last executing test programs: 5m31.381505595s ago: executing program 2 (id=793): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x84, 0x90, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff681fa146cb21e6267f9d1eaf7659dfff000000000000000000000000000000f5ffffff00000000000000000000000000000000000000000000000000de1900"/124]}, 0xf4) r0 = semget$private(0x0, 0x2, 0x10) semctl$SETVAL(r0, 0x1, 0x8, 0x0) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000200)) r1 = semget$private(0x0, 0x5, 0x508) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$IPC_RMID(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) semop(r1, 0x0, 0x0) 5m30.410552958s ago: executing program 2 (id=796): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x81, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7fe, 0x6, 0x7, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830b}, 0x8100, 0x2, 0xfffffffe, 0x2, 0x9, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f00000001c0)='binder\x00', 0x0) getpgid(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYBLOB="1500230000f7dbdf25d57c23df"], 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x30, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c000180060006"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0xf0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) 5m30.151189624s ago: executing program 2 (id=800): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$loop(&(0x7f0000000080), 0x7fffffffffffffff, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ae1, 0x8}, 0x400, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) openat$incfs(r1, &(0x7f0000001480)='.pending_reads\x00', 0x400000, 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0xe0, &(0x7f0000000240)={0x20, 0x1, 0x0, 0x1ff}, 0x8, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xca, 0x0, 0x0, 0x0, 0x4000, 0x46020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xd, 0xea}, 0xd00b, 0xc8, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x400000002, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) 5m29.952049539s ago: executing program 2 (id=805): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x8}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000240), 0x8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000300)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffb) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 5m29.88217954s ago: executing program 2 (id=806): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x18, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x2c}}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000002700)=0x23, 0x1c) getsockname$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) name_to_handle_at(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x10001, 0xffff, 0x1, 0x8001}, 0x8001, 0x8001}}, &(0x7f0000000540), 0x1000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r4, r6, 0x8f5, 0xb) syz_io_uring_setup(0x3572, &(0x7f0000000040)={0x0, 0x30be, 0x5, 0x3, 0x2bb, 0x0, r6}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 5m29.135407519s ago: executing program 2 (id=810): socket(0x1000000000000010, 0x80802, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bind$l2tp(r1, &(0x7f0000000240)={0x2, 0x0, @empty, 0x5}, 0x10) ioctl$RTC_IRQP_READ(r0, 0x8008700b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) unshare(0x28000600) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r2, 0xfffffffffffffff2}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x400, &(0x7f00000001c0)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "cceff5", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x82, 0x2}}}}}}}, 0x0) 5m23.872145357s ago: executing program 3 (id=844): unshare(0x20000400) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x5e87, 0x0, 0x0, 0x337}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01020000000000000000070000000900020073797a31000000000900010073797a300000000014000000020a01"], 0xd4}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000016c0)='/sys/kernel/uevent_seqnum', 0x3, 0x100) vmsplice(r4, 0x0, 0x0, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2003c000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36268a3afff3d3666", 0xb8) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) 5m21.643081951s ago: executing program 3 (id=852): r0 = socket$inet(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1}, 0x0, 0x35, 0x4, 0x1, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x2201, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r1], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="200400000000000008001b000000000082a60cba062ddcde8a12c389345b341974a69ca11c349c7b19cbc30b79c625620c652c5e19033ff858c02e0dbad6e64ff42fe93d5b536875711baa4538ac154eb490725f4317f5f9a81216057a2a5c6384b263fd48f9f9fed0e7f7bbc780c866a9de"], 0x28}}, 0x0) listen(r0, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = semget(0x3, 0x4, 0x844) semctl$GETPID(r4, 0x5, 0xb, 0x0) 5m21.041169995s ago: executing program 3 (id=856): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x575, &(0x7f0000000180)="$eJzs3e9rJGcdAPDvbHbz4y6aqH1RhdbDFu6KXnLp2TaI9E4Q3xWU6usz5PZCuE32SDbtJRTJ4R8giGjBN/rKN4J/gCD3JxShYN+LFeXQq4JFtCPzY++SdKfZpNldm3w+8GSenXlmvt9ndzM7O/MkE8CZdSEirkfEWEQ8FxEz5fxaWWK3KFm79x6+sZyVJNL01b8lkZTzuu2Tct3z5WqTxWS/qWKyub1ze6nVam6Us+c7a3fmN7d3Lq+uLa00V5rrV68uvLj40uILi1dOpJ9Zv17+5p9/+qNffevl333l9T/e+OulH2T5TpfLu/04acVz0siei0fqEbExiGAjMFb2599poaLZxJDTAgCgQnbc/tmI+FJ+/D8TY/nRXLXxPfVk4NkBAAAAJyG9Nh3/SSLSI2oceQ0AAABgVGr5GNikNleOBZiOWm1urhjD+0Scq7Xam50v32pvrd8sxsrORqN2a7XVvJKPqZ2IiEaSPV54dEahePx83jYryb4xwD+ZmcqXzy23WzdHccIDAAAAzqDzB77//3Om+P4PAAAAnDKz5fTciPMAAAAABmd21AkAAAAAA3eM7//jg8gDAAAAGIhvv/JKVtLu/a9vvra9dbv92uWbzc3bc2tby3PL7Y07cyvt9kornYhYO2x7rXb7zldjfevufKe52Znf3N65sdbeWu/cWN13C2wAAABgiD7zxfvvJBGx+7WpvET32v5YxQr+VgBOjVqf7dLsx7uDzQUYrqqPeeD0q3/0YsN84RRrFJNk1HkAo3PYDmCyqsVbxwrnuAIAAEbg4ufvv5MmH77+X398bgA4pfq9/g+cPhXX/9OZYScCDF3l9f9DBgYAn3wNIwDhzDv8+n+Ft/JF1w+PkKaHbgsAABio6bwktbnyWuB01N5PCzEbjeTWaqt5JSI+HRF/mGlMZI8X8jUTfzQAAAAAAAAAAAAAAAAAAAAAAAAAAH1K0yTSY6gfay0AAABgFCJqf0nK+wBfnHl2+uD5gfHk/fxWwB+kafr6z1/92d2lTmdjIZv/93z+eER03szmj4/i9AUAAACwR/cu//n39+cbI84GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNPqvYdvLHfLMOM++EZEzPaKX4/JfDoZjYg4948k6nvWSyJi7ATi796LiCd7xU+ytGK2zOJg/FpETOVZDDz+U2ma9ox//mNHh7Ptfrb/ud7r968WF/Jp79//elGufdz41fu/2qP939jB+PVi//epPmN84e3fzO95+L3H1Ylieb33/qcbP6nY/z7TK1j9w7O+/92dnarc0l9GXOz5+ZPsizXfWbszv7m9c3l1bWmludJcv3p14cXFlxZfWLwyf2u11Sx/9ozx46d++0FV/AcXIs6V8ce7OZUfLLPF5OvJo1TG9+X0bFZpVG35sf++fffh54rq3tb5Vh/ci7j0TO/X/8l82vP5/8W/0lz+OZAtv1h+JiS7RT2ifPtGxNO//v3Tlf2/N1nWjv76Xzq867nnvvPDP/XZFAAYgs3tndtLrVZzY+CVN9M07a9xdlTa/5aTiN2Di7IDuBPuxVREVCzaH2uqfFaj3y0/UZnqu1MRQ3p1jlq5dpTG6cSR3mzJ7v9BB89wZTx/Q456zwQAAJy0x0f/o84EAAAAAAAAAAAAAAAAAAAAzq5h/F+xgzF3R9NVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICP9L8AAAD//6jD1vI=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1e00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0xfffffffffffffeff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 5m18.988793405s ago: executing program 3 (id=860): socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0x7) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x2, 0x6, 0x5e0, 0x0, 0x420, 0x330, 0x0, 0x0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0xfffa, @empty, @mcast2, @private2={0xfc, 0x2, '\x00', 0x8}, [0x0, 0x0, 0x0, 0xff], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [], 0x0, 0x886}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0xff}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000], [0xff], 'bridge0\x00', 'erspan0\x00', {0xff}, {}, 0x67}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0x2c731f28b040cc3c], [0xff000000, 0xff000000, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private=0xa010100, 0x5, 0x3d, 0xf}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0x9eed13af2aebfacb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0xffff888237d05000, 0x1}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, 0x0, 0x1) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000000c0), 0x1) openat$incfs(0xffffffffffffff9c, 0x0, 0x10000, 0x100) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="fd5c5ca6b20841c1408c0000000000000000000000000000000000e2f3b476bd59db0908bca07a6ee212031250d6e6fd4bc1268b5be9c5e0e399c0c290b891616f755825", 0x44}], 0x1) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5m18.515267097s ago: executing program 3 (id=863): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x18, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x2c}}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000002700)=0x23, 0x1c) getsockname$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) name_to_handle_at(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x10001, 0xffff, 0x1, 0x8001}, 0x8001, 0x8001}}, &(0x7f0000000540), 0x1000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r4, r6, 0x8f5, 0xb) syz_io_uring_setup(0x3572, &(0x7f0000000040)={0x0, 0x30be, 0x5, 0x3, 0x2bb, 0x0, r6}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 5m17.639951198s ago: executing program 3 (id=868): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100, 0x20000, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2d, 0xffffffffffffffff, 0x4001}, 0xc) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x8}}, {@commit={'commit', 0x3d, 0x8}}, {@noinit_itable}, {@nomblk_io_submit}, {@minixdf}, {@nobarrier}, {@inode_readahead_blks}, {@usrjquota}, {@block_validity}, {@noblock_validity}, {@noquota}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r2 = msgget(0x0, 0x400) statx(r1, 0x0, 0x6000, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0), 0x4000, &(0x7f0000000100)={[{@uid={'uid', 0x3d, r6}}]}) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x14c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r7, 0x0) fstat(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000740)={{0x3, 0x0, r8, 0x0, 0x0, 0xb, 0xc}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000400)={'\x00', 0x0, 0xb56d, 0x8, 0x0, 0x8, 0xffffffffffffffff}) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000480)={{0x0, r3, r4, r6, r8, 0x108, 0x8}, 0x0, 0x0, 0x3ff, 0x1, 0x707e, 0x10001, 0xf, 0x1c00, 0xffff, 0x40, r9}) 5m14.101261644s ago: executing program 32 (id=810): socket(0x1000000000000010, 0x80802, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bind$l2tp(r1, &(0x7f0000000240)={0x2, 0x0, @empty, 0x5}, 0x10) ioctl$RTC_IRQP_READ(r0, 0x8008700b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) unshare(0x28000600) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r2, 0xfffffffffffffff2}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x400, &(0x7f00000001c0)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "cceff5", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x82, 0x2}}}}}}}, 0x0) 5m2.402273719s ago: executing program 33 (id=868): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100, 0x20000, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2d, 0xffffffffffffffff, 0x4001}, 0xc) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x8}}, {@commit={'commit', 0x3d, 0x8}}, {@noinit_itable}, {@nomblk_io_submit}, {@minixdf}, {@nobarrier}, {@inode_readahead_blks}, {@usrjquota}, {@block_validity}, {@noblock_validity}, {@noquota}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r2 = msgget(0x0, 0x400) statx(r1, 0x0, 0x6000, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0), 0x4000, &(0x7f0000000100)={[{@uid={'uid', 0x3d, r6}}]}) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x14c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r7, 0x0) fstat(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000740)={{0x3, 0x0, r8, 0x0, 0x0, 0xb, 0xc}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000400)={'\x00', 0x0, 0xb56d, 0x8, 0x0, 0x8, 0xffffffffffffffff}) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000480)={{0x0, r3, r4, r6, r8, 0x108, 0x8}, 0x0, 0x0, 0x3ff, 0x1, 0x707e, 0x10001, 0xf, 0x1c00, 0xffff, 0x40, r9}) 6.206525159s ago: executing program 1 (id=2665): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000000, &(0x7f00000001c0), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xa, 0x10000, 0x8001, 0x10000, 0x55}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x40481, 0x0) 5.964987615s ago: executing program 1 (id=2669): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@initdev, @in=@multicast1}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f0000000bc0)={[{@block_validity}, {@barrier_val={'barrier', 0x3d, 0x741}}, {@commit={'commit', 0x3d, 0x8}}, {@norecovery}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@bh}, {@usrjquota}, {@jqfmt_vfsv1}]}, 0x83, 0x591, &(0x7f0000000540)="$eJzs3c9rFGcfAPDvbH6Y6Pu+URB57aEEPNRi3ZiktgoF67G0UqG9p2GzBsnGlexGTCqoh3rppUihlAqlh55K7z1Kbz31rxBaQYqE9tDLltnMms2PTTbJamL384HR55mZzXeefeb75JmdCRtA1xpO/8lFHI+IL5KIoaZtvZFtHF7eb+nprcLS4K1CErXaR38kkWTrGvsn2f+Hssr/I+LnzyJO5dbHrSwszkyWSsW5rD5Snb0+UllYPH11dnK6OF28NjY+fu7s+Nj5t9/qWFtfv/zX1x8+fO/c5yeWvvrx8ZH7ydkfnm1rbscu3GmuDMdw9p70xbtrdhztQLD9Yqip73m59GR53hfpGDAUPVnWA/9+tyOiBnSpRP5Dl2rMA+rX9tmytzOSF+vJ8eULoPXt713+bCQG6tdGB5eSVVdG6fXu4Q7ET2P89PuD++kSW3wOcbsD8QAa7tyNiDO9vevHvyQb/zb0y/k2fvaZ+ofHm1sbo9t+/8BeengxIt7YaP6TW5Wba+c/hzbI3Z3YOv9zjzsQpqUnFyPe2XD++2zoOtyT1f5bn/P1JVeulopnIuJ/EXEy+g6k9dX3c1bPDM8tPaq1it88/0uXNH5jLpgdx+PeA6tfMzVZndxtuxue3I14ZWX+m8S68X+gPtdd2//p+3G5zRjHig9ebbVt6/Y36/wMuPZdxGsb9v/KHa1k8/uTI/XzYaRxVqz3571jv7aKv732d17a/wc3b//hpPl+bWX7Mb4d+LvYattOz//+5ON6uT+Wr99uTlarc6MR/ckHK+sjWz+28tpGvbF/2v6TJ7L2fz/RFCW36fk/GBGftNn+e0fvtdx1P/T/1Lb6f/uFR+9/+k2r+O31/5v10slsTTvjX7sHuJv3DgAAAAAAAPabXET8J5Jc/lk5l8vnl5/vOBoHc6VypXrqSnn+2lS6rf78Q65xp3uo6XmI0eyph0Z9bE19PCKORMSXPYP1er5QLk3tdeMBAAAAAAAAAAAAAAAAAABgnzjU4u//U7/17PXRAc+dr/yG7rUm//vX7dCJb3oC9iW//6F7yX/oXvIfupf8h+4l/6F7yX/oXvIfuldz/tc89AcAAAAAAAAAAAAAAAAAAAAAAAAAAAC7dfnSpXSpLT29VUjrUzcW5mfKN05PFSsz+dn5Qr5Qnrueny6Xp0vFfKE8u/yqwZY/r1QuXx8di/mbI9VipTpSWVicmC3PX6tOXJ2dnC5OFPteWMsAAAAAAAAAAAAAAAAAAADg5VFZWJyZLJWKcwotCxdiXxzGjgvJVr18ITsZdhSid+8bqPAcCm0NHwPPdXACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMw/AQAA///o8THy") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}], 0x10) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x80, 0xfe, 0x0, 0x9, 0x40, 0x8, 0x5a, 0x0, 0xff, 0x9, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}, 0xffff1689}, {{0x0, 0x0, 0x0}, 0x7b1}], 0x2, 0x20, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000080)=ANY=[@ANYBLOB="6df06f6c3d696edf65726c656176653d7374617469633a302c00"]) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000012001b3500000000ffffffc30400000008001d80b112ed56b153a4121fc1b09f5c6a0bd5fc0700f049946d8800"/60], 0x1c}, {0x0}], 0x2}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xfffffffffffffffc, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4.956002939s ago: executing program 1 (id=2676): sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000002700)=0x23, 0x1c) getsockname$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) close(0xffffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x253, 0x0, &(0x7f0000001300)="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", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x50) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_FSGEOMETRY_V4(r4, 0x8070587c, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@iter={0x0}}, 0x20) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) 4.758943595s ago: executing program 5 (id=2679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x6883, 0x7, 0x1) socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000280)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @opaque="3196b913fb8ebb82"}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) socket$inet6(0xa, 0x3, 0x3c) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000144035006d6163767461703002000000000000001400"], 0xe8}}, 0x40084) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x68, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "322d73352d3a955d482ee5364c432384"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) close(0x3) 4.418466663s ago: executing program 5 (id=2682): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000030000000900010073797a300000000044000000030a03000000000000000000030000000900030073797a30000000000900010073797a30000000001400048008000240000000000800014000000000040008"], 0x8c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000400001800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca", 0x42}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000030605000000000000000000020000050900020073797a310000000005000100070000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x14) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000480)={0x100, 0x0, 'client0\x00', 0x80000002, "7ae839258d7aea71", "186eb3eda6b97aa6452ed04f40ff8271b8284639bf9f803da6ea8a7a288a1a9f", 0x8, 0x6}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x565, 0x4, 0x2, 0x8, 0x40, 0xfffffffd, {0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0x8}}, 0x0, 0x10000, 0x5, 0x1, 0x80000000}}, &(0x7f0000000600)=0xb0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000640)={r7, 0xfff9, 0x7f, 0x2, 0xb48, 0x6}, 0x14) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000000c0)) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x400, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x100006}, 0x3c) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) write$tun(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="635a0b4200e4060000000000000000000000000000000000ff0100000000000000000000000000013306040302500200ff020000000000000000000000000001fc01000000000000000000000000000000000000000000000000ffffe0000001160e00000000000005020200010100f96aa924eb8f3c34dd38061f7a3adca968739494e0dc1af71df30db51e554e27e56958377fe652960484ea6442b732ce8f65bbb71bfc1ffc9ee9942cb4ee6682e91c8f9a4effde31be23908248826435e69aea5b49906d4c2dffaaefa4aeab5cba07bb135ce7ff88a8e89bdd00000000000000000000000000000000000000000a00004e2200004e240000000000000002000000010000000400000001d87a0c5d6e624ea6ff535bb8019893b60e4a0ca12749339d006bd78b13d5f220caca7d7fb90791ce2a79ad28b118a5abdca4421c7948f9bd652d45d91714f43ce083502d5ca288b7e21da291ea2a3eb3c918dba3d8044f04c7521f1f440267e9f8dd1ebe7c6c08ba79e901c4670739fa27fc379cf8b12ed951a6bf2ecac139647376c960c679782315a17a1db64e7a49187d69862bbd85a83e6418b33f6f0ef5e4fc1dfe35a33de140fc67f2e5c36fe0f916170933c4161c79f0c5511029d90677d0de8203d01db99caac03e9d49b18b8f"], 0x10c) 4.064547661s ago: executing program 5 (id=2685): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fd820000000000000008000079a0000000000000c300c0fffd000000950000000000000092917451b67477dcef677cf28fcc1e"], &(0x7f00000003c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) fdatasync(r3) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x280000000000) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000340)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xff, 0x2}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 3.959973554s ago: executing program 1 (id=2686): socket$kcm(0x21, 0x2, 0x2) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(r0, 0x6, &(0x7f0000000880)={0xd72, 0x7f39}, &(0x7f00000008c0)) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x125) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf672000000000001602000000b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48) 3.934389115s ago: executing program 5 (id=2687): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@initdev, @in=@multicast1}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f0000000bc0)={[{@block_validity}, {@barrier_val={'barrier', 0x3d, 0x741}}, {@commit={'commit', 0x3d, 0x8}}, {@norecovery}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@bh}, {@usrjquota}, {@jqfmt_vfsv1}]}, 0x83, 0x591, &(0x7f0000000540)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x4e21, 0xfffffffc, @loopback, 0xc7f}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x80, 0xfe, 0x0, 0x9, 0x40, 0x8, 0x5a, 0x0, 0xff, 0x9, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}, 0xffff1689}, {{0x0, 0x0, 0x0}, 0x7b1}], 0x2, 0x20, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000080)=ANY=[@ANYBLOB="6df06f6c3d696edf65726c656176653d7374617469633a302c00"]) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000012001b3500000000ffffffc30400000008001d80b112ed56b153a4121fc1b09f5c6a0bd5fc0700f049946d8800"/60], 0x1c}, {0x0}], 0x2}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xfffffffffffffffc, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3.217105932s ago: executing program 4 (id=2692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x6883, 0x7, 0x1) socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000280)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @opaque="3196b913fb8ebb82"}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) socket$inet6(0xa, 0x3, 0x3c) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000144035006d6163767461703002000000000000001400"], 0xe8}}, 0x40084) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x68, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "322d73352d3a955d482ee5364c432384"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) close(0x3) 3.176113753s ago: executing program 6 (id=2693): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000000, &(0x7f00000001c0), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xa, 0x10000, 0x8001, 0x10000, 0x55}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x40481, 0x0) 3.168443443s ago: executing program 4 (id=2694): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="100000000914ed37e91ed4254bf3f40f4c3f505f59"], 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x20004080) recvmsg$can_bcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x7ffb, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500090122bd7000fcff7f599751000008"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd26, 0x25dfdbfb, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0xe5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000740)='FREEZING\x00', 0x9) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x3, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x9}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x840) 3.134667984s ago: executing program 4 (id=2696): socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2f) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.088041285s ago: executing program 4 (id=2698): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) listen(r0, 0x5) io_uring_setup(0x1334, &(0x7f0000000040)={0x0, 0xc8a0, 0x2, 0x3, 0xbd}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x83, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x1000000000000}, &(0x7f00000000c0)=0x108) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802c0001800b000100736f636b657400001c000280080002400000000b0800014000000003080003000000008920000180080001006475700014000280080001400000000c08000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0xa4}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000001c0)={0x1, 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xd5}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 3.062669066s ago: executing program 1 (id=2699): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) creat(&(0x7f0000000180)='./file0\x00', 0xa) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB]) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 2.969481468s ago: executing program 6 (id=2700): socket$inet(0x2, 0x4000000000000001, 0x0) epoll_create1(0x80000) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@data_err_ignore}, {@usrjquota, 0x22}, {@data_err_ignore}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}, 0x6, 0x485, &(0x7f0000000640)="$eJzs3MtvG8UfAPCv7Th9/+JfKY+WFkILouKRNOmDHrgUgcQBJCQ4FHEKTlqVug1qgkSrCFoO5YgqcUcckfgLuFAuCDghcUICiSNCqlAuLZyM1t5NXddOnMSu2/rzkTaZ8cxqZnZ3vLOzuw5gYI0mf3IRWyPit4gYqUdvzTBa/3djcaH8z+JCORfV6pt/52r5ri/ezJ2FttQj1eoy5V5+J2KqUpk5l8bH58+8Pz53/sLzp85MnZw5OXN28ujRQwf3DB+ZPNyVdibtur7ro9ndO199+8rr5eNX3v3x66S+W9P064sL5a4U1GC0vnVbeqrbhfXZtojYmIZzQ32uDB0rRESyu4q1/j8Shdi0lDYSr3zS18oBPVWt5qsb2idfrAL3sWSgDgyi7ESfXP9myx0aetwVrh2LdB5joXwjXeopQ5FP8xTTa6ReGI2I4xf//SJZomEeYlNHaxd6VCsA4H529VhEPNdq/JePhxry/S+9h1KKiP9HxPaIeCAidkTEgxG1vA9HxCOrLL/5Dsnt48/qyJoa1qFk/Pdiem/r1vFfNvqLUiGNbau1v5g7caoycyDdJvujuCGJTyxTxncv//JZu7TG8V+yJOVnY8G0Hn8NNU3QTU/NT62nzY2uXYrYNdSq/bmlMW8yPt4ZEbvWWMapZ77a3S6ttGL7l9GFQXn1y4in6/v/YjS1P5Nre39y4oUjk4fHN0Zl5sB4dlTc7qefL7/RrvyV939vXbtajc1Nx3/TZi3lNkbMnb9wuna/dm6VBfwacfn3T9teU671+B/OvVULD6effTg1P39uImI499rtn0/eXDeLZ/mT43//vtb9f3u6TrL/H42I5CDeExGPRcTjad2fiIi9EbFvmU3ww0tPvrf69i8zK99FSfunW37/LR3/pSR0c/+vPlA4/f03q29/YnO6/w/VYvvTdTr5/uu0guvdfgAAAHAvyNeegc/lx5bC+fzYWP0Z/h2xOV+ZnZt/9sTsB2en68/Kl6KYz2a6RhrmQyfSubwsPtkUP5jOG39e2FSLj5VnK9P9bjwMuC1t+n/iz/Txkj/6WkOgp7yvBYNL/4fBpf/D4NL/YXDp/zC4WvX/j/tQD+DOW+H839m76MA9aU3j/zvzfhLQY67/YXCt1P/3OtfD/ajtu/H5db3yL9CnwLfD6/uths4Dkb9LmnyXBgod5LmU9sL6J8VomXmo4x+zuCWQndRXzryhZVIfv5QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC66L8AAAD//9lb3Wg=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x102802, 0x31, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x28203) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="210329bd7040000000251fafa3edffff1cc87e167c3ceae4000000001683dcc1f442497eb00ac50322e69900"/55], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) 2.948408929s ago: executing program 4 (id=2701): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5434, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x400, @loopback={0xff00000000000000}, 0x105}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000380)="a0002e7577d4017a", 0x8}], 0x1, &(0x7f0000000e80)=ANY=[], 0xd}}], 0x1, 0x4000880) setgroups(0x0, 0x0) setuid(0xee01) pread64(r3, &(0x7f00000024c0)=""/209, 0xd1, 0xa) 2.947187529s ago: executing program 5 (id=2702): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080), 0x3, 0x42f, &(0x7f0000000940)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) 1.204088671s ago: executing program 6 (id=2704): syz_clone(0x25804400, &(0x7f0000009000)="01ca878e776646e80521a1e55cbde88a5ffd98f92e33e5a51aefa4b01fedfe2ae00abf2526abf6b3f77f9118", 0x2c, 0x0, &(0x7f00000090c0), &(0x7f0000009100)="95a195933713") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x88, 0x2, 0x6, 0x1f3ea855875a761f, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0xc1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000100004000000001300000000000000000037b4dac1e8"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x2c, 0x107, 0x1, 0x0, {0x3, 0x7c}, [@nested={0xa, 0x1, 0x0, 0x1, [@generic="3422ade7d663"]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000614010026bd7000fe"], 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x40) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="180000002500010323bd7045caac98da"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044010) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0xd, 0x13, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaee}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 992.345856ms ago: executing program 6 (id=2706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x6883, 0x7, 0x1) socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000280)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @opaque="3196b913fb8ebb82"}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) socket$inet6(0xa, 0x3, 0x3c) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000144035006d6163767461703002000000000000001400"], 0xe8}}, 0x40084) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x68, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "322d73352d3a955d482ee5364c432384"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) close(0x3) 698.518393ms ago: executing program 0 (id=2707): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="100000000914ed37e91ed4254bf3f40f4c3f505f59"], 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x20004080) recvmsg$can_bcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x7ffb, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500090122bd7000fcff7f599751000008"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd26, 0x25dfdbfb, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0xe5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000740)='FREEZING\x00', 0x9) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x3, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x9}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x840) 631.548045ms ago: executing program 6 (id=2708): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000000, &(0x7f00000001c0), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xa, 0x10000, 0x8001, 0x10000, 0x55}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x40481, 0x0) dup(r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x100, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r3], 0x38}}, 0x0) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000b00)=""/237, 0xed}, {0x0}, {0x0, 0x29}, {0x0}], 0x4, 0x6c, 0x10000000) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000000c0)={{0x0, 0x0, 0x1, 0x59748ced39033573, 0x1ad}, 0xf75, 0x8}) socketpair$unix(0x1, 0x1, 0x0, 0x0) 603.201166ms ago: executing program 0 (id=2709): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000b00)=""/237, 0xed}, {0x0}, {0x0, 0x29}, {0x0}], 0x4, 0x6c, 0x10000000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000000c0)={{0x0, 0x0, 0x1, 0x59748ced39033573, 0x1ad}, 0xf75, 0x8}) 537.784067ms ago: executing program 0 (id=2710): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x40481, 0x0) dup(r0) 487.934328ms ago: executing program 0 (id=2711): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0xc, 0xc4, &(0x7f0000000140)=""/196}, 0x94) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket(0x2, 0x80805, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x2, 0x6, @random="ec3c4156e448"}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0x100, 0x1, "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"}) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="2c7766646e6f1edc273d00000000", @ANYRESHEX=r6, @ANYBLOB=',\x00']) 281.765624ms ago: executing program 5 (id=2712): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@initdev, @in=@multicast1}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f0000000bc0)={[{@block_validity}, {@barrier_val={'barrier', 0x3d, 0x741}}, {@commit={'commit', 0x3d, 0x8}}, {@norecovery}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@bh}, {@usrjquota}, {@jqfmt_vfsv1}]}, 0x83, 0x591, &(0x7f0000000540)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x4e21, 0xfffffffc, @loopback, 0xc7f}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x80, 0xfe, 0x0, 0x9, 0x40, 0x8, 0x5a, 0x0, 0xff, 0x9, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}, 0xffff1689}, {{0x0, 0x0, 0x0}, 0x7b1}], 0x2, 0x20, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000080)=ANY=[@ANYBLOB="6df06f6c3d696edf65726c656176653d7374617469633a302c00"]) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000012001b3500000000ffffffc30400000008001d80b112ed56b153a4121fc1b09f5c6a0bd5fc0700f049946d8800"/60], 0x1c}, {0x0}], 0x2}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xfffffffffffffffc, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 243.823604ms ago: executing program 6 (id=2713): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup3(r0, r0, 0x80000) socket$netlink(0x10, 0x3, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x8, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xcb}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08003f0005"], 0x48}}, 0x440088c4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 242.743174ms ago: executing program 4 (id=2714): syz_clone3(&(0x7f0000000080)={0x180801600, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x200000000000000c, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x6}]) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) write$cgroup_devices(r4, &(0x7f00000005c0)=ANY=[], 0xfffffeff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 63.922669ms ago: executing program 0 (id=2715): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r0], 0x38}}, 0x0) 31.30476ms ago: executing program 0 (id=2716): syz_clone(0x25804400, &(0x7f0000009000)="01ca878e776646e80521a1e55cbde88a5ffd98f92e33e5a51aefa4b01fedfe2ae00abf2526abf6b3f77f9118", 0x2c, 0x0, &(0x7f00000090c0), &(0x7f0000009100)="95a195933713") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x88, 0x2, 0x6, 0x1f3ea855875a761f, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0xc1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000100004000000001300000000000000000037b4dac1e8"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x2c, 0x107, 0x1, 0x0, {0x3, 0x7c}, [@nested={0xa, 0x1, 0x0, 0x1, [@generic="3422ade7d663"]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000614010026bd7000fe"], 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x40) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="180000002500010323bd7045caac98da"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044010) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0xd, 0x13, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaee}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 0s ago: executing program 1 (id=2717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x6883, 0x7, 0x1) socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000280)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @opaque="3196b913fb8ebb82"}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) socket$inet6(0xa, 0x3, 0x3c) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000144035006d6163767461703002000000000000001400"], 0xe8}}, 0x40084) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x68, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "322d73352d3a955d482ee5364c432384"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) kernel console output (not intermixed with test programs): 79] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.274219][T11290] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 132 with error 28 [ 431.287789][T11290] EXT4-fs (loop1): This should not happen!! Data will be lost [ 431.287789][T11290] [ 431.333229][T11290] EXT4-fs (loop1): Total free blocks count 0 [ 431.333250][T11290] EXT4-fs (loop1): Free/Dirty block details [ 431.333263][T11290] EXT4-fs (loop1): free_blocks=0 [ 431.333278][T11290] EXT4-fs (loop1): dirty_blocks=136 [ 431.333292][T11290] EXT4-fs (loop1): Block reservation details [ 431.333305][T11290] EXT4-fs (loop1): i_reserved_data_blocks=136 [ 431.392121][T11298] syzkaller0: entered promiscuous mode [ 431.392191][T11298] syzkaller0: entered allmulticast mode [ 431.530171][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 431.540728][ T3295] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 431.553743][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.642879][ T11] usb usb10-port1: attempt power cycle [ 431.645442][T11315] loop4: detected capacity change from 0 to 1024 [ 431.656621][T11315] EXT4-fs: Ignoring removed bh option [ 431.667784][T11315] EXT4-fs (loop4): unsupported descriptor size 171 [ 431.671752][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2069'. [ 431.733240][T11317] loop1: detected capacity change from 0 to 256 [ 431.747124][T11317] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 431.771993][T11317] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 431.777334][ T7150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.797642][T11320] tmpfs: Unknown parameter 'mðol' [ 431.827687][T11324] loop0: detected capacity change from 0 to 1024 [ 431.841721][T11324] EXT4-fs: Ignoring removed bh option [ 431.857897][T11324] EXT4-fs (loop0): unsupported descriptor size 171 [ 431.987519][T11341] tmpfs: Unknown parameter 'mðol' [ 432.102824][T11350] lo speed is unknown, defaulting to 1000 [ 432.392836][T11354] loop6: detected capacity change from 0 to 512 [ 432.421525][T11354] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 432.447236][T11357] loop1: detected capacity change from 0 to 512 [ 432.454172][T11354] EXT4-fs (loop6): 1 truncate cleaned up [ 432.457786][T11357] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 432.460354][T11354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.478964][T11357] EXT4-fs (loop1): 1 truncate cleaned up [ 432.489765][T11357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.566948][T11361] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 432.606449][T11361] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2081: Invalid block bitmap block 0 in block_group 0 [ 432.624002][T11361] loop4: lost filesystem error report for type 5 error -117 [ 432.626108][T11361] Quota error (device loop4): write_blk: dquota write failed [ 432.633784][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 432.633825][ C1] EXT4-fs (loop4): initial error at time 2000000468: ext4_read_block_bitmap_nowait:483 [ 432.633950][ C1] EXT4-fs (loop4): last error at time 2000000468: ext4_read_block_bitmap_nowait:483 [ 432.736913][T11361] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 432.748009][T11361] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.2081: Failed to acquire dquot type 0 [ 432.760019][T11361] loop4: lost filesystem error report for type 5 error -117 [ 432.761370][T11361] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.2081: Freeing blocks not in datazone - block = 0, count = 4096 [ 432.783454][T11361] loop4: lost filesystem error report for type 5 error -117 [ 432.785750][T11361] EXT4-fs error (device loop4): ext4_read_inode_bitmap:141: comm syz.4.2081: Invalid inode bitmap blk 0 in block_group 0 [ 432.806915][ T5394] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 432.815966][ T5394] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:25: Failed to release dquot type 0 [ 432.827815][T11361] loop4: lost filesystem error report for type 5 error -117 [ 432.828511][T11361] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 432.844925][ T5394] loop4: lost filesystem error report for type 5 error -117 [ 432.845299][T11361] loop4: lost filesystem error report for type 5 error -117 [ 432.855365][T11361] EXT4-fs (loop4): 1 orphan inode deleted [ 432.878421][T11361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.995174][T11361] SELinux: failed to load policy [ 433.018867][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.089163][T11369] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2082: bg 0: block 169: padding at end of block bitmap is not set [ 433.106431][T11369] loop4: lost filesystem error report for type 5 error -117 [ 433.108095][T11369] Quota error (device loop4): write_blk: dquota write failed [ 433.115456][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 433.115477][ C1] EXT4-fs (loop4): initial error at time 2000000468: ext4_validate_block_bitmap:441 [ 433.115504][ C1] EXT4-fs (loop4): last error at time 2000000468: ext4_validate_block_bitmap:441 [ 433.151861][T11369] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 433.162322][T11369] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.2082: Failed to acquire dquot type 0 [ 433.185763][T11369] EXT4-fs (loop4): 1 truncate cleaned up [ 433.193061][T11369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.214182][T11369] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.321089][T11349] EXT4-fs: Ignoring removed orlov option [ 433.332837][T11349] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 433.354805][T11349] EXT4-fs (loop5): 1 truncate cleaned up [ 433.368320][T11349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.470380][ T28] audit: type=1400 audit(2000000469.255:2555): avc: denied { write } for pid=11348 comm="syz.5.2078" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 433.492515][ T11] usb usb10-port1: unable to enumerate USB device [ 433.542157][ T28] audit: type=1400 audit(2000000469.255:2556): avc: denied { create } for pid=11348 comm="syz.5.2078" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 433.630594][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.814207][ T6511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.825371][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.835129][T11389] sctp: [Deprecated]: syz.1.2088 (pid 11389) Use of int in maxseg socket option. [ 433.835129][T11389] Use struct sctp_assoc_value instead [ 433.850386][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.885948][T11406] set_capacity_and_notify: 3 callbacks suppressed [ 435.886013][T11406] loop0: detected capacity change from 0 to 128 [ 435.964180][T11413] loop6: detected capacity change from 0 to 1024 [ 435.981558][T11406] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 436.002484][T11413] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 436.025657][T11406] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.038708][T11409] loop5: detected capacity change from 0 to 128 [ 436.064481][T11408] lo speed is unknown, defaulting to 1000 [ 436.071323][T11413] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2093: Invalid block bitmap block 0 in block_group 0 [ 436.085460][T11413] fserror_report: 1 callbacks suppressed [ 436.085494][T11413] loop6: lost filesystem error report for type 5 error -117 [ 436.095047][T11413] __quota_error: 4 callbacks suppressed [ 436.095083][T11413] Quota error (device loop6): write_blk: dquota write failed [ 436.102697][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 436.102744][ C0] EXT4-fs (loop6): initial error at time 2000000471: ext4_read_block_bitmap_nowait:483 [ 436.102817][ C0] EXT4-fs (loop6): last error at time 2000000471: ext4_read_block_bitmap_nowait:483 [ 436.151580][T11413] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 436.162036][T11413] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.2093: Failed to acquire dquot type 0 [ 436.174043][T11413] loop6: lost filesystem error report for type 5 error -117 [ 436.176211][T11413] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.2093: Freeing blocks not in datazone - block = 0, count = 4096 [ 436.199577][T11413] loop6: lost filesystem error report for type 5 error -117 [ 436.201116][T11413] EXT4-fs error (device loop6): ext4_read_inode_bitmap:141: comm syz.6.2093: Invalid inode bitmap blk 0 in block_group 0 [ 436.224217][ T5356] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-7 [ 436.247114][ T5356] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:11: Failed to release dquot type 0 [ 436.269974][T11422] loop4: detected capacity change from 0 to 128 [ 436.278509][ T5356] loop6: lost filesystem error report for type 5 error -117 [ 436.303942][T11413] loop6: lost filesystem error report for type 5 error -117 [ 436.356231][T11413] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem [ 436.377876][T11413] loop6: lost filesystem error report for type 5 error -117 [ 436.378220][T11413] EXT4-fs (loop6): 1 orphan inode deleted [ 436.396686][ T7150] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 436.439748][T11413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.753382][T11432] loop4: detected capacity change from 0 to 512 [ 436.833271][T11432] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 436.863886][T11429] SELinux: policydb magic number 0x746c6966 does not match expected magic number 0xf97cff8c [ 436.957920][T11429] SELinux: failed to load policy [ 436.968890][T11432] EXT4-fs (loop4): 1 truncate cleaned up [ 436.992013][T11432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.206326][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.507055][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 437.592886][T11436] loop6: detected capacity change from 0 to 1024 [ 437.629749][T11436] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 437.746358][T11441] loop6: detected capacity change from 0 to 512 [ 437.763705][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.781923][T11441] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 437.860611][T11441] EXT4-fs (loop6): 1 truncate cleaned up [ 437.904763][T11441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.196296][T11462] loop1: detected capacity change from 0 to 256 [ 438.199242][T11460] sctp: [Deprecated]: syz.5.2107 (pid 11460) Use of int in maxseg socket option. [ 438.199242][T11460] Use struct sctp_assoc_value instead [ 438.278095][T11466] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 438.336867][T11470] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 438.358470][T11466] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 438.426708][ T28] audit: type=1400 audit(2000000474.215:2561): avc: denied { getopt } for pid=11469 comm="syz.0.2113" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 438.458219][T11468] loop1: detected capacity change from 0 to 512 [ 438.522631][T11468] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 8: comm syz.1.2112: lblock 0 mapped to illegal pblock 8 (length 1) [ 438.537670][T11468] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 438.539409][T11468] EXT4-fs (loop1): Remounting filesystem read-only [ 438.549080][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 438.549149][ C1] EXT4-fs (loop1): initial error at time 2000000474: ext4_map_blocks:791: inode 2: block 8 [ 438.549339][ C1] EXT4-fs (loop1): last error at time 2000000474: ext4_map_blocks:791: inode 2: block 8 [ 438.584625][T11468] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.2112: error -EUCLEAN reading directory block [ 438.597994][T11468] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 438.607600][T11468] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.2112: error -EUCLEAN reading directory block [ 438.621999][T11468] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 438.635367][T11468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.964630][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.040647][T11481] lo speed is unknown, defaulting to 1000 [ 439.050566][T11482] loop0: detected capacity change from 0 to 128 [ 439.081495][T11482] vfat: Unknown parameter '' [ 439.208735][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.229942][T11492] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 439.478837][T11492] EXT4-fs (loop1): 1 truncate cleaned up [ 439.521757][T11492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.533233][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.636445][T11509] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2123: bg 0: block 169: padding at end of block bitmap is not set [ 440.686639][T11509] loop6: lost filesystem error report for type 5 error -117 [ 440.686850][T11509] Quota error (device loop6): write_blk: dquota write failed [ 440.694303][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 440.694319][ C1] EXT4-fs (loop6): initial error at time 2000000476: ext4_validate_block_bitmap:441 [ 440.694340][ C1] EXT4-fs (loop6): last error at time 2000000476: ext4_validate_block_bitmap:441 [ 440.740533][T11502] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 440.797795][T11509] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 440.890470][T11509] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.2123: Failed to acquire dquot type 0 [ 440.933893][T11509] loop6: lost filesystem error report for type 5 error -117 [ 440.934553][T11509] EXT4-fs (loop6): 1 truncate cleaned up [ 440.956417][T11509] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.971873][T11509] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.995842][T11519] set_capacity_and_notify: 4 callbacks suppressed [ 440.995920][T11519] loop4: detected capacity change from 0 to 1024 [ 441.034456][T11519] ext4: Unknown parameter 'uid' [ 441.056541][ T28] audit: type=1400 audit(2000000476.845:2562): avc: denied { open } for pid=11518 comm="syz.4.2128" path="/428/file1" dev="tmpfs" ino=2346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 441.190415][T11526] loop4: detected capacity change from 0 to 128 [ 441.204479][T11526] vfat: Unknown parameter '' [ 441.520910][T11530] syzkaller1: entered promiscuous mode [ 441.526605][T11530] syzkaller1: entered allmulticast mode [ 441.549428][T11520] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.583173][T11544] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2136'. [ 441.615126][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 441.638114][T11544] netlink: 'syz.1.2136': attribute type 10 has an invalid length. [ 441.657236][T11520] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.668313][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.746669][T11520] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.798882][T11520] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.801876][T11550] loop6: detected capacity change from 0 to 128 [ 441.812167][T11555] loop1: detected capacity change from 0 to 4096 [ 441.839877][T11555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.867050][ T28] audit: type=1400 audit(2000000477.655:2563): avc: denied { write } for pid=11553 comm="syz.1.2141" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 441.921292][ T5380] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.930550][ T5380] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.969976][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.006156][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.130502][ T28] audit: type=1400 audit(2000000477.915:2564): avc: denied { write } for pid=11553 comm="syz.1.2141" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 442.137952][T11555] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2141'. [ 442.245092][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.276245][T11562] loop6: detected capacity change from 0 to 128 [ 442.306770][T11562] vfat: Unknown parameter '' [ 442.373910][T11566] xt_socket: unknown flags 0x58 [ 442.383027][T11556] loop5: detected capacity change from 0 to 1024 [ 442.417808][T11556] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 442.477872][T11568] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2146'. [ 442.570270][T11576] netlink: 'syz.1.2149': attribute type 1 has an invalid length. [ 442.629891][T11576] 8021q: adding VLAN 0 to HW filter on device bond2 [ 442.700085][T11582] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2150'. [ 442.753069][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2150'. [ 442.763591][T11582] netlink: 'syz.5.2150': attribute type 10 has an invalid length. [ 442.790066][T11582] team0: Device wg2 is of different type [ 442.848422][T11576] bond2: (slave gretap1): making interface the new active one [ 442.864212][T11576] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 442.915936][T11590] netlink: 'syz.5.2152': attribute type 10 has an invalid length. [ 442.947388][T11590] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2152'. [ 443.003652][T11592] loop1: detected capacity change from 0 to 128 [ 443.014221][T11590] loop5: detected capacity change from 0 to 128 [ 443.052511][ T28] audit: type=1400 audit(2000000478.835:2565): avc: denied { ioctl } for pid=11589 comm="syz.5.2152" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 443.289008][T11597] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2154'. [ 443.306417][T11597] netlink: 23 bytes leftover after parsing attributes in process `syz.1.2154'. [ 443.326815][T11597] netlink: 23 bytes leftover after parsing attributes in process `syz.1.2154'. [ 443.376704][T11594] loop5: detected capacity change from 0 to 512 [ 443.503398][T11594] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 8: comm syz.5.2155: lblock 0 mapped to illegal pblock 8 (length 1) [ 443.572182][T11594] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 443.572483][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 443.588796][ C0] EXT4-fs (loop5): initial error at time 2000000479: ext4_map_blocks:791: inode 2: block 8 [ 443.599686][ C0] EXT4-fs (loop5): last error at time 2000000479: ext4_map_blocks:791: inode 2: block 8 [ 444.070523][T11599] loop0: detected capacity change from 0 to 128 [ 444.093420][ T28] audit: type=1400 audit(2000000479.875:2566): avc: denied { ioctl } for pid=11567 comm="syz.6.2146" path="socket:[34376]" dev="sockfs" ino=34376 ioctlcmd=0x48e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 444.171233][T11594] EXT4-fs (loop5): Remounting filesystem read-only [ 444.191844][T11599] vfat: Unknown parameter '' [ 444.204735][T11594] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.2155: error -EUCLEAN reading directory block [ 444.229699][T11594] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 444.241343][T11594] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.2155: error -EUCLEAN reading directory block [ 444.256242][T11594] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 444.269714][T11594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.526883][ T6511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.541272][T11619] EXT4-fs: Ignoring removed bh option [ 444.555855][T11619] EXT4-fs (loop1): unsupported descriptor size 171 [ 444.591239][T11623] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 444.643405][T11623] EXT4-fs (loop5): 1 truncate cleaned up [ 444.656319][T11623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.679063][T11614] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 444.691645][ T28] audit: type=1326 audit(2000000480.475:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11620 comm="syz.0.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12032dce59 code=0x7ffc0000 [ 444.718456][ T28] audit: type=1326 audit(2000000480.475:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11620 comm="syz.0.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12032dce59 code=0x7ffc0000 [ 444.745156][T11628] tmpfs: Unknown parameter 'mðol' [ 444.751371][T11625] EXT4-fs: inline encryption not supported [ 444.757429][ T28] audit: type=1326 audit(2000000480.475:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11620 comm="syz.0.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12032dce59 code=0x7ffc0000 [ 444.785002][T11625] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 444.795786][ T28] audit: type=1326 audit(2000000480.475:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11620 comm="syz.0.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f12032dce59 code=0x7ffc0000 [ 444.821911][ T28] audit: type=1326 audit(2000000480.535:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11620 comm="syz.0.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12032dce59 code=0x7ffc0000 [ 444.848667][ T28] audit: type=1326 audit(2000000480.535:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11620 comm="syz.0.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f12032dce59 code=0x7ffc0000 [ 444.897366][T11625] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.2163: lblock 2 mapped to illegal pblock 2 (length 1) [ 444.930636][T11634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.942981][T11634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.952526][T11625] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 444.953904][T11625] EXT4-fs (loop0): Remounting filesystem read-only [ 444.962994][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 444.963015][ C0] EXT4-fs (loop0): initial error at time 2000000480: ext4_map_blocks:791: inode 3: block 2 [ 444.963050][ C0] EXT4-fs (loop0): last error at time 2000000480: ext4_map_blocks:791: inode 3: block 2 [ 444.965206][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2164'. [ 445.012172][T11625] EXT4-fs (loop0): 1 orphan inode deleted [ 445.024696][T11625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.058799][T11634] team0: Port device team_slave_0 removed [ 445.060744][T11625] RDS: rds_bind could not find a transport for a0:ff00:20:0:a0:ff00:20:0, load rds_tcp or rds_rdma? [ 445.196403][ T7150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.326731][T11641] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 445.339864][T11641] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.690667][T11652] EXT4-fs: Ignoring removed bh option [ 445.706055][T11652] EXT4-fs (loop4): unsupported descriptor size 171 [ 445.715940][ T7150] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 445.779899][T11654] ext4: Unknown parameter 'uid' [ 445.822669][T11656] tmpfs: Unknown parameter 'mðol' [ 445.851039][T11658] EXT4-fs: Ignoring removed bh option [ 445.858009][T11658] EXT4-fs (loop0): unsupported descriptor size 171 [ 445.878684][T11658] tmpfs: Unknown parameter 'mðol' [ 446.024667][ T6511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.043144][T11668] set_capacity_and_notify: 9 callbacks suppressed [ 446.043176][T11668] loop5: detected capacity change from 0 to 512 [ 446.057015][T11668] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 446.068223][T11668] EXT4-fs (loop5): 1 truncate cleaned up [ 446.074619][T11668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.086766][ T3568] Bluetooth: hci0: command 0x1003 tx timeout [ 446.092810][ T6375] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 446.424006][T11680] loop1: detected capacity change from 0 to 128 [ 446.433434][T11680] vfat: Unknown parameter '' [ 446.506274][T11685] netlink: 'syz.6.2179': attribute type 1 has an invalid length. [ 446.540695][T11685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 446.554593][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2180'. [ 446.618688][T11695] loop4: detected capacity change from 0 to 512 [ 446.626923][T11695] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 446.643787][T11695] EXT4-fs (loop4): 1 truncate cleaned up [ 446.650800][T11695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.710574][T11691] bond2: (slave gretap1): making interface the new active one [ 446.771193][T11691] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 446.859765][T11704] loop6: detected capacity change from 0 to 512 [ 446.881613][T11704] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 446.900751][T11704] EXT4-fs (loop6): 1 truncate cleaned up [ 447.287377][T11704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.524031][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.855173][ T6511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.879377][T11710] loop6: detected capacity change from 0 to 128 [ 447.941716][T11710] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 448.046741][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 448.046757][ T28] audit: type=1400 audit(2000000483.835:2645): avc: denied { map } for pid=11709 comm="syz.6.2195" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 448.145943][T11720] loop6: detected capacity change from 0 to 256 [ 448.593705][T11733] loop5: detected capacity change from 0 to 128 [ 448.638788][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.641881][T11733] vfat: Unknown parameter '' [ 448.663837][T11735] loop1: detected capacity change from 0 to 1024 [ 448.679878][T11731] loop0: detected capacity change from 0 to 512 [ 448.684136][T11735] EXT4-fs: Ignoring removed bh option [ 448.694994][T11737] syzkaller1: entered promiscuous mode [ 448.702513][T11737] syzkaller1: entered allmulticast mode [ 448.725621][T11735] EXT4-fs (loop1): unsupported descriptor size 171 [ 448.776954][T11731] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 8: comm syz.0.2191: lblock 0 mapped to illegal pblock 8 (length 1) [ 448.798265][T11731] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 448.802461][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 448.815236][T11731] EXT4-fs (loop0): Remounting filesystem read-only [ 448.818175][ C1] EXT4-fs (loop0): initial error at time 2000000484: ext4_map_blocks:791: inode 2: block 8 [ 448.818221][ C1] EXT4-fs (loop0): last error at time 2000000484: ext4_map_blocks:791: inode 2: block 8 [ 448.846638][T11735] tmpfs: Unknown parameter 'mðol' [ 448.865169][T11731] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.2191: error -EUCLEAN reading directory block [ 448.902890][T11741] loop5: detected capacity change from 0 to 128 [ 448.910925][T11731] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 448.927492][T11731] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.2191: error -EUCLEAN reading directory block [ 448.956403][T11741] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 448.983513][T11731] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 448.996571][T11741] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.014145][T11731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.043512][ T6511] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 449.056056][T11748] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 54) [ 449.073483][T11748] FAT-fs (loop4): Filesystem has been set read-only [ 449.100850][T11748] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 54) [ 449.180315][T11752] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.271921][T11752] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.305503][ T7150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.361038][T11752] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.448957][T11752] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.536539][T11768] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 449.560253][T11771] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 449.586608][T11771] EXT4-fs (loop6): 1 truncate cleaned up [ 449.593171][T11771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.714727][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.736613][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.770085][ T5364] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.794849][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.890640][T11774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.900151][T11774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.918778][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2207'. [ 449.948722][T11776] vfat: Unknown parameter '' [ 450.065972][T11783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.096480][T11783] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.907073][T11789] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 451.015903][ T7150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.099195][T11798] set_capacity_and_notify: 6 callbacks suppressed [ 451.099213][T11798] loop1: detected capacity change from 0 to 1024 [ 451.105952][T11799] loop0: detected capacity change from 0 to 1764 [ 451.259608][T11798] EXT4-fs: Ignoring removed bh option [ 451.271113][T11798] EXT4-fs (loop1): unsupported descriptor size 171 [ 451.316520][T11798] tmpfs: Unknown parameter 'mðol' [ 451.630464][T11804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.702121][T11804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.723243][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.811680][ T49] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.820502][ T49] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.851948][ T49] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.866225][ T49] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.934189][T11813] loop1: detected capacity change from 0 to 1024 [ 451.944237][T11813] EXT4-fs: Ignoring removed bh option [ 451.956238][T11813] EXT4-fs (loop1): unsupported descriptor size 171 [ 451.979312][T11813] tmpfs: Unknown parameter 'mðol' [ 452.232745][T11827] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2223'. [ 452.242363][T11825] loop5: detected capacity change from 0 to 128 [ 452.270744][T11825] vfat: Unknown parameter '' [ 452.453123][T11840] netlink: 'syz.0.2230': attribute type 39 has an invalid length. [ 452.468519][T11838] loop6: detected capacity change from 0 to 512 [ 452.502525][T11838] EXT4-fs (loop6): 1 orphan inode deleted [ 452.517321][T11838] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.584129][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.595680][T11833] loop5: detected capacity change from 0 to 1024 [ 452.605936][T11833] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 452.630447][T11844] IPVS: stopping master sync thread 10454 ... [ 453.049264][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2234'. [ 453.268984][T11857] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2235'. [ 453.335912][T11864] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2238'. [ 453.602384][T11875] loop5: detected capacity change from 0 to 1024 [ 453.619780][T11875] EXT4-fs: Ignoring removed bh option [ 453.625704][T11875] EXT4-fs (loop5): unsupported descriptor size 171 [ 453.640251][T11875] tmpfs: Unknown parameter 'mðol' [ 453.719875][ T28] audit: type=1400 audit(2000000489.505:2646): avc: denied { name_bind } for pid=11883 comm="syz.6.2247" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 453.753643][T11884] loop6: detected capacity change from 0 to 1024 [ 453.766583][T11884] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 454.248588][T11888] loop1: detected capacity change from 0 to 1764 [ 454.255517][T11888] iso9660: Bad value for 'uid' [ 454.260298][T11888] iso9660: Bad value for 'uid' [ 454.260536][T11891] loop6: detected capacity change from 0 to 4096 [ 454.880755][T11898] vfat: Unknown parameter '' [ 455.027723][T11891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.108328][T11891] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2249'. [ 455.118050][ T28] audit: type=1400 audit(2000000490.855:2647): avc: denied { write } for pid=11889 comm="syz.6.2249" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.118144][ T28] audit: type=1400 audit(2000000490.885:2648): avc: denied { write } for pid=11889 comm="syz.6.2249" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.148382][T11903] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2251'. [ 455.225488][T11905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.273728][T11905] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.291481][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.343906][ T28] audit: type=1400 audit(2000000491.105:2649): avc: denied { write } for pid=11904 comm="syz.1.2253" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.488674][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.543495][T11915] xt_CT: No such helper "snmp_trap" [ 456.107635][T11924] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 456.131348][T11932] set_capacity_and_notify: 3 callbacks suppressed [ 456.131362][T11932] loop1: detected capacity change from 0 to 512 [ 456.164722][T11924] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.181156][T11932] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 456.196666][T11932] EXT4-fs (loop1): 1 truncate cleaned up [ 456.214590][T11932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.225077][T11924] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 456.450696][T11938] loop6: detected capacity change from 0 to 128 [ 456.466478][T11938] vfat: Unknown parameter '' [ 456.577488][T11944] loop0: detected capacity change from 0 to 512 [ 456.598540][T11944] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 456.620816][T11944] EXT4-fs (loop0): 1 truncate cleaned up [ 456.634137][T11944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.820986][T11949] netlink: 'syz.5.2266': attribute type 39 has an invalid length. [ 456.975952][T11952] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2267'. [ 456.986490][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2267'. [ 456.998602][T11952] netlink: 'syz.4.2267': attribute type 10 has an invalid length. [ 457.014673][T11955] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2268'. [ 457.019831][T11952] team0: Device wg2 is of different type [ 457.031152][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2268'. [ 457.058388][T11955] netlink: 'syz.5.2268': attribute type 10 has an invalid length. [ 457.081831][T11955] team0: Device wg2 is of different type [ 457.155349][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2270'. [ 457.557143][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.663346][T11970] loop6: detected capacity change from 0 to 128 [ 457.668771][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2271'. [ 457.677769][T11970] vfat: Unknown parameter '' [ 457.688133][T11972] loop1: detected capacity change from 0 to 128 [ 457.714515][T11972] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 457.738646][T11972] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.788107][T11979] loop6: detected capacity change from 0 to 1024 [ 457.808110][T11979] EXT4-fs: Ignoring removed bh option [ 457.809473][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 457.823268][T11977] lo speed is unknown, defaulting to 1000 [ 457.846789][T11979] EXT4-fs (loop6): unsupported descriptor size 171 [ 457.858033][T11981] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2280'. [ 457.877687][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2280'. [ 457.907648][T11981] netlink: 'syz.5.2280': attribute type 10 has an invalid length. [ 457.928776][T11981] team0: Device wg2 is of different type [ 457.939050][T11985] netlink: 'syz.1.2281': attribute type 10 has an invalid length. [ 457.985817][T11987] lo speed is unknown, defaulting to 1000 [ 457.995592][T11990] loop5: detected capacity change from 0 to 512 [ 458.003758][T11993] tmpfs: Unknown parameter 'mðol' [ 458.026885][T11990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.050516][ T7150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.060940][ T28] audit: type=1400 audit(2000000493.835:2650): avc: denied { write } for pid=11989 comm="syz.5.2282" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 458.263623][ T6511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.315442][T12009] loop1: detected capacity change from 0 to 512 [ 458.380006][T12009] EXT4-fs (loop1): 1 orphan inode deleted [ 458.403924][T12009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.418764][T12013] loop5: detected capacity change from 0 to 128 [ 458.434753][T12013] vfat: Unknown parameter '' [ 458.576554][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.659324][ T28] audit: type=1400 audit(2000000494.445:2651): avc: denied { setopt } for pid=12024 comm="syz.1.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 458.677205][T12028] netlink: 'syz.5.2293': attribute type 10 has an invalid length. [ 458.689914][T12027] loop6: detected capacity change from 0 to 128 [ 458.714337][T12028] team0: Device wg2 is of different type [ 458.764166][T12033] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 458.780118][T12027] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 458.829350][T12027] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.850274][T12033] EXT4-fs (loop1): 1 truncate cleaned up [ 458.860913][T12033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.924771][T12037] iso9660: Bad value for 'uid' [ 458.946195][T12037] iso9660: Bad value for 'uid' [ 458.989939][ T6736] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 459.253584][T12052] vfat: Unknown parameter '' [ 459.277375][T12054] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 459.304511][T12054] EXT4-fs (loop0): 1 truncate cleaned up [ 459.311400][T12054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.335980][T12058] EXT4-fs: Ignoring removed bh option [ 459.363221][T12058] EXT4-fs (loop6): unsupported descriptor size 171 [ 459.496977][T12061] tmpfs: Unknown parameter 'mðol' [ 459.997199][T12067] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 460.019727][T12067] EXT4-fs (loop5): 1 truncate cleaned up [ 460.025843][T12067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.229315][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.288357][T12075] __nla_validate_parse: 6 callbacks suppressed [ 460.288387][T12075] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2307'. [ 460.332867][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2307'. [ 460.353824][T12075] netlink: 'syz.1.2307': attribute type 10 has an invalid length. [ 460.478608][T12078] vfat: Unknown parameter '' [ 460.843966][ T7150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.868641][T12093] set_capacity_and_notify: 7 callbacks suppressed [ 461.868737][T12093] loop0: detected capacity change from 0 to 128 [ 462.795102][T12093] vfat: Unknown parameter '' [ 462.991221][T12099] loop1: detected capacity change from 0 to 512 [ 463.001060][T12099] EXT4-fs: Ignoring removed nobh option [ 463.106599][T12098] loop0: detected capacity change from 0 to 1764 [ 463.113239][T12098] iso9660: Bad value for 'uid' [ 463.118068][T12098] iso9660: Bad value for 'uid' [ 463.138689][T12099] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.2315: corrupted in-inode xattr: overlapping e_value [ 463.179474][T12099] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 463.179743][T12099] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2315: couldn't read orphan inode 15 (err -117) [ 463.188923][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 463.188944][ C0] EXT4-fs (loop1): initial error at time 2000000498: ext4_iget_extra_inode:5180: inode 15 [ 463.188987][ C0] EXT4-fs (loop1): last error at time 2000000498: ext4_iget_extra_inode:5180: inode 15 [ 463.336756][ T6511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.353838][T12099] loop1: lost filesystem error report for type 5 error -117 [ 463.356744][T12099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.389637][ T28] audit: type=1400 audit(2000000755.175:2652): avc: denied { setopt } for pid=12095 comm="syz.1.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 463.437983][T12105] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2318'. [ 463.464066][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2318'. [ 463.484572][T12105] netlink: 'syz.5.2318': attribute type 10 has an invalid length. [ 463.505330][T12105] team0: Device wg2 is of different type [ 463.543006][ T28] audit: type=1400 audit(2000000755.325:2653): avc: denied { create } for pid=12095 comm="syz.1.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 463.628956][T12109] loop6: detected capacity change from 0 to 128 [ 463.660841][T12109] vfat: Unknown parameter '' [ 463.721277][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.204021][T12120] loop1: detected capacity change from 0 to 128 [ 464.223130][T12120] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 464.236902][T12120] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.258331][T12120] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 464.305529][T12127] loop6: detected capacity change from 0 to 128 [ 464.318523][T12127] vfat: Unknown parameter '' [ 464.366633][T12130] loop1: detected capacity change from 0 to 128 [ 464.376690][T12130] vfat: Unknown parameter '' [ 464.420075][T12135] loop1: detected capacity change from 0 to 512 [ 464.421374][T12132] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2326'. [ 464.446543][T12135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.463469][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2326'. [ 464.473626][T12132] netlink: 'syz.6.2326': attribute type 10 has an invalid length. [ 464.501354][T12132] team0: Device wg2 is of different type [ 464.515576][ T28] audit: type=1400 audit(2000000756.305:2654): avc: denied { write } for pid=12133 comm="syz.1.2327" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.566485][T12138] loop5: detected capacity change from 0 to 512 [ 464.599441][T12138] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 464.610655][T12138] EXT4-fs (loop5): 1 truncate cleaned up [ 464.617232][T12138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.016406][T12148] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2331'. [ 465.057957][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2331'. [ 465.080003][T12148] netlink: 'syz.4.2331': attribute type 10 has an invalid length. [ 465.105093][T12148] team0: Device wg2 is of different type [ 465.116015][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.277853][T12157] loop1: detected capacity change from 0 to 128 [ 465.298005][T12157] vfat: Unknown parameter '' [ 465.405730][ T28] audit: type=1400 audit(2000000757.195:2655): avc: denied { setopt } for pid=12163 comm="syz.1.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 465.545973][T12165] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.2347: bit already cleared for inode 11 [ 465.559214][T12165] loop1: lost filesystem error report for type 5 error -117 [ 465.561589][T12165] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 465.569188][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 465.569260][ C0] EXT4-fs (loop1): initial error at time 2000000757: ext4_free_inode:356 [ 465.569309][ C0] EXT4-fs (loop1): last error at time 2000000757: ext4_free_inode:356 [ 465.606039][T12165] loop1: lost filesystem error report for type 5 error -117 [ 465.614380][T12165] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 465.639787][T12165] loop1: lost filesystem error report for type 5 error -117 [ 465.642110][T12165] EXT4-fs (loop1): 1 orphan inode deleted [ 465.836170][T12176] netlink: 'syz.4.2342': attribute type 9 has an invalid length. [ 465.908055][T12171] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 465.917742][T12176] netlink: 'syz.4.2342': attribute type 7 has an invalid length. [ 465.964090][T12176] netlink: 'syz.4.2342': attribute type 8 has an invalid length. [ 466.075730][T12171] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -ENXIO [ 466.167596][T12171] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 466.302356][ T28] audit: type=1400 audit(2000000758.085:2656): avc: denied { mounton } for pid=12170 comm="syz.0.2339" path="/229/bus/bus" dev="loop0" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 466.355576][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'. [ 466.436401][ T7150] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 466.463384][ T7150] FAT-fs (loop0): Filesystem has been set read-only [ 466.478693][T12189] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.592152][ T28] audit: type=1400 audit(2000000758.375:2657): avc: denied { write } for pid=12196 comm="syz.6.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 466.662233][T12204] vfat: Unknown parameter '' [ 466.699318][T12209] : renamed from bond_slave_1 [ 466.778952][T12216] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 466.818231][T12216] EXT4-fs (loop6): 1 truncate cleaned up [ 467.995465][T12226] set_capacity_and_notify: 7 callbacks suppressed [ 467.995491][T12226] loop0: detected capacity change from 0 to 128 [ 468.019429][T12226] vfat: Unknown parameter '' [ 468.229386][T12214] netlink: 'syz.4.2352': attribute type 29 has an invalid length. [ 468.275875][T12214] netlink: 'syz.4.2352': attribute type 3 has an invalid length. [ 468.308619][T12214] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2352'. [ 468.652194][T12237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.668160][T12237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.704100][ T28] audit: type=1400 audit(2000000760.465:2658): avc: denied { write } for pid=12233 comm="syz.5.2359" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 469.176011][T12249] xt_CT: No such helper "snmp_trap" [ 469.311923][T12257] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2365'. [ 469.323075][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2365'. [ 469.332885][ T6736] EXT4-fs unmount: 6 callbacks suppressed [ 469.332900][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.333577][T12257] netlink: 'syz.4.2365': attribute type 10 has an invalid length. [ 469.339063][T12260] loop0: detected capacity change from 0 to 1024 [ 469.367742][T12257] team0: Device wg2 is of different type [ 469.397260][T12260] EXT4-fs: Ignoring removed bh option [ 469.403247][T12260] EXT4-fs (loop0): unsupported descriptor size 171 [ 469.411100][T12262] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2367'. [ 469.437293][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2367'. [ 469.446947][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 469.477983][T12265] ip6erspan1: entered allmulticast mode [ 469.485824][T12262] netlink: 'syz.6.2367': attribute type 10 has an invalid length. [ 469.500474][T12262] team0: Device wg2 is of different type [ 469.546015][T12268] loop1: detected capacity change from 0 to 128 [ 469.555848][T12268] vfat: Unknown parameter '' [ 469.585841][T12271] tmpfs: Unknown parameter 'mðol' [ 471.005314][T12290] loop1: detected capacity change from 0 to 8192 [ 471.160986][T12288] loop0: detected capacity change from 0 to 1024 [ 471.588876][T12288] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 471.652635][T12288] System zones: 0-1, 3-36 [ 471.723306][T12288] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.2374: bad orphan inode 134217728 [ 471.915000][T12288] loop0: lost filesystem error report for type 5 error -117 [ 471.928815][T12302] loop5: detected capacity change from 0 to 1024 [ 471.943697][T12302] EXT4-fs: Ignoring removed bh option [ 471.952847][T12302] EXT4-fs (loop5): unsupported descriptor size 171 [ 472.026765][T12288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.120789][T12295] xt_CT: No such helper "snmp_trap" [ 472.787337][T12311] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2380'. [ 472.809927][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2380'. [ 472.820975][T12311] netlink: 'syz.4.2380': attribute type 10 has an invalid length. [ 472.851639][T12311] team0: Device wg2 is of different type [ 472.868735][ T7150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.891406][ T28] audit: type=1400 audit(2000000764.675:2659): avc: denied { ioctl } for pid=12315 comm="syz.1.2381" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x453f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 472.942013][T12321] tmpfs: Unknown parameter 'mðol' [ 472.990890][T12316] random: crng reseeded on system resumption [ 473.022697][ T28] audit: type=1400 audit(2000000764.805:2660): avc: denied { getopt } for pid=12323 comm="syz.4.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 473.108121][T12336] loop6: detected capacity change from 0 to 512 [ 473.139052][T12333] loop1: detected capacity change from 0 to 128 [ 473.152263][T12333] vfat: Unknown parameter '' [ 473.156557][T12336] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.169856][T12336] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.191388][T12334] vlan2: entered promiscuous mode [ 473.196753][T12334] bond0: entered promiscuous mode [ 473.201843][T12334] bond_slave_0: entered promiscuous mode [ 473.290063][ T28] audit: type=1400 audit(2000000765.075:2661): avc: denied { write } for pid=12344 comm="syz.1.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 473.947308][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.958721][T12355] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2394'. [ 473.994489][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2394'. [ 474.001025][T12358] loop6: detected capacity change from 0 to 8192 [ 474.022639][T12355] netlink: 'syz.1.2394': attribute type 10 has an invalid length. [ 474.567637][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 474.925114][T12374] random: crng reseeded on system resumption [ 475.004395][ T28] audit: type=1400 audit(2000000766.785:2662): avc: denied { read } for pid=12375 comm="syz.5.2399" dev="sockfs" ino=38009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 475.433330][T12382] loop0: detected capacity change from 0 to 1024 [ 475.441729][T12382] EXT4-fs: Ignoring removed bh option [ 475.495209][T12382] EXT4-fs (loop0): unsupported descriptor size 171 [ 475.557361][T12385] loop1: detected capacity change from 0 to 128 [ 475.579555][T12385] vfat: Unknown parameter '' [ 475.614826][T12384] vlan2: entered promiscuous mode [ 475.620553][T12384] bond0: entered promiscuous mode [ 475.626350][T12384] bond_slave_0: entered promiscuous mode [ 477.513429][T12398] tmpfs: Unknown parameter 'mðol' [ 477.920645][T12393] loop5: detected capacity change from 0 to 512 [ 477.976682][ T28] audit: type=1400 audit(2000000769.755:2663): avc: denied { mounton } for pid=12389 comm="syz.5.2404" path="/file0" dev="ramfs" ino=38077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 478.191845][T12414] loop0: detected capacity change from 0 to 512 [ 478.225023][T12414] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 478.279803][T12414] FAT-fs (loop0): error, invalid access to FAT (entry 0x09fffff8) [ 478.807652][ T28] audit: type=1400 audit(2000000770.535:2664): avc: denied { create } for pid=12410 comm="syz.6.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 478.902181][T12424] loop0: detected capacity change from 0 to 256 [ 479.054032][T12429] loop5: detected capacity change from 0 to 128 [ 479.090208][T12429] vfat: Unknown parameter '' [ 479.219158][T12432] xt_NFQUEUE: number of total queues is 0 [ 479.274734][T12437] loop5: detected capacity change from 0 to 1024 [ 479.283388][T12437] EXT4-fs: Ignoring removed bh option [ 479.294034][T12437] EXT4-fs (loop5): unsupported descriptor size 171 [ 479.336759][T12439] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2419'. [ 479.349411][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2419'. [ 479.360161][T12439] netlink: 'syz.6.2419': attribute type 10 has an invalid length. [ 479.370515][T12439] team0: Device wg2 is of different type [ 479.413354][T12446] loop6: detected capacity change from 0 to 1024 [ 479.421439][T12446] EXT4-fs: Ignoring removed bh option [ 479.429206][T12447] tmpfs: Unknown parameter 'mðol' [ 479.434695][T12446] EXT4-fs (loop6): unsupported descriptor size 171 [ 479.444185][T12446] tmpfs: Unknown parameter 'mðol' [ 480.159004][T12469] loop5: detected capacity change from 0 to 1024 [ 480.174167][T12469] EXT4-fs: Ignoring removed bh option [ 480.179809][T12469] EXT4-fs (loop5): unsupported descriptor size 171 [ 480.273508][T12474] loop1: detected capacity change from 0 to 128 [ 480.301515][T12474] vfat: Unknown parameter '' [ 480.311301][T12478] tmpfs: Unknown parameter 'mðol' [ 480.328662][ T28] audit: type=1400 audit(2000000772.115:2665): avc: denied { connect } for pid=12464 comm="syz.0.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 480.421486][ T28] audit: type=1400 audit(2000000772.205:2666): avc: denied { ioctl } for pid=12485 comm="syz.1.2430" path="socket:[37535]" dev="sockfs" ino=37535 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 480.490122][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2429'. [ 480.513177][T12489] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2431'. [ 480.534648][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2431'. [ 480.555293][T12489] netlink: 'syz.1.2431': attribute type 10 has an invalid length. [ 480.620030][T12498] loop1: detected capacity change from 0 to 1024 [ 480.629026][T12498] EXT4-fs: Ignoring removed bh option [ 480.652548][T12498] EXT4-fs (loop1): unsupported descriptor size 171 [ 480.674653][T12502] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2437'. [ 480.692970][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2437'. [ 480.713847][T12502] netlink: 'syz.0.2437': attribute type 10 has an invalid length. [ 480.723951][T12502] team0: Device wg2 is of different type [ 480.788468][T12508] tmpfs: Unknown parameter 'mðol' [ 481.488916][ T28] audit: type=1400 audit(2000000773.275:2667): avc: denied { ioctl } for pid=12519 comm="syz.0.2448" path="socket:[37581]" dev="sockfs" ino=37581 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 481.557463][T12524] loop6: detected capacity change from 0 to 128 [ 481.571908][T12524] vfat: Unknown parameter '' [ 481.582865][T12522] loop1: detected capacity change from 0 to 764 [ 481.752273][T12540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.761903][T12540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.780690][ T28] audit: type=1400 audit(2000000773.565:2668): avc: denied { name_bind } for pid=12539 comm="syz.6.2446" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 482.795841][ T28] audit: type=1400 audit(2000000773.605:2669): avc: denied { mount } for pid=12530 comm="syz.1.2444" name="/" dev="rpc_pipefs" ino=37611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 482.915795][T12545] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2447'. [ 482.940833][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2447'. [ 482.955676][T12540] iso9660: Unknown parameter '' [ 482.974918][T12545] netlink: 'syz.4.2447': attribute type 10 has an invalid length. [ 483.070924][T12545] team0: Device wg2 is of different type [ 483.170762][T12551] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 483.191371][T12551] ext4 filesystem being mounted at /288/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 483.229329][ T28] audit: type=1400 audit(2000000775.015:2670): avc: denied { write } for pid=12550 comm="syz.5.2450" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 483.260706][ T28] audit: type=1400 audit(2000000775.035:2671): avc: denied { write } for pid=12550 comm="syz.5.2450" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 483.322023][ T6511] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 483.343224][ T28] audit: type=1400 audit(2000000775.045:2672): avc: denied { write } for pid=12550 comm="syz.5.2450" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 483.371027][T12555] xt_CT: No such helper "snmp_trap" [ 483.374054][ T28] audit: type=1400 audit(2000000775.045:2673): avc: denied { write } for pid=12550 comm="syz.5.2450" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 483.398080][ T28] audit: type=1400 audit(2000000775.045:2674): avc: denied { mounton } for pid=12550 comm="syz.5.2450" path="/288/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 483.464409][T12560] set_capacity_and_notify: 2 callbacks suppressed [ 483.464492][T12560] loop0: detected capacity change from 0 to 1024 [ 483.490217][T12562] loop5: detected capacity change from 0 to 256 [ 483.497906][T12560] EXT4-fs: Ignoring removed bh option [ 483.529430][T12560] EXT4-fs (loop0): unsupported descriptor size 171 [ 483.548159][T12566] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2454'. [ 483.560005][T12566] netlink: 'syz.1.2454': attribute type 10 has an invalid length. [ 483.616770][T12574] loop6: detected capacity change from 0 to 512 [ 483.623731][T12574] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 483.635992][T12574] EXT4-fs (loop6): 1 truncate cleaned up [ 483.642023][T12574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.643587][T12572] loop1: detected capacity change from 0 to 128 [ 483.655723][T12576] tmpfs: Unknown parameter 'mðol' [ 483.681320][T12572] vfat: Unknown parameter '' [ 483.880700][T12586] loop1: detected capacity change from 0 to 128 [ 483.913779][T12586] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 483.924619][T12586] FAT-fs (loop1): bogus number of directory entries (2047) [ 483.932409][T12586] FAT-fs (loop1): Can't find a valid FAT filesystem [ 484.022109][T12587] loop5: detected capacity change from 0 to 512 [ 484.105996][T12587] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.2458: corrupted inode contents [ 484.118019][T12587] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.121223][T12587] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #16: comm syz.5.2458: mark_inode_dirty error [ 484.130409][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 484.130425][ C1] EXT4-fs (loop5): initial error at time 2000000775: ext4_do_update_inode:5742: inode 16 [ 484.130450][ C1] EXT4-fs (loop5): last error at time 2000000775: ext4_do_update_inode:5742: inode 16 [ 484.167661][T12587] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.170331][T12587] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.2458: corrupted inode contents [ 484.191391][T12587] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.192255][T12587] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.2458: mark_inode_dirty error [ 484.212835][T12587] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.214075][T12587] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.2458: corrupted inode contents [ 484.235284][T12587] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.236026][T12587] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 484.253818][T12587] loop5: lost filesystem error report for type 5 error -117 [ 484.254383][T12587] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.2458: corrupted inode contents [ 484.273680][T12587] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.275456][T12587] EXT4-fs error (device loop5): ext4_truncate:4691: inode #16: comm syz.5.2458: mark_inode_dirty error [ 484.295731][T12587] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.296459][T12587] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 484.314514][T12587] loop5: lost filesystem error report for type 5 error -117 [ 484.316109][T12587] EXT4-fs (loop5): 1 truncate cleaned up [ 484.330403][T12587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.343035][T12587] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.802558][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 484.873013][ T5394] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:25: Failed to release dquot type 1 [ 485.761394][T12604] loop0: detected capacity change from 0 to 4096 [ 485.796765][T12604] EXT4-fs: Ignoring removed bh option [ 485.909682][T12604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.985426][ T6511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.036446][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 486.036483][ T28] audit: type=1400 audit(2000000777.825:2676): avc: denied { write } for pid=12598 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.117174][ T28] audit: type=1400 audit(2000000777.905:2677): avc: denied { write } for pid=12618 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.274060][ T28] audit: type=1400 audit(2000000778.055:2678): avc: denied { write } for pid=12622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.318484][ T28] audit: type=1400 audit(2000000778.105:2679): avc: denied { write } for pid=12635 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.385640][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.481545][T12620] __nla_validate_parse: 1 callbacks suppressed [ 486.481600][T12620] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2462'. [ 486.861170][ T7150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.874229][T12620] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2462'. [ 487.068926][T12645] loop6: detected capacity change from 0 to 128 [ 487.080792][T12643] loop1: detected capacity change from 0 to 1024 [ 487.259621][T12645] vfat: Unknown parameter '' [ 487.294967][T12643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 487.323577][T12643] ext4 filesystem being mounted at /541/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.338443][ T28] audit: type=1400 audit(2000000779.125:2680): avc: denied { write } for pid=12642 comm="syz.1.2468" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 487.362173][T12643] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.2468: lblock 3 mapped to illegal pblock 3 (length 1) [ 487.378091][T12643] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 487.426708][T12651] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2467'. [ 487.438445][T12643] EXT4-fs (loop1): This should not happen!! Data will be lost [ 487.438445][T12643] [ 487.466998][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2467'. [ 487.480781][T12651] netlink: 'syz.0.2467': attribute type 10 has an invalid length. [ 487.499771][ T3295] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 487.513256][T12651] team0: Device wg2 is of different type [ 487.522426][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 489.155141][T12670] loop5: detected capacity change from 0 to 128 [ 489.173198][T12670] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 489.187288][T12670] FAT-fs (loop5): bogus number of directory entries (2047) [ 489.194885][T12670] FAT-fs (loop5): Can't find a valid FAT filesystem [ 489.525506][T12673] loop1: detected capacity change from 0 to 256 [ 489.648979][T12678] loop0: detected capacity change from 0 to 512 [ 489.676886][ T28] audit: type=1400 audit(2000000781.465:2681): avc: denied { bind } for pid=12675 comm="syz.6.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 489.690336][T12678] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 489.712277][T12667] lo speed is unknown, defaulting to 1000 [ 489.720022][T12676] netlink: 'syz.6.2477': attribute type 10 has an invalid length. [ 489.744125][T12677] xt_NFQUEUE: number of total queues is 0 [ 489.761938][T12678] EXT4-fs (loop0): 1 truncate cleaned up [ 489.768275][T12678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.768444][T12676] Process accounting resumed [ 489.931335][T12689] loop6: detected capacity change from 0 to 128 [ 489.945129][T12690] loop5: detected capacity change from 0 to 512 [ 489.955306][T12690] EXT4-fs: Ignoring removed orlov option [ 489.961103][T12690] EXT4-fs: Ignoring removed mblk_io_submit option [ 489.970132][T12689] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 489.979947][T12690] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.2480: corrupted in-inode xattr: e_value size too large [ 489.983174][T12689] ext4 filesystem being mounted at /314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 489.996925][T12690] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 490.030725][T12690] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2480: couldn't read orphan inode 15 (err -117) [ 490.039968][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 490.039989][ C1] EXT4-fs (loop5): initial error at time 2000000781: ext4_iget_extra_inode:5180: inode 15 [ 490.040020][ C1] EXT4-fs (loop5): last error at time 2000000781: ext4_iget_extra_inode:5180: inode 15 [ 490.054556][ T28] audit: type=1400 audit(2000000781.835:2682): avc: denied { write } for pid=12688 comm="syz.6.2482" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 490.058372][T12690] loop5: lost filesystem error report for type 5 error -117 [ 490.081804][ T28] audit: type=1400 audit(2000000781.865:2683): avc: denied { write } for pid=12688 comm="syz.6.2482" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 490.114389][T12690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.129329][ T28] audit: type=1400 audit(2000000781.885:2684): avc: denied { write } for pid=12688 comm="syz.6.2482" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 490.162878][ T28] audit: type=1400 audit(2000000781.885:2685): avc: denied { write } for pid=12688 comm="syz.6.2482" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 490.231408][ T6736] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 490.266296][ T6511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.302966][T12709] loop1: detected capacity change from 0 to 8192 [ 492.761250][T12708] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 492.768015][T12708] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 492.776237][T12708] vhci_hcd vhci_hcd.0: Device attached [ 493.494260][T12711] vhci_hcd: connection closed [ 493.501480][ T5356] vhci_hcd vhci_hcd.5: stop threads [ 493.533602][T12717] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2487'. [ 493.556111][ T5356] vhci_hcd vhci_hcd.5: release socket [ 493.561542][ T5356] vhci_hcd vhci_hcd.5: disconnect device [ 493.663126][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2487'. [ 493.971376][T12721] netlink: 'syz.6.2487': attribute type 10 has an invalid length. [ 494.136118][T12721] team0: Device wg2 is of different type [ 494.270372][ T7150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.459610][T12731] loop5: detected capacity change from 0 to 128 [ 494.474358][T12731] vfat: Unknown parameter '' [ 495.598652][T12733] loop0: detected capacity change from 0 to 128 [ 495.623149][T12733] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 495.633330][T12733] FAT-fs (loop0): bogus number of directory entries (2047) [ 495.640830][T12733] FAT-fs (loop0): Can't find a valid FAT filesystem [ 495.649301][T12744] tmpfs: Unknown parameter 'mðol' [ 495.811616][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 495.811629][ T28] audit: type=1400 audit(2000000787.595:2687): avc: denied { write } for pid=12750 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.875283][ T28] audit: type=1400 audit(2000000787.655:2688): avc: denied { write } for pid=12761 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.026303][ T28] audit: type=1400 audit(2000000787.815:2689): avc: denied { write } for pid=12764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.123301][ T28] audit: type=1400 audit(2000000787.895:2690): avc: denied { write } for pid=12778 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.187724][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2505'. [ 496.657693][T12792] loop5: detected capacity change from 0 to 4096 [ 496.708460][T12792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.932471][ T28] audit: type=1400 audit(2000000788.515:2691): avc: denied { write } for pid=12786 comm="syz.5.2498" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 497.118293][T12798] ref_ctr increment failed for inode: 0xbd0 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104a06900 [ 497.229773][ T5356] Bluetooth: hci0: Frame reassembly failed (-84) [ 497.245227][ T6511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.262841][T12805] netlink: 67 bytes leftover after parsing attributes in process `syz.6.2502'. [ 497.304838][T12797] uprobe: syz.1.2501:12797 failed to unregister, leaking uprobe [ 497.424967][T12805] loop6: detected capacity change from 0 to 1024 [ 497.479690][T12805] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 497.491915][T12805] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.2502: lblock 2 mapped to illegal pblock 2 (length 1) [ 497.506788][T12805] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 497.507136][T12805] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 497.516478][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 497.516667][ C1] EXT4-fs (loop6): initial error at time 2000000789: ext4_map_blocks:791: inode 3: block 2 [ 497.516786][ C1] EXT4-fs (loop6): last error at time 2000000789: ext4_map_blocks:791: inode 3: block 2 [ 497.552826][T12805] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.2502: lblock 0 mapped to illegal pblock 48 (length 1) [ 497.568499][T12805] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 497.573745][T12805] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 497.593347][T12805] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.2502: Failed to acquire dquot type 0 [ 497.620965][T12805] loop6: lost filesystem error report for type 5 error -117 [ 497.623940][T12805] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 497.642755][T12805] loop6: lost filesystem error report for type 5 error -117 [ 497.643342][T12805] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.2502: mark_inode_dirty error [ 497.697473][T12805] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 497.698171][T12805] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 497.720800][T12805] EXT4-fs (loop6): 1 orphan inode deleted [ 497.795761][T12805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.953973][ T5394] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 497.970415][ T5394] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 497.979066][ T5394] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:25: Failed to release dquot type 0 [ 497.998221][T12805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.014968][T12805] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.2502: Invalid inode table block 1 in block_group 0 [ 498.019004][ T28] audit: type=1400 audit(2000000789.805:2692): avc: denied { create } for pid=12824 comm="syz.1.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 498.029821][T12805] loop6: lost filesystem error report for type 5 error -117 [ 498.049018][T12805] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 498.067639][T12805] loop6: lost filesystem error report for type 5 error -117 [ 498.067810][T12805] EXT4-fs error (device loop6): ext4_quota_off:7325: inode #3: comm syz.6.2502: mark_inode_dirty error [ 498.077053][T12825] loop1: detected capacity change from 0 to 128 [ 498.088647][T12805] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 498.125238][T12827] loop1: detected capacity change from 0 to 512 [ 498.141406][T12827] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 498.152992][T12827] EXT4-fs (loop1): 1 truncate cleaned up [ 498.159105][T12827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.200850][T12801] 9p: Bad value for 'trans' [ 498.311429][T12836] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2515'. [ 498.321580][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2515'. [ 498.334276][T12836] netlink: 'syz.5.2515': attribute type 10 has an invalid length. [ 498.345163][T12838] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2514'. [ 498.345522][T12836] team0: Device wg2 is of different type [ 498.354745][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2514'. [ 498.372009][T12838] netlink: 'syz.6.2514': attribute type 10 has an invalid length. [ 498.406201][T12838] team0: Device wg2 is of different type [ 498.428098][T12845] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2518'. [ 498.441652][T12843] ref_ctr increment failed for inode: 0xafd offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88812b186200 [ 498.444995][T12845] 9p: Bad value for 'wfdno' [ 498.478745][ T28] audit: type=1400 audit(2000000790.265:2693): avc: denied { append } for pid=12844 comm="syz.5.2518" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 498.501754][T12842] uprobe: syz.4.2517:12842 failed to unregister, leaking uprobe [ 498.762911][T12858] loop5: detected capacity change from 0 to 128 [ 499.030315][T12864] netlink: 67 bytes leftover after parsing attributes in process `syz.5.2525'. [ 499.048127][T12864] loop5: detected capacity change from 0 to 1024 [ 499.065153][T12864] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 499.082439][T12864] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.2525: lblock 2 mapped to illegal pblock 2 (length 1) [ 499.097628][T12864] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 499.097968][T12864] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.2525: lblock 0 mapped to illegal pblock 48 (length 1) [ 499.107577][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 499.107598][ C0] EXT4-fs (loop5): initial error at time 2000000790: ext4_map_blocks:791: inode 3: block 2 [ 499.107641][ C0] EXT4-fs (loop5): last error at time 2000000790: ext4_map_blocks:791: inode 3: block 2 [ 499.169269][T12864] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 499.172430][T12864] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.2525: Failed to acquire dquot type 0 [ 499.195251][T12864] loop5: lost filesystem error report for type 5 error -117 [ 499.196383][T12864] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 499.246375][T12864] loop5: lost filesystem error report for type 5 error -117 [ 499.246795][T12864] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.2525: mark_inode_dirty error [ 499.266539][T12864] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 499.267226][T12864] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 499.290023][ T6375] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 499.296360][ T3568] Bluetooth: hci0: command 0x1003 tx timeout [ 499.326479][T12874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.351929][T12874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.441257][T12864] EXT4-fs (loop5): 1 orphan inode deleted [ 499.452980][T12864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.465697][ T5380] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 499.465744][ T5380] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 499.481973][ T5380] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:21: Failed to release dquot type 0 [ 499.504360][T12864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.514437][T12864] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.2525: Invalid inode table block 1 in block_group 0 [ 499.529541][T12864] loop5: lost filesystem error report for type 5 error -117 [ 499.529922][T12864] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 499.547575][T12864] loop5: lost filesystem error report for type 5 error -117 [ 499.547689][T12864] EXT4-fs error (device loop5): ext4_quota_off:7325: inode #3: comm syz.5.2525: mark_inode_dirty error [ 499.548874][T12874] loop0: detected capacity change from 0 to 764 [ 499.557876][T12864] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 499.571439][T12874] iso9660: Unknown parameter '' [ 499.614902][T12864] 9p: Bad value for 'trans' [ 499.653286][T12881] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2530'. [ 499.664346][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2530'. [ 499.673983][T12881] netlink: 'syz.4.2530': attribute type 10 has an invalid length. [ 499.685981][T12881] team0: Device wg2 is of different type [ 499.739818][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.764874][T12888] loop1: detected capacity change from 0 to 1024 [ 499.772315][T12888] EXT4-fs: Ignoring removed bh option [ 499.784787][T12888] EXT4-fs (loop1): unsupported descriptor size 171 [ 499.902243][T12901] tmpfs: Unknown parameter 'mðol' [ 500.091580][T12908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12908 comm=syz.6.2536 [ 500.104434][T12908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12908 comm=syz.6.2536 [ 500.117130][T12908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12908 comm=syz.6.2536 [ 500.129740][T12908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12908 comm=syz.6.2536 [ 500.142512][T12908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12908 comm=syz.6.2536 [ 500.155164][T12908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12908 comm=syz.6.2536 [ 500.168076][T12908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12908 comm=syz.6.2536 [ 500.180913][T12908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12908 comm=syz.6.2536 [ 500.193549][T12908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12908 comm=syz.6.2536 [ 500.206361][T12908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12908 comm=syz.6.2536 [ 500.675155][T12917] loop0: detected capacity change from 0 to 1764 [ 500.681866][T12917] iso9660: Bad value for 'uid' [ 500.686646][T12917] iso9660: Bad value for 'uid' [ 501.718957][T12924] loop1: detected capacity change from 0 to 512 [ 501.730148][T12924] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 501.744949][T12923] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2543'. [ 501.936720][T12920] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 502.001409][T12920] xt_ecn: cannot match TCP bits for non-tcp packets [ 502.022694][T12924] EXT4-fs (loop1): 1 truncate cleaned up [ 502.082401][T12924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.101731][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2543'. [ 502.401885][T12923] netlink: 'syz.4.2543': attribute type 10 has an invalid length. [ 502.461519][T12923] team0: Device wg2 is of different type [ 502.646895][T12931] loop6: detected capacity change from 0 to 1024 [ 502.675427][T12931] EXT4-fs: Ignoring removed bh option [ 502.699157][T12931] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.719372][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 502.719385][ T28] audit: type=1400 audit(2000000794.505:2694): avc: denied { write } for pid=12930 comm="syz.6.2545" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 502.914952][T12931] vlan0: entered promiscuous mode [ 503.037650][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.076068][T12938] loop0: detected capacity change from 0 to 128 [ 503.407710][T12952] lo speed is unknown, defaulting to 1000 [ 503.628271][ T28] audit: type=1400 audit(2000000795.415:2695): avc: denied { connect } for pid=12953 comm="syz.0.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 503.909644][T12959] loop0: detected capacity change from 0 to 1024 [ 503.925960][T12959] EXT4-fs: Ignoring removed bh option [ 503.958528][T12959] EXT4-fs (loop0): unsupported descriptor size 171 [ 503.997117][T12945] loop6: detected capacity change from 0 to 1024 [ 504.059648][T12945] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 504.074377][T12945] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 504.086917][T12969] tmpfs: Unknown parameter 'mðol' [ 504.097364][T12945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.110800][T12945] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.303270][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.317799][T12981] loop6: detected capacity change from 0 to 1024 [ 504.324824][T12981] EXT4-fs: Ignoring removed bh option [ 504.350337][T12981] EXT4-fs (loop6): unsupported descriptor size 171 [ 504.400473][T12986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2561'. [ 504.426985][T12986] 9p: Bad value for 'wfdno' [ 504.542048][T12987] loop5: detected capacity change from 0 to 512 [ 504.678755][T12991] tmpfs: Unknown parameter 'mðol' [ 504.906358][T12997] ref_ctr increment failed for inode: 0x5cd offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104a06900 [ 504.911711][T13000] netlink: 'syz.1.2566': attribute type 10 has an invalid length. [ 504.960764][T12996] uprobe: syz.0.2565:12996 failed to unregister, leaking uprobe [ 505.355684][T13013] loop0: detected capacity change from 0 to 512 [ 505.809399][T13022] loop1: detected capacity change from 0 to 128 [ 505.841232][T13022] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 505.863279][T13022] ext4 filesystem being mounted at /560/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 505.913695][ T28] audit: type=1400 audit(2000000797.705:2696): avc: denied { write } for pid=13021 comm="syz.1.2573" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 505.945139][ T28] audit: type=1400 audit(2000000797.725:2697): avc: denied { write } for pid=13021 comm="syz.1.2573" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 505.967520][ T28] audit: type=1400 audit(2000000797.725:2698): avc: denied { write } for pid=13021 comm="syz.1.2573" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 505.989966][ T28] audit: type=1400 audit(2000000797.725:2699): avc: denied { write } for pid=13021 comm="syz.1.2573" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 506.027939][ T28] audit: type=1400 audit(2000000797.815:2700): avc: denied { write } for pid=13021 comm="syz.1.2573" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 506.094653][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 506.100513][T13031] loop5: detected capacity change from 0 to 1024 [ 506.115529][T13031] EXT4-fs: Ignoring removed bh option [ 506.128220][T13031] EXT4-fs (loop5): unsupported descriptor size 171 [ 506.214225][T13036] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2575'. [ 506.260687][T13036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.285774][T13036] bond_slave_0: left promiscuous mode [ 506.295009][T13036] bond0 (unregistering): Released all slaves [ 506.409639][T13038] tmpfs: Unknown parameter 'mðol' [ 506.533087][T13042] loop1: detected capacity change from 0 to 1024 [ 506.580530][T13042] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 506.737206][T13042] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2579: Invalid block bitmap block 0 in block_group 0 [ 506.794030][ T28] audit: type=1400 audit(2000000798.565:2701): avc: denied { read } for pid=13047 comm="syz.6.2580" name="file0" dev="tmpfs" ino=1845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 506.839734][T13042] loop1: lost filesystem error report for type 5 error -117 [ 506.841054][T13042] Quota error (device loop1): write_blk: dquota write failed [ 506.848886][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 506.848933][ C0] EXT4-fs (loop1): initial error at time 2000000798: ext4_read_block_bitmap_nowait:483 [ 506.849034][ C0] EXT4-fs (loop1): last error at time 2000000798: ext4_read_block_bitmap_nowait:483 [ 507.059802][T13048] loop6: detected capacity change from 0 to 512 [ 507.099597][ T28] audit: type=1400 audit(2000000798.885:2702): avc: denied { mounton } for pid=13047 comm="syz.6.2580" path="/332/file0" dev="tmpfs" ino=1845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 507.159037][T13042] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.2579: Failed to acquire dquot type 0 [ 507.259183][T13042] loop1: lost filesystem error report for type 5 error -117 [ 507.264594][T13042] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.2579: Freeing blocks not in datazone - block = 0, count = 4096 [ 507.413664][T13042] loop1: lost filesystem error report for type 5 error -117 [ 507.423360][T13042] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.2579: Invalid inode bitmap blk 0 in block_group 0 [ 507.459353][ T49] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0 [ 507.549472][ T49] loop1: lost filesystem error report for type 5 error -117 [ 507.564904][T13042] loop1: lost filesystem error report for type 5 error -117 [ 507.596425][T13042] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 507.691463][T13042] loop1: lost filesystem error report for type 5 error -117 [ 507.697342][T13042] EXT4-fs (loop1): 1 orphan inode deleted [ 507.774601][T13042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.921490][T13066] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2582'. [ 507.961136][T13068] loop6: detected capacity change from 0 to 512 [ 507.978141][T13068] EXT4-fs: Ignoring removed orlov option [ 507.987209][T13068] EXT4-fs: Ignoring removed mblk_io_submit option [ 507.999738][T13068] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.2585: corrupted in-inode xattr: e_value size too large [ 508.013871][T13068] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 508.014523][T13068] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2585: couldn't read orphan inode 15 (err -117) [ 508.023687][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 508.023707][ C1] EXT4-fs (loop6): initial error at time 2000000799: ext4_iget_extra_inode:5180: inode 15 [ 508.023737][ C1] EXT4-fs (loop6): last error at time 2000000799: ext4_iget_extra_inode:5180: inode 15 [ 508.038736][T13065] netlink: 'syz.5.2596': attribute type 10 has an invalid length. [ 508.042066][T13068] loop6: lost filesystem error report for type 5 error -117 [ 508.087124][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.104510][T13068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.147374][T13071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.162338][T13071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.274094][T13071] loop1: detected capacity change from 0 to 764 [ 508.277061][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.295609][T13071] iso9660: Unknown parameter '' [ 508.406444][T13086] loop6: detected capacity change from 0 to 1024 [ 508.423157][T13086] EXT4-fs: Ignoring removed bh option [ 508.438235][T13086] EXT4-fs (loop6): unsupported descriptor size 171 [ 508.560589][T13089] tmpfs: Unknown parameter 'mðol' [ 509.038833][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 509.038944][ T28] audit: type=1400 audit(2000000800.825:2703): avc: denied { unmount } for pid=7150 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 509.067367][T13101] loop1: detected capacity change from 0 to 512 [ 509.097183][T13101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.121871][T13101] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.145625][ T28] audit: type=1400 audit(2000000800.935:2704): avc: denied { write } for pid=13100 comm="syz.1.2597" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 509.209816][T13111] loop0: detected capacity change from 0 to 512 [ 509.223396][T13111] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 509.249327][T13111] EXT4-fs (loop0): 1 truncate cleaned up [ 509.268695][T13111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.298657][T13114] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 509.316993][T13114] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 509.360055][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.417629][ T3932] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 509.434574][T13116] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2601'. [ 509.468904][T13116] netlink: 'syz.1.2601': attribute type 10 has an invalid length. [ 509.546568][T13124] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 509.611110][T13124] EXT4-fs (loop1): 1 truncate cleaned up [ 509.634316][T13124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.818193][T13133] netlink: 'syz.6.2608': attribute type 10 has an invalid length. [ 509.905065][T13139] EXT4-fs: Ignoring removed bh option [ 509.915554][T13139] EXT4-fs (loop5): unsupported descriptor size 171 [ 510.037817][T13147] tmpfs: Unknown parameter 'mðol' [ 510.073570][T13143] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2611'. [ 510.169285][T13158] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2614'. [ 510.179471][T13158] netlink: 'syz.4.2614': attribute type 10 has an invalid length. [ 510.190736][T13158] team0: Device wg2 is of different type [ 510.612801][ T7150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.655485][T13169] set_capacity_and_notify: 3 callbacks suppressed [ 510.655500][T13169] loop0: detected capacity change from 0 to 1024 [ 510.670263][T13169] EXT4-fs: Ignoring removed bh option [ 510.687764][T13169] EXT4-fs (loop0): unsupported descriptor size 171 [ 510.847446][T13182] loop5: detected capacity change from 0 to 1024 [ 510.856526][T13182] EXT4-fs: Ignoring removed bh option [ 510.875390][T13182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.895180][T13185] tmpfs: Unknown parameter 'mðol' [ 510.897513][ T28] audit: type=1400 audit(2000000802.685:2705): avc: denied { write } for pid=13179 comm="syz.5.2622" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 510.911552][T13182] vlan0: entered promiscuous mode [ 510.952302][ T6511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.031126][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.048504][T13195] loop5: detected capacity change from 0 to 512 [ 511.079127][T13195] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 511.107182][T13195] EXT4-fs (loop5): 1 truncate cleaned up [ 511.117301][T13195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.174949][T13208] loop1: detected capacity change from 0 to 1024 [ 511.196423][T13208] EXT4-fs: Ignoring removed bh option [ 511.233180][T13208] EXT4-fs (loop1): unsupported descriptor size 171 [ 511.429343][T13214] lo speed is unknown, defaulting to 1000 [ 511.640213][T13215] tmpfs: Unknown parameter 'mðol' [ 511.751030][T13217] macsec0: entered promiscuous mode [ 511.824614][T13217] macsec0: left promiscuous mode [ 511.894337][T13230] loop6: detected capacity change from 0 to 512 [ 511.912187][T13230] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 511.933617][T13230] EXT4-fs (loop6): 1 truncate cleaned up [ 511.939914][T13230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.024215][T13233] loop1: detected capacity change from 0 to 1024 [ 512.050157][T13233] EXT4-fs: Ignoring removed bh option [ 512.075930][T13233] EXT4-fs (loop1): unsupported descriptor size 171 [ 512.203311][T13241] tmpfs: Unknown parameter 'mðol' [ 512.443744][ T6511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.006669][T13261] loop0: detected capacity change from 0 to 512 [ 513.017241][ T28] audit: type=1400 audit(2000000804.695:2706): avc: denied { getopt } for pid=13259 comm="syz.1.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 513.138116][T13261] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.2642: corrupted inode contents [ 513.150167][T13261] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 513.152450][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 513.168533][ C0] EXT4-fs (loop0): initial error at time 2000000804: ext4_do_update_inode:5742: inode 16 [ 513.178373][ C0] EXT4-fs (loop0): last error at time 2000000804: ext4_do_update_inode:5742: inode 16 [ 513.196469][T13261] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #16: comm syz.0.2642: mark_inode_dirty error [ 513.207883][T13261] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 513.221920][T13261] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.2642: corrupted inode contents [ 513.243158][T13261] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 513.251935][T13261] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.2642: mark_inode_dirty error [ 513.272352][T13261] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 513.277770][T13261] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.2642: corrupted inode contents [ 513.298899][T13261] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 513.307674][T13261] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 513.325419][T13261] loop0: lost filesystem error report for type 5 error -117 [ 513.327943][T13261] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.2642: corrupted inode contents [ 513.347253][T13261] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 513.347725][T13261] EXT4-fs error (device loop0): ext4_truncate:4691: inode #16: comm syz.0.2642: mark_inode_dirty error [ 513.368163][T13261] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 513.368721][T13261] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 513.386974][T13261] loop0: lost filesystem error report for type 5 error -117 [ 513.388255][T13261] EXT4-fs (loop0): 1 truncate cleaned up [ 513.402992][T13261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.415700][T13261] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.455088][ T5364] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 513.492208][ T5364] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:14: Failed to release dquot type 1 [ 513.859273][T13266] pimreg: entered allmulticast mode [ 513.867036][T13270] loop5: detected capacity change from 0 to 1024 [ 513.885233][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.894739][T13272] veth1_to_bond: entered allmulticast mode [ 513.903179][T13270] EXT4-fs: Ignoring removed bh option [ 513.921428][T13270] EXT4-fs (loop5): unsupported descriptor size 171 [ 514.027092][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2649'. [ 514.055151][T13280] tmpfs: Unknown parameter 'mðol' [ 514.067097][T13266] pimreg: left allmulticast mode [ 514.114142][T13272] 9pnet_fd: Insufficient options for proto=fd [ 514.144601][T13279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2650'. [ 514.166971][T13265] veth1_to_bond: left allmulticast mode [ 514.298447][T13292] loop6: detected capacity change from 0 to 512 [ 514.325055][T13292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.339663][T13292] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.353566][ T28] audit: type=1400 audit(2000000806.145:2707): avc: denied { write } for pid=13291 comm="syz.6.2653" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 514.416045][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.426115][ T7150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.495733][T13302] loop0: detected capacity change from 0 to 1024 [ 514.504166][T13302] EXT4-fs: Ignoring removed bh option [ 514.516543][T13302] EXT4-fs (loop0): unsupported descriptor size 171 [ 514.643468][T13306] tmpfs: Unknown parameter 'mðol' [ 514.772250][T13307] EXT4-fs: Ignoring removed mblk_io_submit option [ 514.801178][T13307] EXT4-fs (loop6): orphan cleanup on readonly fs [ 514.808730][T13307] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 514.823385][T13307] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2654: attempt to clear invalid blocks 2 len 1 [ 514.840964][T13307] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 514.842459][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 514.858007][ C0] EXT4-fs (loop6): initial error at time 2000000806: ext4_clear_blocks:876: inode 13 [ 514.867541][ C0] EXT4-fs (loop6): last error at time 2000000806: ext4_clear_blocks:876: inode 13 [ 514.889152][T13307] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 514.906787][T13307] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2654: invalid indirect mapped block 1819239214 (level 0) [ 514.921739][T13307] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 514.930371][T13307] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2654: invalid indirect mapped block 1819239214 (level 1) [ 514.955149][T13307] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 514.959189][T13307] EXT4-fs (loop6): 1 truncate cleaned up [ 514.979013][T13307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 515.216613][T13315] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2657'. [ 515.610224][T13319] syzkaller0: entered promiscuous mode [ 515.699977][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2661'. [ 515.742101][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2662'. [ 515.885013][T13339] set_capacity_and_notify: 1 callbacks suppressed [ 515.885030][T13339] loop1: detected capacity change from 0 to 512 [ 515.948134][T13339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.998213][T13339] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.034858][ T28] audit: type=1400 audit(2000000807.825:2708): avc: denied { write } for pid=13338 comm="syz.1.2665" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 516.095809][T13337] loop5: detected capacity change from 0 to 512 [ 516.104542][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.203341][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.248966][T13348] loop0: detected capacity change from 0 to 1024 [ 516.272251][T13352] loop1: detected capacity change from 0 to 1024 [ 516.276093][T13353] loop5: detected capacity change from 0 to 1024 [ 516.296513][T13353] EXT4-fs: Ignoring removed bh option [ 516.307839][T13353] EXT4-fs (loop5): unsupported descriptor size 171 [ 516.328969][T13348] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 516.341879][T13352] EXT4-fs: Ignoring removed bh option [ 516.353712][T13352] EXT4-fs (loop1): unsupported descriptor size 171 [ 516.392307][T13348] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2668: Invalid block bitmap block 0 in block_group 0 [ 516.410853][T13348] loop0: lost filesystem error report for type 5 error -117 [ 516.411769][T13348] Quota error (device loop0): write_blk: dquota write failed [ 516.419328][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 516.419439][ C1] EXT4-fs (loop0): initial error at time 2000000808: ext4_read_block_bitmap_nowait:483 [ 516.419539][ C1] EXT4-fs (loop0): last error at time 2000000808: ext4_read_block_bitmap_nowait:483 [ 516.453803][T13348] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 516.464876][T13348] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.2668: Failed to acquire dquot type 0 [ 516.477802][T13348] loop0: lost filesystem error report for type 5 error -117 [ 516.479520][T13348] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.2668: Freeing blocks not in datazone - block = 0, count = 4096 [ 516.506654][T13360] tmpfs: Unknown parameter 'mðol' [ 516.580644][T13361] loop6: detected capacity change from 0 to 512 [ 516.604613][T13348] loop0: lost filesystem error report for type 5 error -117 [ 516.615723][T13362] tmpfs: Unknown parameter 'mðol' [ 516.651736][T13348] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.2668: Invalid inode bitmap blk 0 in block_group 0 [ 516.679271][T13348] loop0: lost filesystem error report for type 5 error -117 [ 516.680491][T13348] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 516.698552][T13348] loop0: lost filesystem error report for type 5 error -117 [ 516.699780][T13348] EXT4-fs (loop0): 1 orphan inode deleted [ 516.720323][T13348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.870847][ T49] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 516.880167][ T49] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0 [ 516.892777][ T7150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.097183][ T28] audit: type=1400 audit(2000000808.885:2709): avc: denied { ioctl } for pid=13378 comm="syz.5.2675" path="socket:[40586]" dev="sockfs" ino=40586 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 517.205706][T13377] macvlan3: entered promiscuous mode [ 517.261612][T13377] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2674'. [ 517.312228][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'. [ 517.319967][T13392] loop6: detected capacity change from 0 to 512 [ 517.331435][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2679'. [ 517.378599][T13392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.423577][T13392] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.466856][ T28] audit: type=1400 audit(2000000809.255:2710): avc: denied { write } for pid=13390 comm="syz.6.2680" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 517.530959][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.706297][T13399] loop5: detected capacity change from 0 to 1024 [ 517.741846][T13399] EXT4-fs: Ignoring removed nomblk_io_submit option [ 517.793793][T13399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 517.834300][T13399] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.900979][T13399] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 517.900979][T13399] program syz.5.2682 not setting count and/or reply_len properly [ 517.949612][ T6511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 518.144129][T13412] loop5: detected capacity change from 0 to 1024 [ 518.160113][T13412] EXT4-fs: Ignoring removed bh option [ 518.189526][T13412] EXT4-fs (loop5): unsupported descriptor size 171 [ 518.486541][T13375] loop0: detected capacity change from 0 to 512 [ 518.547520][T13375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.564521][T13375] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.633943][T13422] tmpfs: Unknown parameter 'mðol' [ 518.684532][ T7150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.783604][T13430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2689'. [ 518.812881][T13434] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2691'. [ 518.830987][T13434] netlink: 'syz.6.2691': attribute type 10 has an invalid length. [ 518.844453][T13434] team0: Device wg2 is of different type [ 518.855290][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2692'. [ 518.967892][T13439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.010379][T13439] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.048424][ T28] audit: type=1400 audit(2000000810.825:2711): avc: denied { write } for pid=13438 comm="syz.6.2693" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 519.083496][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.138028][T13460] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 519.156901][T13462] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 519.305870][T13460] EXT4-fs (loop5): 1 truncate cleaned up [ 519.322749][T13460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.316689][T13471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.334005][T13471] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.648056][ T28] audit: type=1400 audit(2000000812.415:2712): avc: denied { write } for pid=13470 comm="syz.0.2703" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 520.898998][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2704'. [ 520.948400][T13476] netlink: 'syz.6.2704': attribute type 10 has an invalid length. [ 520.962133][ T7150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.990657][T13476] team0: Device wg2 is of different type [ 521.204761][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'. [ 521.229503][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2706'. [ 521.461046][T13491] set_capacity_and_notify: 4 callbacks suppressed [ 521.461131][T13491] loop6: detected capacity change from 0 to 512 [ 521.536381][T13491] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.572619][T13491] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.684531][ T28] audit: type=1400 audit(2000000813.475:2713): avc: denied { write } for pid=13490 comm="syz.6.2708" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 521.748110][T13499] pimreg: entered allmulticast mode [ 521.772789][ T6511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.783719][T13499] veth1_to_bond: entered allmulticast mode [ 521.811906][T13499] pimreg: left allmulticast mode [ 521.829094][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.868300][T13505] loop5: detected capacity change from 0 to 1024 [ 521.882944][T13505] EXT4-fs: Ignoring removed bh option [ 521.905288][T13505] EXT4-fs (loop5): unsupported descriptor size 171 [ 521.913379][T13500] 9pnet_fd: Insufficient options for proto=fd [ 521.956492][T13498] veth1_to_bond: left allmulticast mode [ 521.999262][T13516] netlink: 'syz.0.2715': attribute type 3 has an invalid length. [ 522.012402][T13510] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2713'. [ 522.031245][T13520] tmpfs: Unknown parameter 'mðol' [ 522.034082][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2716'. [ 522.054363][T13518] netlink: 'syz.0.2716': attribute type 10 has an invalid length. [ 522.086505][T13518] ================================================================== [ 522.094785][T13518] BUG: KCSAN: data-race in l3mdev_master_ifindex_rcu / team_add_slave [ 522.103110][T13518] [ 522.105435][T13518] read to 0xffff88811b134000 of 8 bytes by task 3932 on cpu 0: [ 522.113056][T13518] l3mdev_master_ifindex_rcu+0x1c/0xb0 [ 522.118513][T13518] ipv6_dev_get_saddr+0x193/0x470 [ 522.123643][T13518] ip6_dst_lookup_tail+0x3d8/0xa90 [ 522.128740][T13518] ip6_dst_lookup_flow+0x74/0xf0 [ 522.133669][T13518] send6+0x29f/0x490 [ 522.137606][T13518] wg_socket_send_skb_to_peer+0xc0/0x130 [ 522.143229][T13518] wg_socket_send_buffer_to_peer+0xf1/0x120 [ 522.149111][T13518] wg_packet_handshake_send_worker+0x10d/0x160 [ 522.155287][T13518] process_scheduled_works+0x4d4/0x9a0 [ 522.160763][T13518] worker_thread+0x569/0x750 [ 522.165344][T13518] kthread+0x221/0x270 [ 522.169403][T13518] ret_from_fork+0x146/0x330 [ 522.174009][T13518] ret_from_fork_asm+0x1a/0x30 [ 522.178784][T13518] [ 522.181095][T13518] read-write to 0xffff88811b134000 of 8 bytes by task 13518 on cpu 1: [ 522.189235][T13518] team_add_slave+0x6df/0x1810 [ 522.194004][T13518] do_set_master+0x37b/0x450 [ 522.198663][T13518] do_setlink+0x976/0x2860 [ 522.203065][T13518] rtnl_newlink+0x1086/0x1400 [ 522.207742][T13518] rtnetlink_rcv_msg+0x64b/0x720 [ 522.212741][T13518] netlink_rcv_skb+0x11e/0x220 [ 522.217564][T13518] rtnetlink_rcv+0x1c/0x30 [ 522.221975][T13518] netlink_unicast+0x5a7/0x680 [ 522.226785][T13518] netlink_sendmsg+0x5be/0x6f0 [ 522.231571][T13518] ____sys_sendmsg+0x532/0x580 [ 522.236410][T13518] ___sys_sendmsg+0x195/0x1e0 [ 522.241188][T13518] __x64_sys_sendmsg+0xd4/0x160 [ 522.246045][T13518] x64_sys_call+0x194c/0x3020 [ 522.250805][T13518] do_syscall_64+0x136/0x3c0 [ 522.255482][T13518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.261514][T13518] [ 522.263825][T13518] Reported by Kernel Concurrency Sanitizer on: [ 522.269988][T13518] CPU: 1 UID: 0 PID: 13518 Comm: syz.0.2716 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 522.280926][T13518] Tainted: [W]=WARN [ 522.284718][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 522.294765][T13518] ================================================================== [ 522.305976][T13518] team0: Device wg2 is of different type [ 522.341292][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2717'.