for type 5 error -117 [ 1816.682181][ T644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1816.857475][ T644] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.7703: Unrecognised inode hash code 4 [ 1816.869169][ T644] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.7703: Corrupt directory, running e2fsck is recommended [ 1816.943866][T22122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1817.301765][ T655] loop6: detected capacity change from 0 to 8192 [ 1817.757482][ T671] loop0: detected capacity change from 0 to 256 [ 1817.781082][ T671] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1817.831606][ T673] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7713'. [ 1818.047256][ T28] kauditd_printk_skb: 689 callbacks suppressed [ 1818.047271][ T28] audit: type=1400 audit(2000000654.227:113125): avc: denied { create } for pid=677 comm="syz.6.7715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1818.140331][ T28] audit: type=1400 audit(2000000654.267:113126): avc: denied { recv } for pid=592 comm="syz.7.7688" saddr=10.128.0.163 src=30036 daddr=10.128.0.193 dest=55644 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1818.248353][ T28] audit: type=1400 audit(2000000654.267:113127): avc: denied { recv } for pid=592 comm="syz.7.7688" saddr=10.128.0.163 src=30036 daddr=10.128.0.193 dest=55644 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1818.293443][ T678] loop6: detected capacity change from 0 to 8192 [ 1818.322331][ T28] audit: type=1400 audit(2000000654.277:113128): avc: denied { read write } for pid=22122 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1818.385115][ T683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7711'. [ 1818.406706][ T688] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1818.414244][ T685] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1818.425068][ T688] audit: audit_lost=966 audit_rate_limit=0 audit_backlog_limit=64 [ 1818.433201][ T28] audit: type=1400 audit(2000000654.277:113129): avc: denied { open } for pid=22122 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1818.461549][ T678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1818.469295][ T685] audit: audit_lost=967 audit_rate_limit=0 audit_backlog_limit=64 [ 1818.538903][ T688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7718'. [ 1818.709837][ T695] loop7: detected capacity change from 0 to 512 [ 1818.788766][ T695] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1818.796915][ T695] System zones: 1-12 [ 1818.801296][ T695] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.7719: corrupted in-inode xattr: e_value size too large [ 1818.842786][ T695] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1818.843557][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1818.859266][ C0] EXT4-fs (loop7): initial error at time 2000000655: ext4_iget_extra_inode:5128: inode 15 [ 1818.869236][ C0] EXT4-fs (loop7): last error at time 2000000655: ext4_iget_extra_inode:5128: inode 15 [ 1818.879146][ T695] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.7719: couldn't read orphan inode 15 (err -117) [ 1818.943269][ T695] loop7: lost filesystem error report for type 5 error -117 [ 1818.968344][ T695] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1819.475384][ T747] FAULT_INJECTION: forcing a failure. [ 1819.475384][ T747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1819.488444][ T747] CPU: 0 UID: 0 PID: 747 Comm: syz.5.7720 Tainted: G W syzkaller #0 PREEMPT(full) [ 1819.488476][ T747] Tainted: [W]=WARN [ 1819.488482][ T747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1819.488494][ T747] Call Trace: [ 1819.488502][ T747] [ 1819.488512][ T747] __dump_stack+0x1d/0x30 [ 1819.488625][ T747] dump_stack_lvl+0x95/0xd0 [ 1819.488645][ T747] dump_stack+0x15/0x1b [ 1819.488710][ T747] should_fail_ex+0x263/0x280 [ 1819.488785][ T747] should_fail+0xb/0x20 [ 1819.488805][ T747] should_fail_usercopy+0x1a/0x20 [ 1819.488831][ T747] _copy_from_iter+0xcf/0xea0 [ 1819.488923][ T747] ? __pfx_woken_wake_function+0x10/0x10 [ 1819.488945][ T747] file_tty_write+0x322/0x680 [ 1819.488974][ T747] ? __pfx_tty_write+0x10/0x10 [ 1819.489007][ T747] tty_write+0x25/0x30 [ 1819.489031][ T747] vfs_write+0x5a6/0x9f0 [ 1819.489063][ T747] ksys_write+0xdc/0x1a0 [ 1819.489114][ T747] __x64_sys_write+0x40/0x50 [ 1819.489139][ T747] x64_sys_call+0x27e1/0x3020 [ 1819.489229][ T747] do_syscall_64+0x12c/0x3b0 [ 1819.489262][ T747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.489318][ T747] RIP: 0033:0x7ff58799ce59 [ 1819.489333][ T747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1819.489349][ T747] RSP: 002b:00007ff5863ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1819.489383][ T747] RAX: ffffffffffffffda RBX: 00007ff587c15fa0 RCX: 00007ff58799ce59 [ 1819.489397][ T747] RDX: 0000000000001006 RSI: 0000200000002100 RDI: 0000000000000004 [ 1819.489472][ T747] RBP: 00007ff5863ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1819.489486][ T747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1819.489499][ T747] R13: 00007ff587c16038 R14: 00007ff587c15fa0 R15: 00007fffec06f5f8 [ 1819.489523][ T747] [ 1819.541097][ T695] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.7719: Unrecognised inode hash code 4 [ 1819.541127][ T695] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7719: Corrupt directory, running e2fsck is recommended [ 1820.122148][ T783] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7722'. [ 1820.435099][T31094] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1820.839271][ T782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7722'. [ 1821.196055][ T782] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7722'. [ 1821.306413][ T793] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7724'. [ 1821.692824][ T795] loop6: detected capacity change from 0 to 512 [ 1821.706863][ T799] loop7: detected capacity change from 0 to 256 [ 1821.719619][ T795] EXT4-fs: Ignoring removed bh option [ 1821.742060][ T795] EXT4-fs: Ignoring removed mblk_io_submit option [ 1821.744403][ T799] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1821.801631][ T795] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1821.909875][ T795] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1821.949921][ T795] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1821.984794][ T795] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.7726: Failed to acquire dquot type 1 [ 1822.065465][ T795] loop6: lost filesystem error report for type 5 error -5 [ 1822.113059][ T795] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7726: Invalid block bitmap block 0 in block_group 0 [ 1822.118368][ T809] loop1: detected capacity change from 0 to 8192 [ 1822.120368][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1822.147175][ C1] EXT4-fs (loop6): last error at time 2000000658: ext4_acquire_dquot:7034 [ 1822.156070][ T795] loop6: lost filesystem error report for type 5 error -117 [ 1822.160613][ T795] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7726: Invalid block bitmap block 0 in block_group 0 [ 1822.237241][ T795] loop6: lost filesystem error report for type 5 error -117 [ 1822.237552][ T795] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7726: Invalid block bitmap block 0 in block_group 0 [ 1822.279259][ T812] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7733'. [ 1822.280147][ T795] loop6: lost filesystem error report for type 5 error -117 [ 1822.309388][ T795] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.7726: Failed to acquire dquot type 1 [ 1822.351584][ T795] loop6: lost filesystem error report for type 5 error -28 [ 1822.410507][ T795] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.7726: Failed to acquire dquot type 1 [ 1822.463596][ T795] loop6: lost filesystem error report for type 5 error -28 [ 1822.465099][ T795] EXT4-fs (loop6): 1 orphan inode deleted [ 1822.501114][ T795] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1822.516039][ T807] netlink: 'syz.0.7729': attribute type 21 has an invalid length. [ 1822.770234][ T815] loop7: detected capacity change from 0 to 512 [ 1822.771915][T23558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1822.931071][ T815] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.7732: corrupted inode contents [ 1822.943256][ T815] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1822.974399][ T815] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #16: comm syz.7.7732: mark_inode_dirty error [ 1822.995090][ T815] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1823.002287][ T815] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.7732: corrupted inode contents [ 1823.023533][ T815] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1823.023842][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 1823.040482][ C0] EXT4-fs (loop7): initial error at time 2000000659: ext4_do_update_inode:5690: inode 16 [ 1823.050803][ C0] EXT4-fs (loop7): last error at time 2000000659: ext4_dirty_inode:6587: inode 16 [ 1823.075263][ T815] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.7732: mark_inode_dirty error [ 1823.087142][ T815] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1823.090656][ T815] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.7732: corrupted inode contents [ 1823.113084][ T815] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1823.115866][ T815] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 1823.133932][ T815] loop7: lost filesystem error report for type 5 error -117 [ 1823.135209][ T815] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.7732: corrupted inode contents [ 1823.155089][ T815] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1823.156707][ T815] EXT4-fs error (device loop7): ext4_truncate:4690: inode #16: comm syz.7.7732: mark_inode_dirty error [ 1823.177395][ T815] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1823.177796][ T815] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 1823.195779][ T815] loop7: lost filesystem error report for type 5 error -117 [ 1823.196897][ T815] EXT4-fs (loop7): 1 truncate cleaned up [ 1823.210195][ T815] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1823.223968][ T815] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1823.246958][ T28] kauditd_printk_skb: 641 callbacks suppressed [ 1823.246973][ T28] audit: type=1400 audit(2000000659.407:113740): avc: denied { mount } for pid=814 comm="syz.7.7732" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1823.569253][T32740] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1823.616345][ T28] audit: type=1400 audit(2000000659.407:113741): avc: denied { read write } for pid=814 comm="syz.7.7732" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1823.695157][T32740] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:27: Failed to release dquot type 1 [ 1823.753724][ T28] audit: type=1400 audit(2000000659.407:113742): avc: denied { read write open } for pid=814 comm="syz.7.7732" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1823.779264][ T28] audit: type=1400 audit(2000000659.407:113743): avc: denied { recv } for pid=826 comm="syz.6.7734" saddr=10.128.0.163 src=30036 daddr=10.128.0.193 dest=55644 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1823.805337][ T28] audit: type=1400 audit(2000000659.827:113744): avc: denied { recv } for pid=2982 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.193 dest=55644 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1823.875757][ T28] audit: type=1400 audit(2000000659.867:113745): avc: denied { recv } for pid=814 comm="syz.7.7732" saddr=10.128.0.163 src=30036 daddr=10.128.0.193 dest=55644 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1823.910688][T31094] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1823.921341][ T28] audit: type=1400 audit(2000000659.877:113746): avc: denied { recv } for pid=814 comm="syz.7.7732" saddr=10.128.0.163 src=30036 daddr=10.128.0.193 dest=55644 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1823.985503][ T28] audit: type=1400 audit(2000000659.887:113747): avc: denied { recv } for pid=814 comm="syz.7.7732" saddr=10.128.0.163 src=30036 daddr=10.128.0.193 dest=55644 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1824.079825][ T875] loop7: detected capacity change from 0 to 512 [ 1824.091704][ T28] audit: type=1400 audit(2000000659.897:113748): avc: denied { recv } for pid=814 comm="syz.7.7732" saddr=10.128.0.163 src=30036 daddr=10.128.0.193 dest=55644 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1824.135741][ T875] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1824.226679][ T875] EXT4-fs (loop7): 1 truncate cleaned up [ 1824.237582][ T875] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1824.575896][T31094] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1824.916464][ T894] loop6: detected capacity change from 0 to 256 [ 1825.051991][ T894] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1825.287443][ T903] xfrm0 speed is unknown, defaulting to 1000 [ 1825.444380][ T905] loop1: detected capacity change from 0 to 512 [ 1825.455391][ T905] EXT4-fs: Ignoring removed mblk_io_submit option [ 1825.511979][ T905] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1825.518805][ T905] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1825.529033][ T905] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.7744: attempt to clear invalid blocks 2 len 1 [ 1825.543695][ T905] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1825.544289][ T905] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, [ 1825.556293][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1825.556315][ C0] EXT4-fs (loop1): initial error at time 2000000661: ext4_clear_blocks:876: inode 13 [ 1825.556343][ C0] EXT4-fs (loop1): last error at time 2000000661: ext4_clear_blocks:876: inode 13 [ 1825.590893][ T905] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1825.599496][ T905] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.7744: invalid indirect mapped block 1819239214 (level 0) [ 1825.613537][ T905] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1825.614201][ T905] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.7744: invalid indirect mapped block 1819239214 (level 1) [ 1825.637999][ T905] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1825.638677][ T905] EXT4-fs (loop1): 1 truncate cleaned up [ 1825.654275][ T905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1825.919984][T27818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1826.019716][ T907] loop5: detected capacity change from 0 to 8192 [ 1827.091463][ T971] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7752'. [ 1827.162062][ T967] loop6: detected capacity change from 0 to 2048 [ 1827.221568][ T967] ext4: Unknown parameter 'euid' [ 1827.414762][ T980] loop7: detected capacity change from 0 to 256 [ 1827.446459][ T980] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1827.560739][ T981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7755'. [ 1827.605938][ T981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7755'. [ 1827.926225][ T988] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7759'. [ 1827.961584][ T989] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7759'. [ 1828.006661][ T989] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7759'. [ 1828.250843][ T28] kauditd_printk_skb: 572 callbacks suppressed [ 1828.250858][ T28] audit: type=1400 audit(2000000664.427:114321): avc: denied { recv } for pid=1000 comm="syz.6.7763" saddr=10.128.0.163 src=30036 daddr=10.128.0.193 dest=55644 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1828.401284][ T28] audit: type=1400 audit(2000000664.487:114322): avc: denied { open } for pid=997 comm="syz.5.7762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1828.455960][ T28] audit: type=1400 audit(2000000664.487:114323): avc: denied { perfmon } for pid=997 comm="syz.5.7762" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1828.485442][ T28] audit: type=1400 audit(2000000664.487:114324): avc: denied { kernel } for pid=997 comm="syz.5.7762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1828.505131][ T28] audit: type=1400 audit(2000000664.487:114325): avc: denied { cpu } for pid=997 comm="syz.5.7762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1828.531804][ T28] audit: type=1400 audit(2000000664.507:114326): avc: denied { create } for pid=997 comm="syz.5.7762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1828.552840][ T28] audit: type=1400 audit(2000000664.517:114327): avc: denied { write } for pid=997 comm="syz.5.7762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1828.574847][ T28] audit: type=1400 audit(2000000664.517:114328): avc: denied { read } for pid=997 comm="syz.5.7762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1828.595557][ T28] audit: type=1400 audit(2000000664.557:114329): avc: denied { recv } for pid=997 comm="syz.5.7762" saddr=10.128.0.163 src=30036 daddr=10.128.0.193 dest=55644 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1828.630334][ T28] audit: type=1400 audit(2000000664.557:114330): avc: denied { recv } for pid=997 comm="syz.5.7762" saddr=10.128.0.163 src=30036 daddr=10.128.0.193 dest=55644 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1828.756914][ T1013] loop7: detected capacity change from 0 to 256 [ 1828.780236][ T1013] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1829.223578][ T1022] xfrm0 speed is unknown, defaulting to 1000 [ 1829.270936][ T1025] loop6: detected capacity change from 0 to 512 [ 1829.279124][ T1025] EXT4-fs: Ignoring removed mblk_io_submit option [ 1829.311966][ T1025] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1829.318656][ T1025] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 1829.328154][ T1025] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.7769: attempt to clear invalid blocks 2 len 1 [ 1829.341037][ T1025] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1829.353596][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1829.369969][ C1] EXT4-fs (loop6): initial error at time 2000000665: ext4_clear_blocks:876: inode 13 [ 1829.380002][ C1] EXT4-fs (loop6): last error at time 2000000665: ext4_clear_blocks:876: inode 13 [ 1829.398698][ T1025] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1829.413161][ T1025] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.7769: invalid indirect mapped block 1819239214 (level 0) [ 1829.427954][ T1025] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1829.428988][ T1025] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.7769: invalid indirect mapped block 1819239214 (level 1) [ 1829.452747][ T1025] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1829.460946][ T1025] EXT4-fs (loop6): 1 truncate cleaned up [ 1829.474953][ T1017] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7768'. [ 1829.476377][ T1025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1829.905085][ T1036] loop0: detected capacity change from 0 to 512 [ 1829.917430][ T1036] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1829.927961][T23558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1829.966812][ T1040] team0: Port device gtp1 added [ 1830.099625][ T1036] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.7774: invalid indirect mapped block 9 (level 0) [ 1830.122836][ T1036] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1830.123272][ T1036] EXT4-fs (loop0): Remounting filesystem read-only [ 1830.132785][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1830.132811][ C1] EXT4-fs (loop0): initial error at time 2000000666: ext4_free_branches:1023: inode 11 [ 1830.132839][ C1] EXT4-fs (loop0): last error at time 2000000666: ext4_free_branches:1023: inode 11 [ 1830.212711][ T1036] EXT4-fs (loop0): 1 truncate cleaned up [ 1830.225647][ T1036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1830.260402][T23359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1830.508179][ T1053] netlink: 'syz.0.7778': attribute type 21 has an invalid length. [ 1830.658075][ T1059] loop7: detected capacity change from 0 to 512 [ 1830.687442][ T1059] EXT4-fs: Ignoring removed nobh option [ 1830.725779][ T1059] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #3: comm syz.7.7782: corrupted inode contents [ 1830.751610][ T1062] ipvlan2: entered allmulticast mode [ 1830.757165][ T1059] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1830.759408][ T1059] EXT4-fs (loop7): Remounting filesystem read-only [ 1830.768719][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1830.768742][ C1] EXT4-fs (loop7): initial error at time 2000000666: ext4_do_update_inode:5690: inode 3 [ 1830.768774][ C1] EXT4-fs (loop7): last error at time 2000000666: ext4_do_update_inode:5690: inode 3 [ 1830.815658][ T1062] batadv_slave_1: entered allmulticast mode [ 1830.833671][ T1062] batman_adv: batadv0: Adding interface: ipvlan2 [ 1830.840653][ T1059] EXT4-fs (loop7): 1 truncate cleaned up [ 1830.849416][ T1062] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1830.854526][ T1059] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1830.875686][ T1062] batman_adv: batadv0: Interface activated: ipvlan2 [ 1830.936531][ T1059] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1831.157479][ T1071] FAULT_INJECTION: forcing a failure. [ 1831.157479][ T1071] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.188027][ T1074] tmpfs: Unknown parameter 'rootcontext—|Ñ' [ 1831.202335][ T1071] CPU: 0 UID: 0 PID: 1071 Comm: syz.6.7786 Tainted: G W syzkaller #0 PREEMPT(full) [ 1831.202403][ T1071] Tainted: [W]=WARN [ 1831.202410][ T1071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1831.202421][ T1071] Call Trace: [ 1831.202483][ T1071] [ 1831.202492][ T1071] __dump_stack+0x1d/0x30 [ 1831.202515][ T1071] dump_stack_lvl+0x95/0xd0 [ 1831.202585][ T1071] dump_stack+0x15/0x1b [ 1831.202621][ T1071] should_fail_ex+0x263/0x280 [ 1831.202727][ T1071] should_failslab+0x8c/0xb0 [ 1831.202753][ T1071] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1831.202828][ T1071] ? security_inode_alloc+0x37/0x100 [ 1831.202856][ T1071] security_inode_alloc+0x37/0x100 [ 1831.202882][ T1071] inode_init_always_gfp+0x4a0/0x4e0 [ 1831.202958][ T1071] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1831.202985][ T1071] alloc_inode+0x58/0x170 [ 1831.203000][ T1071] new_inode+0x1d/0xe0 [ 1831.203018][ T1071] proc_pid_make_inode+0x1f/0xd0 [ 1831.203064][ T1071] proc_fdinfo_instantiate+0x34/0x140 [ 1831.203086][ T1071] proc_fill_cache+0x1e0/0x260 [ 1831.203105][ T1071] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 1831.203193][ T1071] proc_readfd_common+0x29a/0x3d0 [ 1831.203213][ T1071] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 1831.203237][ T1071] proc_fdinfo_iterate+0x24/0x30 [ 1831.203295][ T1071] iterate_dir+0x114/0x330 [ 1831.203320][ T1071] __se_sys_getdents64+0xd2/0x230 [ 1831.203347][ T1071] ? __pfx_filldir64+0x10/0x10 [ 1831.203408][ T1071] __x64_sys_getdents64+0x43/0x50 [ 1831.203482][ T1071] x64_sys_call+0x2408/0x3020 [ 1831.203506][ T1071] do_syscall_64+0x12c/0x3b0 [ 1831.203567][ T1071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.203650][ T1071] RIP: 0033:0x7f0b6652ce59 [ 1831.203665][ T1071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1831.203682][ T1071] RSP: 002b:00007f0b64f87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1831.203702][ T1071] RAX: ffffffffffffffda RBX: 00007f0b667a5fa0 RCX: 00007f0b6652ce59 [ 1831.203714][ T1071] RDX: 000000000000100f RSI: 00002000000041c0 RDI: 000000000000000a [ 1831.203770][ T1071] RBP: 00007f0b64f87090 R08: 0000000000000000 R09: 0000000000000000 [ 1831.203782][ T1071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1831.203795][ T1071] R13: 00007f0b667a6038 R14: 00007f0b667a5fa0 R15: 00007ffd91806fa8 [ 1831.203812][ T1071] [ 1831.513921][ T1079] loop6: detected capacity change from 0 to 1024 [ 1831.513921][ T1077] loop1: detected capacity change from 0 to 512 [ 1831.531499][ T1079] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1831.541705][ T1077] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1831.552217][ T1079] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1831.565167][ T1079] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1831.582649][ T1079] EXT4-fs error (device loop6): ext4_get_journal_inode:5896: inode #5: comm syz.6.7789: unexpected bad inode w/o EXT4_IGET_BAD [ 1831.599103][ T1077] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.7788: bg 0: block 104: invalid block bitmap [ 1831.614821][ T1077] loop1: lost filesystem error report for type 5 error -117 [ 1831.617962][ T1077] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1831.628034][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1831.628054][ C0] EXT4-fs (loop1): initial error at time 2000000667: ext4_validate_block_bitmap:432 [ 1831.628194][ C0] EXT4-fs (loop1): last error at time 2000000667: ext4_validate_block_bitmap:432 [ 1831.668822][ T1079] loop6: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 1831.674988][ T1079] EXT4-fs (loop6): no journal found [ 1831.689504][ T1079] EXT4-fs (loop6): can't get journal size [ 1831.697274][ T1077] loop1: lost filesystem error report for type 5 error -117 [ 1831.706659][ T1077] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.7788: invalid indirect mapped block 1 (level 1) [ 1831.731579][ T1079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1831.752738][ T1077] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1831.753519][ T1077] EXT4-fs (loop1): 1 truncate cleaned up [ 1831.803280][ T1077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1831.829377][T23558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1831.840887][T31094] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1832.256381][ T1090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7788'. [ 1832.432504][ T1095] netlink: 'syz.5.7793': attribute type 21 has an invalid length. [ 1832.456656][ T1093] xt_CT: No such helper "syz0" [ 1832.994647][T27818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1833.116455][ T1110] loop0: detected capacity change from 0 to 2048 [ 1833.144336][ T1110] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 1833.223091][ T1110] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7799'. [ 1833.254597][ T28] kauditd_printk_skb: 680 callbacks suppressed [ 1833.254614][ T28] audit: type=1400 audit(2000000669.437:115009): avc: denied { recv } for pid=22279 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.193 dest=55644 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1833.332299][ T1110] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7799'. [ 1833.373112][ T28] audit: type=1326 audit(2000000669.437:115010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1109 comm="syz.0.7799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c56cce59 code=0x7ffc0000 [ 1833.377848][ T1114] loop7: detected capacity change from 0 to 128 [ 1833.458804][ T28] audit: type=1326 audit(2000000669.437:115011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1109 comm="syz.0.7799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c56cce59 code=0x7ffc0000 [ 1833.473310][ T1114] vfat: Unknown parameter '' [ 1833.506572][ T1119] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1833.527734][ T1114] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1833.539063][T22122] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1833.550522][ T1119] audit: audit_lost=976 audit_rate_limit=0 audit_backlog_limit=64 [ 1833.553543][ T1121] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1833.565249][ T28] audit: type=1326 audit(2000000669.437:115012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1109 comm="syz.0.7799" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c56cce59 code=0x7ffc0000 [ 1833.567216][ T1114] audit: audit_lost=977 audit_rate_limit=0 audit_backlog_limit=64 [ 1833.615101][ T1110] loop0: detected capacity change from 0 to 512 [ 1833.645509][ T1110] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1833.690818][ T1110] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.7799: bad orphan inode 13 [ 1833.701001][ T1110] loop0: lost filesystem error report for type 5 error -117 [ 1833.701659][ T1110] ext4_test_bit(bit=12, block=18) = 1 [ 1833.714472][ T1110] is_bad_inode(inode)=0 [ 1833.718635][ T1110] NEXT_ORPHAN(inode)=0 [ 1833.723702][ T1110] max_ino=32 [ 1833.727624][ T1110] i_nlink=1 [ 1833.731343][ T1110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1833.762835][ T1110] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1833.780221][ T1110] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7799: bg 0: block 248: padding at end of block bitmap is not set [ 1833.825011][ T1128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7797'. [ 1833.835938][ T1114] loop7: detected capacity change from 0 to 164 [ 1833.853961][ T1117] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.7799: Failed to acquire dquot type 1 [ 1833.883476][ T1114] iso9660: Bad value for 'map' [ 1833.895620][ T1110] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.7799: Failed to acquire dquot type 1 [ 1834.042265][T23359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1834.056147][ T68] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 1834.089356][ T68] loop0: lost filesystem error report for type 5 error -117 [ 1834.211925][ T1138] xt_CT: No such helper "syz0" [ 1834.514964][ T1146] FAULT_INJECTION: forcing a failure. [ 1834.514964][ T1146] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1834.706319][ T1146] CPU: 1 UID: 0 PID: 1146 Comm: syz.6.7808 Tainted: G W syzkaller #0 PREEMPT(full) [ 1834.706388][ T1146] Tainted: [W]=WARN [ 1834.706396][ T1146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1834.706409][ T1146] Call Trace: [ 1834.706416][ T1146] [ 1834.706424][ T1146] __dump_stack+0x1d/0x30 [ 1834.706447][ T1146] dump_stack_lvl+0x95/0xd0 [ 1834.706465][ T1146] dump_stack+0x15/0x1b [ 1834.706494][ T1146] should_fail_ex+0x263/0x280 [ 1834.706525][ T1146] should_fail_alloc_page+0xf2/0x100 [ 1834.706554][ T1146] alloc_pages_bulk_noprof+0x101/0x560 [ 1834.706614][ T1146] copy_splice_read+0xf3/0x6c0 [ 1834.706649][ T1146] ? __pfx_copy_splice_read+0x10/0x10 [ 1834.706763][ T1146] splice_direct_to_actor+0x26e/0x670 [ 1834.706794][ T1146] ? __pfx_direct_splice_actor+0x10/0x10 [ 1834.706905][ T1146] do_splice_direct+0x119/0x1a0 [ 1834.706983][ T1146] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1834.707046][ T1146] do_sendfile+0x382/0x650 [ 1834.707068][ T1146] __x64_sys_sendfile64+0x105/0x150 [ 1834.707087][ T1146] x64_sys_call+0x2dc4/0x3020 [ 1834.707112][ T1146] do_syscall_64+0x12c/0x3b0 [ 1834.707145][ T1146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.707179][ T1146] RIP: 0033:0x7f0b6652ce59 [ 1834.707197][ T1146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1834.707319][ T1146] RSP: 002b:00007f0b64f87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1834.707337][ T1146] RAX: ffffffffffffffda RBX: 00007f0b667a5fa0 RCX: 00007f0b6652ce59 [ 1834.707350][ T1146] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1834.707361][ T1146] RBP: 00007f0b64f87090 R08: 0000000000000000 R09: 0000000000000000 [ 1834.707373][ T1146] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1834.707447][ T1146] R13: 00007f0b667a6038 R14: 00007f0b667a5fa0 R15: 00007ffd91806fa8 [ 1834.707470][ T1146] [ 1836.120135][ T1153] loop6: detected capacity change from 0 to 256 [ 1836.161458][ T1153] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1836.931686][ T1166] netlink: 'syz.0.7811': attribute type 21 has an invalid length. [ 1837.008018][ T1170] xt_CT: No such helper "syz0" [ 1837.242233][ T1177] syzkaller1: entered promiscuous mode [ 1837.264165][ T1177] syzkaller1: entered allmulticast mode [ 1837.320143][ T1179] loop1: detected capacity change from 0 to 512 [ 1837.371639][ T1179] EXT4-fs: Ignoring removed nobh option [ 1837.428063][ T1179] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #3: comm syz.1.7820: corrupted inode contents [ 1837.466573][ T1187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7822'. [ 1837.473100][ T1179] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1837.482293][ T1179] EXT4-fs (loop1): Remounting filesystem read-only [ 1837.491392][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1837.491412][ C1] EXT4-fs (loop1): initial error at time 2000000673: ext4_do_update_inode:5690: inode 3 [ 1837.491489][ C1] EXT4-fs (loop1): last error at time 2000000673: ext4_do_update_inode:5690: inode 3 [ 1837.557430][ T1179] EXT4-fs (loop1): 1 truncate cleaned up [ 1837.572972][ T1179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1837.604014][ T1179] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1837.739493][ T1191] loop0: detected capacity change from 0 to 2048 [ 1837.826738][ T1191] loop0: p1 p3 p4 [ 1837.873054][ T1191] loop0: p4 size 589824 extends beyond EOD, truncated [ 1837.906856][ T1193] loop5: detected capacity change from 0 to 256 [ 1837.920890][T27818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1837.931026][ T1193] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1838.045520][ T1195] netdevsim netdevsim7: Firmware load for 'nel/address_bits0/../file0' refused, path contains '..' component [ 1838.267179][ T28] kauditd_printk_skb: 722 callbacks suppressed [ 1838.267199][ T28] audit: type=1400 audit(2000000674.447:115695): avc: denied { create } for pid=1199 comm="syz.1.7824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1838.320455][ T28] audit: type=1400 audit(2000000674.497:115696): avc: denied { name_bind } for pid=1207 comm="syz.7.7828" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1838.343135][ T28] audit: type=1400 audit(2000000674.497:115697): avc: denied { node_bind } for pid=1207 comm="syz.7.7828" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1838.377261][T24767] udevd[24767]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1838.410350][T22277] udevd[22277]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 1838.509089][ T28] audit: type=1400 audit(2000000674.497:115698): avc: denied { setopt } for pid=1199 comm="syz.1.7824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1838.513240][T22279] udevd[22279]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1838.529889][ T28] audit: type=1400 audit(2000000674.497:115699): avc: denied { setopt } for pid=1199 comm="syz.1.7824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1838.566554][ T1212] geneve1: entered promiscuous mode [ 1838.681459][ T1215] netlink: 'syz.7.7828': attribute type 21 has an invalid length. [ 1838.927235][ T1216] loop1: detected capacity change from 0 to 512 [ 1838.952436][ T1209] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 1838.959555][ T1209] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1838.997602][ T1216] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1839.011761][ T1216] audit: audit_lost=989 audit_rate_limit=0 audit_backlog_limit=64 [ 1839.030382][ T1209] vhci_hcd vhci_hcd.0: Device attached [ 1839.046682][ T1216] audit: backlog limit exceeded [ 1839.058195][ T1216] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1839.075200][ T1216] audit: audit_lost=990 audit_rate_limit=0 audit_backlog_limit=64 [ 1839.124188][ T1218] usbip_core: unknown command [ 1839.165153][ T1218] vhci_hcd: unknown pdu 1952805748 [ 1839.183800][ T1218] usbip_core: unknown command [ 1839.199086][T31050] vhci_hcd vhci_hcd.1: stop threads [ 1839.213430][T31050] vhci_hcd vhci_hcd.1: release socket [ 1839.229092][T31050] vhci_hcd vhci_hcd.1: disconnect device [ 1839.273555][ T3379] usb 3-1: new low-speed USB device number 3 using vhci_hcd [ 1839.281216][ T3379] usb 3-1: enqueue for inactive port 0 [ 1839.291127][ T3379] usb 3-1: enqueue for inactive port 0 [ 1839.306662][ T3379] usb 3-1: enqueue for inactive port 0 [ 1839.383619][ T3379] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1839.543065][ T1212] geneve1: left promiscuous mode [ 1839.875654][ T1232] loop0: detected capacity change from 0 to 512 [ 1839.924091][ T1232] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1839.962115][ T1232] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 1839.972551][ T1232] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.7833: Corrupt directory, running e2fsck is recommended [ 1839.988134][ T1232] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 1840.013620][ T1232] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.7833: corrupted in-inode xattr: e_name out of bounds [ 1840.034389][ T1232] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1840.034600][ T1232] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7833: couldn't read orphan inode 15 (err -117) [ 1840.043802][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1840.043840][ C0] EXT4-fs (loop0): initial error at time 2000000676: ext4_iget_extra_inode:5128: inode 15 [ 1840.043870][ C0] EXT4-fs (loop0): last error at time 2000000676: ext4_iget_extra_inode:5128: inode 15 [ 1840.093478][ T1232] loop0: lost filesystem error report for type 5 error -117 [ 1840.109569][ T1232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1840.138663][ T1235] loop7: detected capacity change from 0 to 512 [ 1840.177679][ T1235] EXT4-fs: Ignoring removed nobh option [ 1840.185741][ T1232] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1840.228334][ T1232] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 1840.259071][ T1235] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #3: comm syz.7.7834: corrupted inode contents [ 1840.295013][ T1232] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.7833: Corrupt directory, running e2fsck is recommended [ 1840.333797][ T1235] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1840.335168][ T1235] EXT4-fs (loop7): Remounting filesystem read-only [ 1840.344635][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1840.344659][ C1] EXT4-fs (loop7): initial error at time 2000000676: ext4_do_update_inode:5690: inode 3 [ 1840.344684][ C1] EXT4-fs (loop7): last error at time 2000000676: ext4_do_update_inode:5690: inode 3 [ 1840.394173][ T1235] EXT4-fs (loop7): 1 truncate cleaned up [ 1840.414069][ T1235] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1840.427765][ T1240] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1840.439861][ T1240] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 1840.451919][ T1240] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.7833: Corrupt directory, running e2fsck is recommended [ 1840.466702][ T1242] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1840.478572][ T1235] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1840.490365][ T1242] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 1840.522488][ T1242] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.7833: Corrupt directory, running e2fsck is recommended [ 1840.585021][ T1232] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1840.640158][ T1248] syzkaller1: entered promiscuous mode [ 1840.662774][ T1248] syzkaller1: entered allmulticast mode [ 1840.689225][T23359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1840.690608][ T1252] loop5: detected capacity change from 0 to 256 [ 1840.727590][T31094] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1840.745222][ T1252] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1841.016348][ T1267] loop0: detected capacity change from 0 to 512 [ 1841.047782][ T1267] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1841.086525][ T1267] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.7843: bg 0: block 104: invalid block bitmap [ 1841.152431][ T1267] loop0: lost filesystem error report for type 5 error -117 [ 1841.152652][ T1267] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1841.160437][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1841.160457][ C1] EXT4-fs (loop0): initial error at time 2000000677: ext4_validate_block_bitmap:432 [ 1841.160494][ C1] EXT4-fs (loop0): last error at time 2000000677: ext4_validate_block_bitmap:432 [ 1841.223599][ T1267] loop0: lost filesystem error report for type 5 error -117 [ 1841.223825][ T1267] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.7843: invalid indirect mapped block 1 (level 1) [ 1841.309671][ T1267] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1841.310013][ T1267] EXT4-fs (loop0): 1 truncate cleaned up [ 1841.372247][ T1267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1842.248495][T23359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1842.390584][ T1295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7848'. [ 1842.512559][ T1295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1842.593670][ T1295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1842.657865][ T1300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7850'. [ 1842.678327][ T1304] loop6: detected capacity change from 0 to 512 [ 1842.714008][ T1304] EXT4-fs: Ignoring removed nobh option [ 1842.790478][ T1304] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #3: comm syz.6.7851: corrupted inode contents [ 1842.825374][ T1304] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1842.825653][ T1304] EXT4-fs (loop6): Remounting filesystem read-only [ 1842.836139][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1842.836165][ C0] EXT4-fs (loop6): initial error at time 2000000679: ext4_do_update_inode:5690: inode 3 [ 1842.836194][ C0] EXT4-fs (loop6): last error at time 2000000679: ext4_do_update_inode:5690: inode 3 [ 1842.878445][ T1304] EXT4-fs (loop6): 1 truncate cleaned up [ 1842.895512][ T1304] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1842.921510][ T1304] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1842.969541][ T1311] loop5: detected capacity change from 0 to 512 [ 1843.016651][ T1311] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1843.057349][ T1311] System zones: 1-12 [ 1843.078938][ T1311] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.7854: corrupted in-inode xattr: e_value size too large [ 1843.103682][ T1311] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1843.107077][ T1311] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.7854: couldn't read orphan inode 15 (err -117) [ 1843.116834][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1843.116881][ C1] EXT4-fs (loop5): initial error at time 2000000679: ext4_iget_extra_inode:5128: inode 15 [ 1843.116945][ C1] EXT4-fs (loop5): last error at time 2000000679: ext4_iget_extra_inode:5128: inode 15 [ 1843.162249][ T1311] loop5: lost filesystem error report for type 5 error -117 [ 1843.190721][ T1311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1843.216034][T23558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1843.297617][ T28] kauditd_printk_skb: 532 callbacks suppressed [ 1843.297636][ T28] audit: type=1400 audit(2000000679.467:116198): avc: denied { read write } for pid=23359 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1843.398102][ T28] audit: type=1400 audit(2000000679.467:116199): avc: denied { open } for pid=23359 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1843.415253][ T1321] gretap1: entered allmulticast mode [ 1843.457199][ T1324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7856'. [ 1843.518394][ T1311] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.7854: Unrecognised inode hash code 4 [ 1843.523197][ T1321] team0: Device gretap1 is of different type [ 1843.538412][ T28] audit: type=1400 audit(2000000679.467:116200): avc: denied { ioctl } for pid=23359 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1965 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1843.568984][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1843.576198][ C0] audit: audit_lost=1001 audit_rate_limit=0 audit_backlog_limit=64 [ 1843.582120][ T1325] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1843.584753][ C0] audit: backlog limit exceeded [ 1843.588002][ T1311] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.7854: Corrupt directory, running e2fsck is recommended [ 1843.617273][ T1318] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1843.634115][ T1325] audit: audit_lost=1002 audit_rate_limit=0 audit_backlog_limit=64 [ 1843.639197][T23359] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1843.782334][T22122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1844.040358][ T1333] loop0: detected capacity change from 0 to 512 [ 1844.081704][ T1333] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1844.099053][ T1333] EXT4-fs (loop0): group descriptors corrupted! [ 1844.397784][ T1360] netlink: 'syz.1.7869': attribute type 12 has an invalid length. [ 1844.439234][ T1358] xfrm0 speed is unknown, defaulting to 1000 [ 1845.290796][ T1376] loop7: detected capacity change from 0 to 512 [ 1845.358161][ T1376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1845.383677][ T1376] System zones: 1-12 [ 1845.399933][ T1376] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.7873: corrupted in-inode xattr: e_value size too large [ 1845.543815][ T1376] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1845.553535][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1845.572068][ C0] EXT4-fs (loop7): initial error at time 2000000681: ext4_iget_extra_inode:5128: inode 15 [ 1845.583397][ C0] EXT4-fs (loop7): last error at time 2000000681: ext4_iget_extra_inode:5128: inode 15 [ 1845.596526][ T1376] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.7873: couldn't read orphan inode 15 (err -117) [ 1845.622374][ T1376] loop7: lost filesystem error report for type 5 error -117 [ 1845.624785][ T1376] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1845.865110][ T1381] loop6: detected capacity change from 0 to 1024 [ 1845.877612][ T1381] EXT4-fs: Ignoring removed bh option [ 1845.981157][ T1381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1846.308539][ T1382] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.7873: Unrecognised inode hash code 4 [ 1846.343418][ T1382] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7873: Corrupt directory, running e2fsck is recommended [ 1847.409238][T31094] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1847.423827][T23558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1847.670514][ T1397] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7877'. [ 1847.836375][ T1403] loop5: detected capacity change from 0 to 512 [ 1847.846997][ T1403] EXT4-fs: Ignoring removed bh option [ 1847.855761][ T1403] EXT4-fs: Ignoring removed mblk_io_submit option [ 1847.870010][ T1403] EXT4-fs: Ignoring removed bh option [ 1847.921505][ T1403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1847.924496][ T1396] loop7: detected capacity change from 0 to 2048 [ 1847.946293][ T1403] ext4 filesystem being mounted at /580/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1847.959656][ T1396] EXT4-fs (loop7): Invalid log cluster size: 31 [ 1848.045851][ T1411] loop0: detected capacity change from 0 to 512 [ 1848.136029][ T1411] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1848.181534][ T1411] EXT4-fs (loop0): group descriptors corrupted! [ 1848.305352][ T28] kauditd_printk_skb: 876 callbacks suppressed [ 1848.305366][ T28] audit: type=1400 audit(2000000684.487:117070): avc: denied { unmount } for pid=22122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1848.515772][ T1416] loop7: detected capacity change from 0 to 512 [ 1848.548203][ T28] audit: type=1400 audit(2000000684.477:117067): avc: denied { read write } for pid=1398 comm="syz.0.7882" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1848.729880][ T28] audit: type=1400 audit(2000000684.497:117071): avc: denied { read write open } for pid=1398 comm="syz.0.7882" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1848.765550][ T28] audit: type=1400 audit(2000000684.567:117072): avc: denied { open } for pid=1412 comm="syz.7.7886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1848.881091][ T28] audit: type=1400 audit(2000000684.567:117073): avc: denied { perfmon } for pid=1412 comm="syz.7.7886" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1848.933375][ T1411] xfrm0 speed is unknown, defaulting to 1000 [ 1848.995457][ T28] audit: type=1400 audit(2000000684.567:117074): avc: denied { kernel } for pid=1412 comm="syz.7.7886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1849.104084][ T28] audit: type=1400 audit(2000000684.577:117075): avc: denied { read } for pid=1412 comm="syz.7.7886" dev="nsfs" ino=4026532378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1849.229054][ T28] audit: type=1400 audit(2000000684.577:117076): avc: denied { read open } for pid=1412 comm="syz.7.7886" path="net:[4026532378]" dev="nsfs" ino=4026532378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1849.381344][ T28] audit: type=1400 audit(2000000684.587:117077): avc: denied { create } for pid=1412 comm="syz.7.7886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1849.430992][T22122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1849.538449][ T1416] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.7886: corrupted inode contents [ 1849.552075][ T1416] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1849.553531][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1849.570898][ C1] EXT4-fs (loop7): initial error at time 2000000685: ext4_do_update_inode:5690: inode 16 [ 1849.581641][ C1] EXT4-fs (loop7): last error at time 2000000685: ext4_do_update_inode:5690: inode 16 [ 1849.694535][ T28] audit: type=1400 audit(2000000684.637:117078): avc: denied { create } for pid=1398 comm="syz.0.7882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1850.009855][ T1416] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #16: comm syz.7.7886: mark_inode_dirty error [ 1850.022225][ T1416] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1850.027288][ T1416] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.7886: corrupted inode contents [ 1850.052936][ T1416] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1850.060701][ T1416] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.7886: mark_inode_dirty error [ 1850.083063][ T1416] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1850.086862][ T1416] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.7886: corrupted inode contents [ 1850.110532][ T1416] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1850.111815][ T1416] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 1850.132454][ T1416] loop7: lost filesystem error report for type 5 error -117 [ 1850.140469][ T1416] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.7886: corrupted inode contents [ 1850.166700][ T1416] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1850.172342][ T1416] EXT4-fs error (device loop7): ext4_truncate:4690: inode #16: comm syz.7.7886: mark_inode_dirty error [ 1850.195957][ T1416] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1850.201541][ T1416] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 1850.221475][ T1416] loop7: lost filesystem error report for type 5 error -117 [ 1850.227646][ T1416] EXT4-fs (loop7): 1 truncate cleaned up [ 1850.244695][ T1416] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1850.260277][ T1416] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1850.295640][T31048] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 1 [ 1850.649535][T31094] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1850.895156][ T1433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7892'. [ 1851.478673][ T1457] loop1: detected capacity change from 0 to 512 [ 1851.531860][ T1457] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1851.595624][ T1457] EXT4-fs (loop1): group descriptors corrupted! [ 1851.689096][ T1455] loop7: detected capacity change from 0 to 8192 [ 1851.724277][ T1451] xfrm0 speed is unknown, defaulting to 1000 [ 1851.932620][ T1455] loop7: p1 < > p2 p4 < p5 > [ 1851.978531][ T1455] loop7: partition table partially beyond EOD, truncated [ 1852.030537][ T1455] loop7: p1 start 134217728 is beyond EOD, truncated [ 1852.045772][ T1478] FAULT_INJECTION: forcing a failure. [ 1852.045772][ T1478] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1852.071236][ T1455] loop7: p2 size 591360 extends beyond EOD, truncated [ 1852.112285][ T1478] CPU: 0 UID: 0 PID: 1478 Comm: syz.5.7906 Tainted: G W syzkaller #0 PREEMPT(full) [ 1852.112322][ T1478] Tainted: [W]=WARN [ 1852.112375][ T1478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1852.112389][ T1478] Call Trace: [ 1852.112397][ T1478] [ 1852.112407][ T1478] __dump_stack+0x1d/0x30 [ 1852.112432][ T1478] dump_stack_lvl+0x95/0xd0 [ 1852.112454][ T1478] dump_stack+0x15/0x1b [ 1852.112539][ T1478] should_fail_ex+0x263/0x280 [ 1852.112672][ T1478] should_fail_alloc_page+0xf2/0x100 [ 1852.112744][ T1478] __alloc_frozen_pages_noprof+0x108/0x350 [ 1852.112848][ T1478] alloc_pages_mpol+0xb3/0x260 [ 1852.112921][ T1478] folio_alloc_mpol_noprof+0x39/0x80 [ 1852.112942][ T1478] shmem_get_folio_gfp+0x3da/0xd60 [ 1852.113008][ T1478] shmem_fallocate+0x628/0x920 [ 1852.113036][ T1478] vfs_fallocate+0x3b6/0x400 [ 1852.113065][ T1478] __x64_sys_fallocate+0x7a/0xd0 [ 1852.113092][ T1478] x64_sys_call+0x298e/0x3020 [ 1852.113128][ T1478] do_syscall_64+0x12c/0x3b0 [ 1852.113160][ T1478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.113186][ T1478] RIP: 0033:0x7ff58799ce59 [ 1852.113202][ T1478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1852.113259][ T1478] RSP: 002b:00007ff5863ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1852.113342][ T1478] RAX: ffffffffffffffda RBX: 00007ff587c15fa0 RCX: 00007ff58799ce59 [ 1852.113355][ T1478] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 1852.113436][ T1478] RBP: 00007ff5863ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1852.113459][ T1478] R10: 0000000002000402 R11: 0000000000000246 R12: 0000000000000002 [ 1852.113521][ T1478] R13: 00007ff587c16038 R14: 00007ff587c15fa0 R15: 00007fffec06f5f8 [ 1852.113539][ T1478] [ 1852.150045][ T1449] xfrm0 speed is unknown, defaulting to 1000 [ 1852.158078][ T1455] loop7: p5 size 591360 extends beyond EOD, truncated [ 1852.378027][ T1490] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7909'. [ 1852.393708][ T1489] loop6: detected capacity change from 0 to 512 [ 1852.439950][ T1489] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1852.457823][ T1489] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 1852.492092][ T1489] EXT4-fs (loop6): 1 truncate cleaned up [ 1852.504523][ T1489] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1852.508899][ T1490] loop5: detected capacity change from 0 to 512 [ 1852.605416][ T1490] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1852.647959][T23558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1852.664818][ T1490] EXT4-fs (loop5): 1 truncate cleaned up [ 1852.687066][ T1490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1852.819310][ T1498] loop6: detected capacity change from 0 to 512 [ 1852.842670][ T1498] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1852.920578][ T1498] EXT4-fs (loop6): 1 truncate cleaned up [ 1852.941909][ T1498] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1853.056036][T22122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1853.078496][T23558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1853.241360][ T1505] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7912'. [ 1853.316960][ T28] kauditd_printk_skb: 729 callbacks suppressed [ 1853.316976][ T28] audit: type=1400 audit(2000000689.497:117805): avc: denied { open } for pid=1501 comm="syz.5.7911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1853.398087][ T28] audit: type=1400 audit(2000000689.537:117807): avc: denied { perfmon } for pid=1501 comm="syz.5.7911" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1853.453432][ T1511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7914'. [ 1853.482803][ T28] audit: type=1400 audit(2000000689.537:117808): avc: denied { kernel } for pid=1501 comm="syz.5.7911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1853.548164][ T28] audit: type=1400 audit(2000000689.527:117806): avc: denied { perfmon } for pid=1504 comm="syz.6.7912" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1853.597547][ T1513] loop0: detected capacity change from 0 to 512 [ 1853.615044][ T28] audit: type=1400 audit(2000000689.537:117809): avc: denied { prog_load } for pid=1504 comm="syz.6.7912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1853.657466][ T1513] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1853.669040][ T1513] System zones: 1-12 [ 1853.674795][ T28] audit: type=1400 audit(2000000689.537:117810): avc: denied { bpf } for pid=1504 comm="syz.6.7912" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1853.692442][ T1513] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.7915: corrupted in-inode xattr: e_value size too large [ 1853.695941][ T28] audit: type=1400 audit(2000000689.537:117811): avc: denied { perfmon } for pid=1504 comm="syz.6.7912" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1853.731974][ T28] audit: type=1400 audit(2000000689.547:117812): avc: denied { perfmon } for pid=1501 comm="syz.5.7911" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1853.754077][ T28] audit: type=1400 audit(2000000689.547:117813): avc: denied { map_create } for pid=1501 comm="syz.5.7911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1853.766062][ T1513] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1853.773676][ T28] audit: type=1400 audit(2000000689.547:117814): avc: denied { perfmon } for pid=1501 comm="syz.5.7911" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1853.796932][ T1513] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7915: couldn't read orphan inode 15 (err -117) [ 1853.804352][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1853.804384][ C0] EXT4-fs (loop0): initial error at time 2000000689: ext4_iget_extra_inode:5128: inode 15 [ 1853.804437][ C0] EXT4-fs (loop0): last error at time 2000000689: ext4_iget_extra_inode:5128: inode 15 [ 1853.863698][ T1513] loop0: lost filesystem error report for type 5 error -117 [ 1853.874507][ T1513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1854.024192][ T1513] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.7915: Unrecognised inode hash code 4 [ 1854.056100][ T1513] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.7915: Corrupt directory, running e2fsck is recommended [ 1854.156190][T23359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1854.785206][ T1553] loop0: detected capacity change from 0 to 1024 [ 1854.796649][ T1553] EXT4-fs: Ignoring removed bh option [ 1855.511689][ T1553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1856.439380][T23359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1856.621056][ T1570] netlink: 'syz.6.7929': attribute type 21 has an invalid length. [ 1856.730172][ T1574] loop0: detected capacity change from 0 to 512 [ 1856.781672][ T1574] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1856.800814][ T1574] System zones: 1-12 [ 1856.804995][ T1574] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.7930: corrupted in-inode xattr: e_value size too large [ 1856.820730][ T1574] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1856.820945][ T1574] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7930: couldn't read orphan inode 15 (err -117) [ 1856.832604][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1856.832632][ C0] EXT4-fs (loop0): initial error at time 2000000692: ext4_iget_extra_inode:5128: inode 15 [ 1856.832733][ C0] EXT4-fs (loop0): last error at time 2000000692: ext4_iget_extra_inode:5128: inode 15 [ 1856.879994][ T1574] loop0: lost filesystem error report for type 5 error -117 [ 1856.881307][ T1574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1857.049304][ T1574] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.7930: Unrecognised inode hash code 4 [ 1857.063711][ T1574] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.7930: Corrupt directory, running e2fsck is recommended [ 1857.087179][ T1589] syzkaller1: entered promiscuous mode [ 1857.105832][ T1589] syzkaller1: entered allmulticast mode [ 1857.167049][T23359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1857.456046][ T1597] loop5: detected capacity change from 0 to 256 [ 1857.510478][ T1597] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1857.686717][ T1603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7942'. [ 1857.768676][ T1607] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7941'. [ 1857.924676][ T1607] loop7: detected capacity change from 0 to 512 [ 1857.966046][ T1607] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1858.069946][ T1607] EXT4-fs (loop7): 1 truncate cleaned up [ 1858.090689][ T1607] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1858.245588][ T1622] loop0: detected capacity change from 0 to 512 [ 1858.323993][ T28] kauditd_printk_skb: 936 callbacks suppressed [ 1858.324010][ T28] audit: type=1400 audit(2000000694.507:118751): avc: denied { create } for pid=1624 comm="syz.1.7948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1858.370534][ T1622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1858.382380][ T1622] System zones: 1-12 [ 1858.388244][ T28] audit: type=1400 audit(2000000694.507:118752): avc: denied { prog_load } for pid=1624 comm="syz.1.7948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1858.407934][ T28] audit: type=1400 audit(2000000694.507:118753): avc: denied { bpf } for pid=1624 comm="syz.1.7948" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1858.420755][ T1622] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.7947: corrupted in-inode xattr: e_value size too large [ 1858.430419][ T28] audit: type=1400 audit(2000000694.507:118754): avc: denied { perfmon } for pid=1624 comm="syz.1.7948" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1858.468440][ T28] audit: type=1400 audit(2000000694.567:118755): avc: denied { read write } for pid=23558 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1858.498075][ T28] audit: type=1400 audit(2000000694.567:118756): avc: denied { open } for pid=23558 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1858.562855][ T1622] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1858.562881][ T28] audit: type=1400 audit(2000000694.567:118757): avc: denied { ioctl } for pid=23558 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1858.562912][ T28] audit: type=1400 audit(2000000694.647:118758): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30036 daddr=10.128.0.193 dest=55644 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1858.562942][ T28] audit: type=1400 audit(2000000694.677:118759): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30036 daddr=10.128.0.193 dest=55644 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1858.633520][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1858.659546][ C1] EXT4-fs (loop0): initial error at time 2000000694: ext4_iget_extra_inode:5128: inode 15 [ 1858.661160][ T28] audit: type=1400 audit(2000000694.677:118760): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30036 daddr=10.128.0.193 dest=55644 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1858.669691][ C1] EXT4-fs (loop0): last error at time 2000000694: ext4_iget_extra_inode:5128: inode 15 [ 1858.672151][ T1622] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7947: couldn't read orphan inode 15 (err -117) [ 1858.715332][ T1629] loop5: detected capacity change from 0 to 1024 [ 1858.731208][T31094] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1858.746814][ T1622] loop0: lost filesystem error report for type 5 error -117 [ 1858.748143][ T1622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1858.888913][ T1637] syzkaller1: entered promiscuous mode [ 1858.909634][ T1637] syzkaller1: entered allmulticast mode [ 1858.979556][ T1639] netlink: 'syz.6.7950': attribute type 21 has an invalid length. [ 1859.089887][ T1622] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.7947: Unrecognised inode hash code 4 [ 1859.122529][ T1622] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.7947: Corrupt directory, running e2fsck is recommended [ 1859.149963][ T1644] xt_CT: No such helper "syz0" [ 1859.278519][ T1649] loop1: detected capacity change from 0 to 256 [ 1859.300999][ T1649] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1859.346630][T23359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1859.441192][ T1656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7957'. [ 1859.640207][ T1663] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7961'. [ 1859.777325][ T1663] loop5: detected capacity change from 0 to 512 [ 1859.797292][ T1663] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1859.860304][ T1663] EXT4-fs (loop5): 1 truncate cleaned up [ 1859.906988][ T1663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1860.250064][ T1679] xt_CT: No such helper "syz0" [ 1860.302057][T22122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1860.346319][ T1684] syzkaller1: entered promiscuous mode [ 1860.366307][ T1684] syzkaller1: entered allmulticast mode [ 1860.426700][ T1686] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7967'. [ 1860.765728][ T1697] loop0: detected capacity change from 0 to 1024 [ 1860.773802][ T1697] EXT4-fs: test_dummy_encryption option not supported [ 1861.029760][ T1701] netlink: 'syz.7.7972': attribute type 21 has an invalid length. [ 1861.042126][ T1700] loop5: detected capacity change from 0 to 512 [ 1861.193408][ T1707] loop0: detected capacity change from 0 to 512 [ 1861.219909][ T1700] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1861.240910][ T1707] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1861.257672][ T1707] EXT4-fs (loop0): 1 truncate cleaned up [ 1861.264218][ T1707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1861.305421][ T1707] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7973: bg 0: block 465: padding at end of block bitmap is not set [ 1861.320760][ T1707] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 117 [ 1861.334867][ T1707] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1861.334867][ T1707] [ 1861.533313][ T1700] System zones: 1-12 [ 1861.760791][ T1700] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.7968: corrupted in-inode xattr: e_value size too large [ 1861.821406][ T1700] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1861.822116][ T1700] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.7968: couldn't read orphan inode 15 (err -117) [ 1861.835612][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1861.835657][ C0] EXT4-fs (loop5): initial error at time 2000000697: ext4_iget_extra_inode:5128: inode 15 [ 1861.835775][ C0] EXT4-fs (loop5): last error at time 2000000697: ext4_iget_extra_inode:5128: inode 15 [ 1861.979204][ T1700] loop5: lost filesystem error report for type 5 error -117 [ 1861.987472][ T1700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1862.180101][ T1713] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.7968: Unrecognised inode hash code 4 [ 1862.204293][ T1716] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7976'. [ 1862.370477][ T1713] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.7968: Corrupt directory, running e2fsck is recommended [ 1862.702077][ T1724] loop1: detected capacity change from 0 to 512 [ 1862.815037][ T1724] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.7975: corrupted inode contents [ 1862.827592][ T1724] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1862.828327][ T1724] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.7975: mark_inode_dirty error [ 1862.838991][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1862.839019][ C1] EXT4-fs (loop1): initial error at time 2000000699: ext4_do_update_inode:5690: inode 16 [ 1862.839045][ C1] EXT4-fs (loop1): last error at time 2000000699: ext4_do_update_inode:5690: inode 16 [ 1862.876956][ T1724] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1862.895783][ T1724] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.7975: corrupted inode contents [ 1862.917961][ T1724] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1862.918655][ T1724] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.7975: mark_inode_dirty error [ 1862.939712][ T1724] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1862.940758][ T1724] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.7975: corrupted inode contents [ 1862.962817][ T1724] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1862.963293][ T1724] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1862.981056][ T1724] loop1: lost filesystem error report for type 5 error -117 [ 1862.981360][ T1724] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.7975: corrupted inode contents [ 1863.000845][ T1724] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1863.011063][ T1724] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.7975: mark_inode_dirty error [ 1863.032487][ T1724] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1863.033005][ T1724] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1863.055599][ T1724] loop1: lost filesystem error report for type 5 error -117 [ 1863.063341][ T1724] EXT4-fs (loop1): 1 truncate cleaned up [ 1863.077020][ T1724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1863.090324][ T1724] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1863.333662][ T28] kauditd_printk_skb: 638 callbacks suppressed [ 1863.333702][ T28] audit: type=1400 audit(2000000699.267:119399): avc: denied { mount } for pid=1715 comm="syz.1.7975" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1863.386735][ T28] audit: type=1400 audit(2000000699.297:119400): avc: denied { read write } for pid=1715 comm="syz.1.7975" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1863.595997][ T28] audit: type=1400 audit(2000000699.297:119401): avc: denied { open } for pid=1715 comm="syz.1.7975" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1863.646629][ T28] audit: type=1400 audit(2000000699.387:119402): avc: denied { create } for pid=1715 comm="syz.1.7975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1863.691147][ T28] audit: type=1400 audit(2000000699.397:119403): avc: denied { read } for pid=1715 comm="syz.1.7975" dev="nsfs" ino=4026533198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1863.732641][ T28] audit: type=1400 audit(2000000699.397:119404): avc: denied { read open } for pid=1715 comm="syz.1.7975" path="ipc:[4026533198]" dev="nsfs" ino=4026533198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1863.758587][ T28] audit: type=1400 audit(2000000699.397:119405): avc: denied { allowed } for pid=1715 comm="syz.1.7975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1863.778550][ T28] audit: type=1400 audit(2000000699.907:119406): avc: denied { read } for pid=1714 comm="syz.7.7976" dev="nsfs" ino=4026532378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1863.808173][ T28] audit: type=1400 audit(2000000699.907:119407): avc: denied { open } for pid=1714 comm="syz.7.7976" path="net:[4026532378]" dev="nsfs" ino=4026532378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1863.832433][ T28] audit: type=1400 audit(2000000699.907:119408): avc: denied { create } for pid=1714 comm="syz.7.7976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1864.013370][ T225] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 1864.157057][T23359] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1864.179233][T23359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1864.181743][T22122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1864.244089][T27818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1864.313262][ T1733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7978'. [ 1864.378658][ T1735] xt_CT: No such helper "syz0" [ 1864.379762][ T1739] syzkaller1: entered promiscuous mode [ 1864.390751][ T1739] syzkaller1: entered allmulticast mode [ 1864.404838][ T1733] loop0: detected capacity change from 0 to 512 [ 1864.433836][ T1733] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1864.484895][ T1733] EXT4-fs (loop0): 1 truncate cleaned up [ 1864.501562][ T1733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1864.965421][T23359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1865.158258][ T1757] netlink: 'syz.7.7987': attribute type 4 has an invalid length. [ 1865.166204][ T1757] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7987'. [ 1865.176041][ T1757] .`: renamed from bond0 [ 1865.411328][ T1764] loop6: detected capacity change from 0 to 512 [ 1865.706037][ T1771] loop0: detected capacity change from 0 to 512 [ 1865.929667][ T1764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1865.965465][ T1764] System zones: 1-12 [ 1865.969135][ T1771] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.7988: corrupted inode contents [ 1865.970161][ T1764] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.7989: corrupted in-inode xattr: e_value size too large [ 1865.981482][ T1771] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1865.995669][ T1764] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1865.995873][ T1771] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.7988: mark_inode_dirty error [ 1866.013511][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1866.014193][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1866.026101][ C0] EXT4-fs (loop6): initial error at time 2000000702: ext4_iget_extra_inode:5128 [ 1866.032592][ C1] EXT4-fs (loop0): initial error at time 2000000702: ext4_do_update_inode:5690: inode 16 [ 1866.039584][ C0] : inode 15 [ 1866.049023][ C1] EXT4-fs (loop0): last error at time 2000000702: ext4_do_update_inode:5690 [ 1866.058921][ C0] EXT4-fs (loop6): last error at time 2000000702: ext4_iget_extra_inode:5128 [ 1866.062115][ C1] : inode 16 [ 1866.071145][ C0] : inode 15 [ 1866.083499][ T1771] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.7988: corrupted inode contents [ 1866.086819][ T1764] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.7989: couldn't read orphan inode 15 (err -117) [ 1866.110733][ T1771] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.7988: mark_inode_dirty error [ 1866.133339][ T1771] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.7988: corrupted inode contents [ 1866.147670][ T1771] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1866.156454][ T1771] loop0: lost filesystem error report for type 5 error -117 [ 1866.166543][ T1771] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.7988: corrupted inode contents [ 1866.186215][ T1771] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.7988: mark_inode_dirty error [ 1866.200197][ T1771] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1866.209561][ T1771] loop0: lost filesystem error report for type 5 error -117 [ 1866.213990][ T1771] EXT4-fs (loop0): 1 truncate cleaned up [ 1866.221842][ T1764] loop6: lost filesystem error report for type 5 error -117 [ 1866.227964][ T1771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1866.248587][ T1771] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1866.304603][ T225] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 1866.322057][ T1764] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1866.605811][ T1778] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7991'. [ 1866.671190][T31050] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1866.713992][T31050] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.733426][ T1786] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.7989: Unrecognised inode hash code 4 [ 1866.744936][ T1786] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7989: Corrupt directory, running e2fsck is recommended [ 1866.827229][T31050] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1866.856026][T23558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1866.873260][T31050] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.949017][T31050] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1866.988525][T31050] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.995526][ T1794] loop6: detected capacity change from 0 to 736 [ 1867.030961][ T1773] xfrm0 speed is unknown, defaulting to 1000 [ 1867.144530][T31050] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1867.191891][T31050] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.449940][ T1808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7998'. [ 1867.496218][ T1808] loop1: detected capacity change from 0 to 512 [ 1867.531905][ T1808] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1867.558984][ T1808] EXT4-fs (loop1): 1 truncate cleaned up [ 1867.588371][ T1808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1867.697199][T31050] .` (unregistering): Released all slaves [ 1867.735385][T31050] bond1 (unregistering): Released all slaves [ 1867.796571][T31050] bond2 (unregistering): Released all slaves [ 1867.857772][T31050] tipc: Disabling bearer [ 1867.867515][T31050] tipc: Left network mode [ 1867.934856][T27818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1868.068754][ T1821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8001'. [ 1868.201665][ T1825] loop1: detected capacity change from 0 to 512 [ 1868.215553][ T1825] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1868.268475][ T1825] EXT4-fs (loop1): group descriptors corrupted! [ 1868.387676][ T28] kauditd_printk_skb: 719 callbacks suppressed [ 1868.387773][ T28] audit: type=1400 audit(2000000704.527:120126): avc: denied { read } for pid=1817 comm="syz.6.8000" dev="nsfs" ino=4026533604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1868.458247][ T1835] loop6: detected capacity change from 0 to 512 [ 1868.584286][ T1835] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.8000: corrupted inode contents [ 1868.596378][ T1835] fserror_report: 6 callbacks suppressed [ 1868.596418][ T1835] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1868.603403][ T1835] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #16: comm syz.6.8000: mark_inode_dirty error [ 1868.612577][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1868.612612][ C1] EXT4-fs (loop6): initial error at time 2000000704: ext4_do_update_inode:5690: inode 16 [ 1868.612637][ C1] EXT4-fs (loop6): last error at time 2000000704: ext4_do_update_inode:5690: inode 16 [ 1868.650812][ T1835] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1868.651951][ T1835] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.8000: corrupted inode contents [ 1868.673302][ T1835] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1868.677909][ T1835] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.8000: mark_inode_dirty error [ 1868.698928][ T1835] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1868.700675][ T1835] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.8000: corrupted inode contents [ 1868.722133][ T1835] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1868.723500][ T1835] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1868.741475][ T1835] loop6: lost filesystem error report for type 5 error -117 [ 1868.743573][ T1835] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.8000: corrupted inode contents [ 1868.763302][ T1835] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1868.764748][ T1835] EXT4-fs error (device loop6): ext4_truncate:4690: inode #16: comm syz.6.8000: mark_inode_dirty error [ 1868.785643][ T1835] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1868.791353][ T1835] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1868.809796][ T1835] loop6: lost filesystem error report for type 5 error -117 [ 1868.811940][ T1835] EXT4-fs (loop6): 1 truncate cleaned up [ 1868.827133][ T1835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1868.843553][ T1835] ext4 filesystem being mounted at /555/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1869.037528][ T28] audit: type=1400 audit(2000000704.527:120127): avc: denied { read open } for pid=1817 comm="syz.6.8000" path="net:[4026533604]" dev="nsfs" ino=4026533604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1869.062318][ T28] audit: type=1400 audit(2000000704.527:120128): avc: denied { create } for pid=1817 comm="syz.6.8000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1869.085839][ T28] audit: type=1400 audit(2000000704.637:120129): avc: denied { read write } for pid=1817 comm="syz.6.8000" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1869.221299][T19066] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1869.327008][ T28] audit: type=1400 audit(2000000704.637:120130): avc: denied { open } for pid=1817 comm="syz.6.8000" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1869.383842][T19066] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 1869.434633][ T28] audit: type=1400 audit(2000000704.637:120131): avc: denied { ioctl } for pid=1817 comm="syz.6.8000" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1869.706276][ T1816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1869.757285][ T28] audit: type=1400 audit(2000000704.647:120132): avc: denied { mounton } for pid=1817 comm="syz.6.8000" path="/555/file1" dev="tmpfs" ino=3006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1869.796125][ T1816] audit: audit_lost=1007 audit_rate_limit=0 audit_backlog_limit=64 [ 1869.859980][T31050] hsr_slave_0: left promiscuous mode [ 1869.960911][T31050] hsr_slave_1: left promiscuous mode [ 1869.973016][T23558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1869.989257][T31050] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1869.996995][T31050] batman_adv: batadv0: Removing interface: ipvlan2 [ 1870.048899][T31050] veth1_macvtap: left allmulticast mode [ 1870.066057][T31050] veth1_macvtap: left promiscuous mode [ 1870.082975][T31050] veth0_macvtap: left promiscuous mode [ 1870.106543][T31050] veth1_vlan: left promiscuous mode [ 1870.125239][T31050] veth0_vlan: left promiscuous mode [ 1870.131135][ T1850] loop7: detected capacity change from 0 to 512 [ 1870.165116][ T1850] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1870.173141][ T1850] System zones: 1-12 [ 1870.294616][ T1850] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.8003: corrupted in-inode xattr: e_value size too large [ 1870.339469][ T1850] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1870.343305][ T1850] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.8003: couldn't read orphan inode 15 (err -117) [ 1870.343521][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1870.343555][ C0] EXT4-fs (loop7): initial error at time 2000000706: ext4_iget_extra_inode:5128: inode 15 [ 1870.343616][ C0] EXT4-fs (loop7): last error at time 2000000706: ext4_iget_extra_inode:5128: inode 15 [ 1870.442247][ T1850] loop7: lost filesystem error report for type 5 error -117 [ 1870.449278][ T1850] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1870.565682][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1870.601803][ T1843] xfrm0 speed is unknown, defaulting to 1000 [ 1870.675206][ T1773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.682825][ T1773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1870.691314][ T1773] bridge_slave_0: entered allmulticast mode [ 1870.700283][ T1773] bridge_slave_0: entered promiscuous mode [ 1870.711412][ T1773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1870.719778][ T1773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1870.728748][ T1773] bridge_slave_1: entered allmulticast mode [ 1870.736401][ T1773] bridge_slave_1: entered promiscuous mode [ 1870.765591][ T1850] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.8003: Unrecognised inode hash code 4 [ 1870.782591][ T1773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1870.798876][ T1850] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.8003: Corrupt directory, running e2fsck is recommended [ 1870.811526][ T1773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1870.878496][ T1773] team0: Port device team_slave_0 added [ 1870.885211][T31050] IPVS: stop unused estimator thread 0... [ 1870.907237][T31094] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1870.921284][ T1773] team0: Port device team_slave_1 added [ 1870.988462][ T1773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1871.020537][ T1773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1871.121584][ T1773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1871.169996][ T1773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1871.202793][ T1773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1871.301628][ T1773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1871.373852][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1871.395817][ T1885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8008'. [ 1871.452610][ T1773] hsr_slave_0: entered promiscuous mode [ 1871.478042][ T1773] hsr_slave_1: entered promiscuous mode [ 1871.493914][ T1773] debugfs: 'hsr0' already exists in 'hsr' [ 1871.506126][ T1773] Cannot create hsr debugfs directory [ 1871.565525][T23359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1871.679365][ T1896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8011'. [ 1871.739861][ T1903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8010'. [ 1871.807134][ T1903] loop0: detected capacity change from 0 to 512 [ 1871.836340][ T1903] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1871.869005][ T1903] EXT4-fs (loop0): 1 truncate cleaned up [ 1871.901262][ T1903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1872.379425][ T1773] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1872.405926][ T1773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1872.450109][ T1773] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1872.467830][T23359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1872.480173][ T1928] loop6: detected capacity change from 0 to 512 [ 1872.489938][ T1773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1872.513676][ T1928] EXT4-fs error (device loop6): ext4_get_journal_inode:5896: comm syz.6.8014: inode #1792: comm syz.6.8014: iget: illegal inode # [ 1872.533843][ T1928] loop6: lost filesystem error report for type 5 error -117 [ 1872.534069][ T1928] EXT4-fs (loop6): Remounting filesystem read-only [ 1872.537731][ T1773] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1872.543503][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1872.562965][ C0] EXT4-fs (loop6): initial error at time 2000000708: ext4_get_journal_inode:5896 [ 1872.572516][ C0] EXT4-fs (loop6): last error at time 2000000708: ext4_get_journal_inode:5896 [ 1872.583529][ T1928] EXT4-fs (loop6): no journal found [ 1872.590101][ T1928] EXT4-fs (loop6): can't get journal size [ 1872.597575][ T1773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1872.608292][ T1928] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 1872.641884][ T1928] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 1872.643387][ T1773] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1872.658834][ T1928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1872.699450][ T1773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1872.829905][T23558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1872.841785][ T1944] loop0: detected capacity change from 0 to 512 [ 1872.959565][ T1934] loop1: detected capacity change from 0 to 512 [ 1872.972290][ T1944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1873.012843][ T1934] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1873.023874][ T1934] EXT4-fs (loop1): group descriptors corrupted! [ 1873.078390][ T1944] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1873.154247][ T1773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1873.204294][ T1933] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.8015: corrupted xattr block 33: invalid ea_ino [ 1873.255709][ T1933] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 1873.292865][ T1773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1873.309926][ T1933] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.8015: corrupted xattr block 33: invalid ea_ino [ 1873.359536][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1873.366686][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1873.381283][ T1933] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 1873.436298][T31064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1873.443797][T31064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1873.449606][ T1964] netlink: 'syz.7.8019': attribute type 4 has an invalid length. [ 1873.459761][ T1964] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8019'. [ 1873.462425][ T1933] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.8015: corrupted xattr block 33: invalid ea_ino [ 1873.469504][ T28] kauditd_printk_skb: 1028 callbacks suppressed [ 1873.469518][ T28] audit: type=1400 audit(2000000709.617:121157): avc: denied { create } for pid=1962 comm="syz.7.8019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1873.549522][ T1971] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1873.567149][ T1951] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1873.580620][ T1971] audit: audit_lost=1009 audit_rate_limit=0 audit_backlog_limit=64 [ 1873.589361][ T1934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1873.589460][ T1951] ================================================================== [ 1873.595931][ T1934] audit: audit_lost=1011 audit_rate_limit=0 audit_backlog_limit=64 [ 1873.604113][ T1951] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 1873.612091][ T1934] audit: backlog limit exceeded [ 1873.619362][ T1951] [ 1873.619373][ T1951] write to 0xffffffff86c8e7c8 of 8 bytes by task 1934 on cpu 1: [ 1873.625535][ T1934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1873.626798][ T1951] data_alloc+0x31c/0x390 [ 1873.634497][ T1934] audit: audit_lost=1012 audit_rate_limit=0 audit_backlog_limit=64 [ 1873.641084][ T1951] prb_reserve+0x8d6/0xad0 [ 1873.657993][ T1951] vprintk_store+0x54a/0x910 [ 1873.662593][ T1951] vprintk_emit+0x1a4/0x600 [ 1873.667237][ T1951] vprintk_default+0x26/0x30 [ 1873.671846][ T1951] vprintk+0x1d/0x30 [ 1873.675755][ T1951] _printk+0x79/0xa0 [ 1873.679692][ T1951] audit_log_start+0x709/0x730 [ 1873.684485][ T1951] common_lsm_audit+0x65/0x230 [ 1873.689360][ T1951] slow_avc_audit+0x14c/0x190 [ 1873.694311][ T1951] avc_has_perm+0x144/0x190 [ 1873.699415][ T1951] selinux_perf_event_open+0xd3/0xe0 [ 1873.704707][ T1951] security_perf_event_open+0x30/0x60 [ 1873.710170][ T1951] __se_sys_perf_event_open+0x154/0x1270 [ 1873.715807][ T1951] __x64_sys_perf_event_open+0x67/0x80 [ 1873.721268][ T1951] x64_sys_call+0x2789/0x3020 [ 1873.726041][ T1951] do_syscall_64+0x12c/0x3b0 [ 1873.731345][ T1951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1873.737348][ T1951] [ 1873.739772][ T1951] read to 0xffffffff86c8e7c8 of 8 bytes by task 1951 on cpu 0: [ 1873.747704][ T1951] prb_reserve+0x216/0xad0 [ 1873.752134][ T1951] vprintk_store+0x54a/0x910 [ 1873.756724][ T1951] vprintk_emit+0x1a4/0x600 [ 1873.761318][ T1951] vprintk_default+0x26/0x30 [ 1873.766061][ T1951] vprintk+0x1d/0x30 [ 1873.769964][ T1951] _printk+0x79/0xa0 [ 1873.773877][ T1951] audit_log_lost+0x1cc/0x200 [ 1873.778563][ T1951] audit_log_start+0x46f/0x730 [ 1873.783329][ T1951] common_lsm_audit+0x65/0x230 [ 1873.788168][ T1951] slow_avc_audit+0x14c/0x190 [ 1873.792851][ T1951] avc_has_perm+0x144/0x190 [ 1873.797446][ T1951] selinux_perf_event_open+0xd3/0xe0 [ 1873.803116][ T1951] security_perf_event_open+0x30/0x60 [ 1873.808604][ T1951] __se_sys_perf_event_open+0xc0/0x1270 [ 1873.814174][ T1951] __x64_sys_perf_event_open+0x67/0x80 [ 1873.819970][ T1951] x64_sys_call+0x2789/0x3020 [ 1873.825206][ T1951] do_syscall_64+0x12c/0x3b0 [ 1873.830091][ T1951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1873.836521][ T1951] [ 1873.839168][ T1951] value changed: 0x00000000001ca510 -> 0x000000000027c588 [ 1873.846558][ T1951] [ 1873.848888][ T1951] Reported by Kernel Concurrency Sanitizer on: [ 1873.855298][ T1951] CPU: 0 UID: 0 PID: 1951 Comm: syz.6.8018 Tainted: G W syzkaller #0 PREEMPT(full) [ 1873.866261][ T1951] Tainted: [W]=WARN [ 1873.870173][ T1951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1873.880338][ T1951] ================================================================== [ 1873.589354][ T1951] audit: audit_lost=1010 audit_rate_limit=0 audit_backlog_limit=64 [ 1873.910790][ T1773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1874.155830][ T1773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1874.273209][ T1944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1874.629530][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1874.727023][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.793866][ T1934] xfrm0 speed is unknown, defaulting to 1000 [ 1874.836511][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1874.856752][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.909975][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1874.933596][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.992222][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1875.002800][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.222201][ T68] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1875.286158][ T68] bond0 (unregistering): Released all slaves [ 1875.301016][ T68] bond1 (unregistering): Released all slaves [ 1875.312564][ T68] bond2 (unregistering): Released all slaves [ 1875.330152][ T68] bond3 (unregistering): Released all slaves [ 1875.366849][ T68] tipc: Left network mode [ 1875.398883][ T68] hsr_slave_0: left promiscuous mode [ 1875.405268][ T68] hsr_slave_1: left promiscuous mode [ 1875.411869][ T68] veth1_macvtap: left promiscuous mode [ 1875.418309][ T68] veth0_macvtap: left promiscuous mode [ 1875.424172][ T68] veth1_vlan: left promiscuous mode [ 1875.429610][ T68] veth0_vlan: left promiscuous mode [ 1875.608345][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1875.736670][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1875.747569][ T68] IPVS: stop unused estimator thread 0... [ 1875.797453][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1875.808188][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.856787][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1875.867692][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.890887][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1875.906477][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1875.917876][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.966510][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1875.976910][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.053418][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1876.264331][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1876.334522][ T68] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1876.355378][ T68] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.371981][ T68] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 1876.406340][ T68] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1876.417227][ T68] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.428953][ T68] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 1876.456109][ T68] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1876.466685][ T68] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.477926][ T68] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 1876.505798][ T68] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1876.517181][ T68] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.528008][ T68] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 1876.555703][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1876.626880][ T68] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.687609][ T68] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.745854][ T68] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.779700][ T3021] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1876.806595][ T68] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.950533][ T68] bridge_slave_1: left allmulticast mode [ 1876.963624][ T68] bridge_slave_1: left promiscuous mode [ 1876.972716][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.989720][ T68] bridge_slave_0: left allmulticast mode [ 1876.996039][ T68] bridge_slave_0: left promiscuous mode [ 1877.001959][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1877.066582][ T68] team0: Port device gtp1 removed [ 1877.115483][ T68] bond0 (unregistering): Released all slaves [ 1877.123320][ T68] bond1 (unregistering): Released all slaves [ 1877.131986][ T68] bond2 (unregistering): Released all slaves [ 1877.175625][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1877.186187][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1877.195824][ T68] bond0 (unregistering): Released all slaves [ 1877.205508][ T68] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1877.234965][ T68] bridge0 (unregistering): left allmulticast mode [ 1877.375110][ T68] bond1 (unregistering): Released all slaves [ 1877.384544][ T68] bond2 (unregistering): Released all slaves [ 1877.393068][ T68] bond0 (unregistering): Released all slaves [ 1877.456245][ T68] .` (unregistering): Released all slaves [ 1877.465206][ T3021] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1877.619494][ T3021] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1877.629242][ T68] hsr_slave_0: left promiscuous mode [ 1877.635683][ T68] hsr_slave_1: left promiscuous mode [ 1877.645336][ T68] hsr_slave_0: left promiscuous mode [ 1877.651586][ T68] hsr_slave_1: left promiscuous mode [ 1877.657423][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1877.665098][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1877.674211][ T68] hsr_slave_0: left promiscuous mode [ 1877.680016][ T68] hsr_slave_1: left promiscuous mode [ 1877.687625][ T68] hsr_slave_0: left promiscuous mode [ 1877.693343][ T68] hsr_slave_1: left promiscuous mode [ 1877.701652][ T68] veth1_macvtap: left promiscuous mode [ 1877.707383][ T68] veth0_macvtap: left promiscuous mode [ 1877.713083][ T68] veth1_vlan: left promiscuous mode [ 1877.719296][ T68] veth0_vlan: left promiscuous mode [ 1877.724856][ T68] veth1_macvtap: left promiscuous mode [ 1877.730686][ T68] veth0_macvtap: left promiscuous mode [ 1877.736693][ T68] veth1_vlan: left promiscuous mode [ 1877.742383][ T68] veth0_vlan: left promiscuous mode [ 1877.748062][ T68] veth1_macvtap: left promiscuous mode [ 1877.753836][ T68] veth1_vlan: left promiscuous mode [ 1877.759099][ T68] veth0_vlan: left promiscuous mode [ 1877.877920][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1877.887917][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1878.143739][ T3021] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1878.277447][ T3021] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1878.403041][ T3021] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1878.443975][ T28] kauditd_printk_skb: 1847 callbacks suppressed [ 1878.444008][ T28] audit: type=1400 audit(2000000714.627:122945): avc: denied { search } for pid=2204 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1878.473863][ T28] audit: type=1400 audit(2000000714.627:122946): avc: denied { search } for pid=2204 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1878.497207][ T28] audit: type=1400 audit(2000000714.627:122947): avc: denied { search } for pid=2204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1878.521435][ T28] audit: type=1400 audit(2000000714.627:122948): avc: denied { read } for pid=2204 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1878.546396][ T28] audit: type=1400 audit(2000000714.627:122949): avc: denied { read open } for pid=2204 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1878.562419][ T2213] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1878.572571][ T28] audit: type=1400 audit(2000000714.627:122950): avc: denied { getattr } for pid=2204 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1878.580234][ T2213] audit: audit_lost=1032 audit_rate_limit=0 audit_backlog_limit=64 [ 1878.607963][ T28] audit: type=1400 audit(2000000714.627:122951): avc: denied { getattr } for pid=2204 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1878.614581][ T2213] audit: backlog limit exceeded [ 1878.672172][ T3021] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1878.808407][ T3021] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1878.844450][ T68] IPVS: stop unused estimator thread 0... [ 1878.850678][ T68] IPVS: stop unused estimator thread 0... [ 1878.858044][ T68] IPVS: stop unused estimator thread 0... [ 1878.958565][ T3021] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1879.080971][ T3021] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1879.206560][ T3021] 8021q: adding VLAN 0 to HW filter on device eth29 [ 1879.333179][ T3021] 8021q: adding VLAN 0 to HW filter on device eth30 [ 1879.466078][ T3021] 8021q: adding VLAN 0 to HW filter on device eth31 [ 1879.613287][ T3021] 8021q: adding VLAN 0 to HW filter on device eth32