last executing test programs: 23.718852664s ago: executing program 1 (id=252): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x68}}, 0x24040800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000325000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@empty, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x40000000809ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x181000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'vxcan1\x00', 0x400}) 15.789347975s ago: executing program 4 (id=261): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x1208002, &(0x7f0000000340)={[{@lazytime}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@mblk_io_submit}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) poll(&(0x7f0000000380), 0x0, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 13.210128188s ago: executing program 4 (id=266): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.567262048s ago: executing program 1 (id=267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000301012bbd7000fedbdf2507000007d618cb2149ea6a0629513a0c7471e6936fab77b62e1c6dc178bca1ea6f0792f728dedb439752f7c7f2d2e05a2086d6055521e46dd8b6e309458106de10b1c396dcd8af5c26de2494409575267bb44aff581913"], 0x14}, 0x1, 0x0, 0x0, 0x2000c0d1}, 0x80) recvmmsg(r0, &(0x7f0000003740)=[{{&(0x7f0000000380)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000980)=""/57, 0x39}], 0x1, &(0x7f0000000a00)=""/33, 0x21}, 0x5}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/236, 0xec}], 0x1, &(0x7f0000001180)=""/4096, 0x1000}, 0x5a96f36b}, {{&(0x7f0000000b80)=@phonet, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/111, 0x6f}, {&(0x7f0000000c80)=""/77, 0x4d}], 0x2, &(0x7f0000000d80)=""/189, 0xbd}, 0x1}, {{&(0x7f0000000e40)=@ieee802154, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)=""/225, 0xe1}], 0x1, &(0x7f0000002180)=""/195, 0xc3}, 0x9}, {{0x0, 0x0, &(0x7f0000001000), 0x0, &(0x7f0000002280)=""/115, 0x73}, 0xb437}, {{&(0x7f0000002300)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002380)=""/151, 0x97}, {&(0x7f0000001040)=""/44, 0x2c}, {&(0x7f0000002440)=""/199, 0xc7}, {&(0x7f0000002540)=""/12, 0xc}, {&(0x7f0000002580)=""/201, 0xc9}, {&(0x7f0000002680)=""/53, 0x35}, {&(0x7f00000026c0)=""/207, 0xcf}, {&(0x7f00000027c0)=""/68, 0x44}, {&(0x7f0000002840)}], 0x9, &(0x7f00000001c0)=""/46, 0x2e}, 0x8}, {{&(0x7f0000002980)=@alg, 0x80, &(0x7f0000003140)=[{&(0x7f0000002a00)=""/207, 0xcf}, {&(0x7f0000002b00)=""/185, 0xb9}, {0x0}, {&(0x7f0000002c00)=""/234, 0xea}, {&(0x7f0000002d00)=""/188, 0xbc}, {&(0x7f0000002dc0)=""/154, 0x9a}, {&(0x7f0000002e80)=""/226, 0xe2}, {&(0x7f0000002f80)=""/97, 0x61}, {&(0x7f0000003000)=""/115, 0x73}, {&(0x7f0000003080)=""/178, 0xb2}], 0xa, &(0x7f0000003200)=""/185, 0xb9}, 0x8969}, {{&(0x7f00000032c0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003340)=""/179, 0xb3}, {&(0x7f0000003400)=""/2, 0x2}], 0x2, &(0x7f0000003480)}, 0x9}, {{&(0x7f00000034c0)=@qipcrtr, 0x80, &(0x7f0000003600)=[{&(0x7f0000003540)=""/184, 0xb8}], 0x1, &(0x7f0000003640)=""/246, 0xf6}, 0x7}], 0x9, 0x120, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x40000009, 0x4) connect(r1, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x1, @private=0xa010101}}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x2, 0x100}, 0x204, 0x687a, 0x43a1bd78, 0xc, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000c000000180001801400020073797a5f74756e0000000000000000001c00038004000100140003800c000180050002"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8}, 0x110000, 0x10000, 0x0, 0x7, 0xc, 0x20008, 0xb, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@v1={0x2, "468d9b4cf9ccf8a20fd6d27631bd638bc2077f"}, 0x14, 0x3) r8 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000340)=0xa) socket$nl_route(0x10, 0x3, 0x0) 12.470846959s ago: executing program 3 (id=269): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = dup(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='+memory +pids -bmkio +cpuset -net -net_cls +cpuset +blkio -blkio -rlimit '], 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) fdatasync(r4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x420042, 0x80) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = dup3(r4, r2, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) acct(&(0x7f00000000c0)='./file1\x00') close(0x3) 11.565743897s ago: executing program 2 (id=271): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b00100000000000000000004499791bd0a14000000fb030100"/40], 0x28}, 0x1, 0x0, 0x0, 0x200000e5}, 0x400c801) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) syz_clone(0x900c11, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r5, 0x0}]) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800, 0x40}, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000300)={0x1, 0x2, 0x0, 'queue1\x00'}) socket$kcm(0x2, 0x5, 0x84) 10.703340335s ago: executing program 4 (id=272): unshare(0x60000600) sync() sync() sync() sync() r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140001002abd7000fddbdf2502013208000000000000003d098e56a764b3de78246da77b60d98a654d6c5fd15cd9481cf953154802001e87439381e74401a0e300000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x8800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000002030104000000000000000000000000080001000100000063c4d0a7e8f34fcb8d0e6b341b50301f00eaeeeeb1ac5fba408712a1c89d200ae3b89e4fa62d966c6130b2c56a4f1358884aa60733deb5ea0cd57aaf1533ce64c83380bcb049a45f4b1be080bd5ba99d2b22b0e08565fb1fd4448e983a85eae99b4a75b14e34b20d89eb7065f53a096790f0bc6e47e1e08df01f377225ad54fb91a27b47eadbe59f2a0e3548fe9415ba71abbdc943aa918a872606b1b1"], 0x1c}}, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000180)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x7}, {0x20, 0x2}}, 0x24, 0x2) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/2, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x48}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0xd24) sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 10.380890921s ago: executing program 2 (id=273): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r3, 0x46f3, 0x0, 0x1, 0x0, 0xfe17) set_mempolicy(0x6005, 0x0, 0x4) r8 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x51, 0x0, 0x0, 0x0, 0x6e5, 0x8}, 0x0, 0xffffffffffffffff, r10, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x9}, 0x100e64, 0xc77}, 0x0, 0xffffffffffffffff, r10, 0x0) readv(r10, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4092, 0xffc}], 0x1) open_by_handle_at(r9, &(0x7f0000000080)=ANY=[@ANYRES8=r9], 0x755c00) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001380)=@deltaction={0x1f4, 0x31, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x87}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff8000}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc3}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 10.369965438s ago: executing program 1 (id=274): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000180)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb301fffd) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000700)={{0xffffffffffffffff, &(0x7f0000000040)=':\x00', 0x8000, &(0x7f0000000100)={@_ha_fsid={[0x8, 0x85a]}, {0xffff, 0x9, 0x4}}, 0x4, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000002c0)=0x7ff}, 0x3, &(0x7f0000000680)=[{0x1, 0x95, &(0x7f0000000300)='\x00', &(0x7f0000000340), 0x0, 0x1a}, {0x2, 0x5, &(0x7f0000000380)='q,\'-[[\x00', &(0x7f00000003c0)="d4d9ebdf0cff638c9034b85742bd38aeac26e79e8ef64068da87587a03a0ae72c8bea11e1a40126396b564337b7a34ef5a56ad95b6b8382f779c3f6f309043b81f9307028f1aa2786438383360c4eeb571966ffe9f925f02a282ea0d86c8187f5e9b6d57262853955c5cf62b93bb9de3c586eece98ec9281ce18997e4bddbd85ab4921a966aa4270c2ebef65ff5ce447e7abc1b8de3a8878ca475fdac87eaddab3917ff7c6dd863033103be0c7e57d6ef606f71c58685ba910f70969ce59218ce37f02c5fd2a508fecbf23cfeef54cf0e388ef65b114a685ebda6b6c7a7494eaef9c07", 0xe3, 0x12}, {0x2, 0x1, &(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0, 0x20}]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000b00)={'sit0\x00', 0x0, 0x7800, 0x10, 0xffe00000, 0x800, {{0x3a, 0x4, 0x3, 0x5, 0xe8, 0x68, 0x0, 0x4, 0x2f, 0x0, @empty, @remote, {[@noop, @timestamp_addr={0x44, 0x24, 0x31, 0x1, 0x8, [{@multicast2, 0x4}, {@empty, 0xf34}, {@local, 0x7ff}, {@empty, 0x10001}]}, @timestamp_addr={0x44, 0x24, 0x88, 0x1, 0x0, [{@loopback, 0x3}, {@empty, 0xbf38}, {@rand_addr=0x64010100, 0xa7}, {@empty, 0x6}]}, @timestamp_prespec={0x44, 0xc, 0x85, 0x3, 0x7, [{@remote, 0x3}]}, @timestamp={0x44, 0x18, 0xbb, 0x0, 0x8, [0x39, 0x6, 0xf, 0x3, 0xffff3d70]}, @timestamp_addr={0x44, 0x1c, 0x71, 0x1, 0x8, [{@loopback}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x7}, {@remote, 0x4}]}, @cipso={0x86, 0x38, 0x1, [{0x6, 0x11, "bb51fe0eb6b527e497822d835bf3c5"}, {0x5, 0x8, "6ed2c4161fd6"}, {0x1, 0xd, "286a503f651d1e2e36401d"}, {0x0, 0x8, "4acbe15bdca1"}, {0x5, 0x4, "9f32"}]}, @end, @lsrr={0x83, 0xf, 0x78, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x9, 0xfff3}, {0xe, 0x1}, {0x19}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x20048000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r8 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) timer_create(0x7, &(0x7f0000000800)={0x0, 0xc, 0x2, @tid=r8}, &(0x7f0000000840)) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40505331, &(0x7f0000000240)={{0xa, 0x5}, {0x9, 0x1}, 0x4, 0x3, 0x3}) unshare(0x6a040000) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x204980, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r10, 0x94eb2000) read$ptp(0xffffffffffffffff, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x815}, 0x408c4) sendto$inet_nvme_icreq_pdu(r3, &(0x7f0000000c40)={{0x0, 0x0, 0x80, 0xc9}}, 0x80, 0x0, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf25020000000800080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) 8.777431119s ago: executing program 3 (id=275): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0x0, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_MTU={0x8, 0x4, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') r8 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r8, &(0x7f0000000040), 0x1c) read$char_usb(r7, &(0x7f0000000300)=""/214, 0xd6) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000010200), r9) write(r6, &(0x7f0000004200)='t', 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x4) sendfile(r6, r5, 0x0, 0x3ffff) recvmsg$unix(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r12) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r13, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003000300"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 8.596811133s ago: executing program 0 (id=276): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_pidfd_open(0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x15, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x4000) ioctl$TCFLSH(0xffffffffffffffff, 0x40085500, 0x100000) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 8.246699073s ago: executing program 4 (id=277): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x68}}, 0x24040800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000325000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x181000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'vxcan1\x00', 0x400}) 7.997601402s ago: executing program 0 (id=278): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b00100000000000000000004499791bd0a14000000fb030100"/40], 0x28}, 0x1, 0x0, 0x0, 0x200000e5}, 0x400c801) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) syz_clone(0x900c11, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r6, 0x0}]) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x14, r7, 0xb1d, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48850) socket$rds(0x15, 0x5, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800, 0x40}, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000300)={0x1, 0x2, 0x0, 'queue1\x00'}) socket$kcm(0x2, 0x5, 0x84) 7.43255688s ago: executing program 3 (id=279): mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xdc560000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r4, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x4, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) pwritev2(r3, &(0x7f0000000940), 0x0, 0x7fff, 0xc92, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000001280)={'#! ', '', [], 0xa, "02ce00b26cd16126940cfac2"}, 0x10) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000001c0)=0xe) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x23, 0x82, 0x0, 0x10042, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x9302, 0x0, 0x3, 0x0, 0x80000000b4c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000006}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 7.431470659s ago: executing program 2 (id=289): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000700)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4084) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = syz_io_uring_setup(0x3d, &(0x7f0000000580)={0x0, 0xaa9b, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440), 0x1) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x7, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x150, 0x1170, 0x1170, 0x150, 0x1170, 0x150, 0x1398, 0x1398, 0x218, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0xef4, 0x0, 0x4, 0x4}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'macvlan1\x00', {0xff}}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xfffffffffffffed2) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a3000000000140000001100"], 0x118}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 7.221818727s ago: executing program 1 (id=280): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x95f3, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) ftruncate(r3, 0x400000) finit_module(r3, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='auxv\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x11, 0x2, 0x0, 0x7f, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xc}, 0xe887, 0xffff, 0x8, 0x1, 0x80d, 0x2020004, 0x400b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x3, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r6, @ANYRESOCT=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r10, 0x6, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x9}) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) 7.210537325s ago: executing program 4 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) madvise(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x13) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000084}, 0x54) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45000000", 0xd7}], 0x1}, 0x40824) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x2}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000020000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101a42, 0xa3) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x140, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x20000000008, 0xfffffffffffffffd}, {0x0, 0x1, 0xcc}, {0xf6}, 0x70bd2c, 0x0, 0xa, 0x1, 0x9}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x60, "6373d3"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000005c0)) r9 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000080)={{{@in=@rand_addr=0x64010103, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e24, 0x4, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0x8001, 0xffffffffffff6b83}, {0x0, 0x1, 0x0, 0x1c0d}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in=@rand_addr=0x64010102, 0x0, 0x3, 0x0, 0x3}}, 0xe8) 6.23786655s ago: executing program 0 (id=282): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x8, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x3, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x2, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x7, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x3, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x6, 0x10000, 0x4, 0xffff, 0x2, 0x800089, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0x6, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x20000, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x5e5, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x5, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x104, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0xc, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0xfffffffe, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x6, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0x6, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0x2006}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000038000900000000000021000004000000040000800c000380"], 0x24}}, 0x0) futex(&(0x7f00000000c0)=0x1, 0x0, 0x1, &(0x7f00000001c0), &(0x7f00000002c0)=0x8, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) socket$inet_sctp(0x2, 0x5, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newrule={0x28, 0x20, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x3, 0x21}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x4004014) 2.058109082s ago: executing program 0 (id=283): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2, 0x2}, 0x6) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0xfffff7fd}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r10, 0x0, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r9, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x800, &(0x7f00000007c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e09f54230f243b5ae8c3e4b39741", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001340)={"b2a87744d2f87358d3526d761a3861ee", 0x0, 0x0, {0x2623}, {0x1f, 0x775}, 0xf, [0x8af, 0xffffffff, 0x3, 0x4, 0x0, 0x5644663a, 0x100000001, 0x2d, 0x2, 0x6, 0x6, 0x9, 0xb, 0x6, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001440)={{r0}, r11, 0x14, @inherit={0x50, &(0x7f0000002440)=ANY=[]}, @name="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"}) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x88, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x90, 0x11, 0x148, 0x90, 0x0, 0x148, 0x2a8, 0x2a8, 0x148, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x101, 0x8, 0x64, '\x00', {0x8a}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 2.056084162s ago: executing program 1 (id=284): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sched_cls=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mount$9p_unix(0x0, 0x0, 0x0, 0x12d7498, 0x0) syz_io_uring_setup(0x6167, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000), 0x1, 0x5fd, &(0x7f00000006c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x6fc2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000100)={'\x00', 0x9, 0x80, 0xffffffff, 0x7, 0x8, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r6, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20060400) 2.055003611s ago: executing program 3 (id=285): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYRES32=r0], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x4) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000680)=ANY=[@ANYBLOB="ec0f2d2a3b2eda96823eb8b38a973e991b03674e1bd846afb9ff9bf62bc799c2c14e1abdd6220b4d58370b", @ANYRESOCT=r2, @ANYRES32=r0, @ANYBLOB="381aeae9167a346fee4006c17d063daf9bc32e80765e574b9f39087a92247f160a3699ec92430154094bfc478fefddb03de1e72e10cf8be1a01b6e2c2243d992c99e877f500a6e97ef712283fe146bd2781698a34aa9ac4990632554b9fb6c674d7eaef525f215ed8c9f634c594441cf6f9f1e630bc11042f7a2ce9aa49b60870a3d3da7718e68a296e28ba3dcf5604b12ec2a8e8b74cc6b5d6ab589e37951f20ebfeca98c3720fb12a2de21935f6664165cfa3791ad2e89b57e51968c87fa19c95e3540918c47df5d634fc178d14b9db904cddc297db981", @ANYRESDEC=r3], 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) tkill(r6, 0x7) wait4(r6, 0x0, 0x2, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x80, 0x50) tgkill(r6, r6, 0x14) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r7, &(0x7f00000000c0)=[{0x0}], 0x1, 0x4000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xf, 0x200, &(0x7f0000003c40)="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"}) 2.053889731s ago: executing program 4 (id=286): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = dup(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='+memory +pids -bmkio +cpuset -net -net_cls +cpuset +blkio -blkio -rlimit '], 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) fdatasync(r4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x420042, 0x80) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = dup3(r4, r2, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) acct(&(0x7f00000000c0)='./file1\x00') close(0x3) 2.015910763s ago: executing program 2 (id=287): perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x4620, 0x2, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f00000026c0)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000600091b00b03d030000000000008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200001400000016030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d", @ANYRESDEC=r4, @ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)=0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getdents64(r6, &(0x7f0000001680)=""/4116, 0x1014) fchownat(r8, &(0x7f0000000280)='.\x00', 0x0, 0x0, 0x1000) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @rand_addr, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote, {[@lsrr={0x83, 0x13, 0x2d, [@dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast]}, @rr={0x7, 0x1b, 0x18, [@dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast, @private=0xa010102, @broadcast, @remote]}, @generic={0x94, 0xc, "eca2a47193b826269bba"}]}}}}}}}, 0x0) r9 = syz_io_uring_setup(0x50b, &(0x7f0000000340)={0x0, 0x7b3c, 0x10100, 0x0, 0x4}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x2def, 0x0, 0x0, 0x0, 0x0) 1.692837909s ago: executing program 3 (id=288): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x2d, 0x12000, &(0x7f0000000100), 0x12) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) fspick(0xffffffffffffffff, 0x0, 0xf0961890b4faa8d0) setuid(0xee00) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) set_mempolicy(0x4000, &(0x7f0000000200)=0x7, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x803, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a7c000000060a0104000000000000000002000000500004804c0001800a000100696e6e65700000003c0002800800024000000084080004400000000f0800014000000000180005800e000100696d6d6564696174610000000400028008000340000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xa4}}, 0x0) 1.221917655s ago: executing program 2 (id=290): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x557c96d0fefea758) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r5, 0x25, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r10}, &(0x7f0000000a00), &(0x7f0000000a40)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r10}, 0x0, &(0x7f00000008c0)=r9}, 0x20) r11 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) r13 = openat$cgroup_subtree(r12, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000040)={[{0x2d, 'pids'}]}, 0x6) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r3, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0xf0ff, r5, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x20040000) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140), &(0x7f0000000000)) 1.00227098s ago: executing program 0 (id=291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) socket$kcm(0x10, 0x2, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x89, 0x4, 0x0, @private=0xa010100, @local}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900350200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x4, 0x4, 0x1000, 0x0, r4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a8, &(0x7f0000000500)="$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") r6 = creat(0x0, 0x2) write(r6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000180), &(0x7f00000002c0)=r4}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000480)={{0x0, 0x1, 0x4, 0x1, 0x8}}) 833.674357ms ago: executing program 1 (id=292): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x68}}, 0x24040800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000325000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@empty, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x40000000809ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x181000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'vxcan1\x00', 0x400}) 158.709672ms ago: executing program 0 (id=293): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b00100000000000000000004499791bd0a14000000fb030100"/40], 0x28}, 0x1, 0x0, 0x0, 0x200000e5}, 0x400c801) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) syz_clone(0x900c11, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r6, 0x0}]) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x14, r7, 0xb1d, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48850) socket$rds(0x15, 0x5, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800, 0x40}, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000300)={0x1, 0x2, 0x0, 'queue1\x00'}) socket$kcm(0x2, 0x5, 0x84) 8.424641ms ago: executing program 3 (id=294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r1, &(0x7f0000000000), 0x10) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="0500f3ff92c2000016da39de706f646800580f022896707d7d21b44a00580f02000000003f420f00000000000029ffffff000000", 0x34}]) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x400}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040044}, 0x24040070) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x4}, 0x121a2, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0xa) r6 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r6, 0x0) unshare(0x6a040000) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x4, 0xf7, 0x8, 0x0, 0x0, 0x6, 0x40000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xfffffffffffffdd6, 0x39071b7200000000}, 0x2000, 0xfffffffffffffffa, 0x3, 0x6, 0x800, 0xf, 0xfffd, 0x0, 0x9, 0x0, 0x1000}, 0xffffffffffffffff, 0x13, 0xffffffffffffffff, 0xe) getsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000180), &(0x7f00000001c0)=0x4) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_pidfd_open(r8, 0x0) 0s ago: executing program 2 (id=295): unshare(0x60000600) sync() sync() sync() sync() r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140001002abd7000fddbdf2502013208000000000000003d098e56a764b3de78246da77b60d98a654d6c5fd15cd9481cf953154802001e87439381e74401a0e300000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x8800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000002030104000000000000000000000000080001000100000063c4d0a7e8f34fcb8d0e6b341b50301f00eaeeeeb1ac5fba408712a1c89d200ae3b89e4fa62d966c6130b2c56a4f1358884aa60733deb5ea0cd57aaf1533ce64c83380bcb049a45f4b1be080bd5ba99d2b22b0e08565fb1fd4448e983a85eae99b4a75b14e34b20d89eb7065f53a096790f0bc6e47e1e08df01f377225ad54fb91a27b47eadbe59f2a0e3548fe9415ba71abbdc943aa918a872606b1b1"], 0x1c}}, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000180)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x7}, {0x20, 0x2}}, 0x24, 0x2) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/2, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x48}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0xd24) sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) kernel console output (not intermixed with test programs): ly 0 port 6081 - 0 [ 30.048611][ T3481] loop3: detected capacity change from 0 to 512 [ 30.056573][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.057216][ T3481] EXT4-fs: inline encryption not supported [ 30.065369][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.132216][ T3484] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 30.259510][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.270692][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.321210][ T3481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.347049][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.373373][ T3481] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.386815][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.397951][ T3489] netlink: 'syz.2.3': attribute type 63 has an invalid length. [ 30.420157][ T3489] lo: entered promiscuous mode [ 30.425674][ T3489] lo: entered allmulticast mode [ 30.448247][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.565065][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.575365][ T3481] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 30.592742][ C1] hrtimer: interrupt took 55977 ns [ 30.802890][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.803561][ T3502] bridge_slave_1: left allmulticast mode [ 30.803578][ T3502] bridge_slave_1: left promiscuous mode [ 30.803659][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.816826][ T3502] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 30.925734][ T3508] loop0: detected capacity change from 0 to 512 [ 31.102124][ T3512] xt_hashlimit: size too large, truncated to 1048576 [ 31.149100][ T3493] syz.3.4 (3493) used greatest stack depth: 10320 bytes left [ 31.226838][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.474608][ T3522] loop2: detected capacity change from 0 to 128 [ 31.492506][ T3522] ======================================================= [ 31.492506][ T3522] WARNING: The mand mount option has been deprecated and [ 31.492506][ T3522] and is ignored by this kernel. Remove the mand [ 31.492506][ T3522] option from the mount to silence this warning. [ 31.492506][ T3522] ======================================================= [ 31.566108][ T3523] loop3: detected capacity change from 0 to 512 [ 31.761296][ T3524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9'. [ 32.052112][ T3522] /dev/loop2: Can't open blockdev [ 32.072644][ T3523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.247287][ T3523] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.406303][ T3532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11'. [ 32.490265][ T3533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 32.499976][ T3533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 32.558114][ T3533] geneve2: entered promiscuous mode [ 32.568964][ T3533] geneve2: entered allmulticast mode [ 32.618955][ T3533] Zero length message leads to an empty skb [ 32.858566][ T3533] syz.2.10 (3533) used greatest stack depth: 9864 bytes left [ 32.869132][ T3535] loop4: detected capacity change from 0 to 512 [ 32.905224][ T3535] EXT4-fs: Ignoring removed i_version option [ 32.938832][ T3535] EXT4-fs: Ignoring removed bh option [ 32.960222][ T3523] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8'. [ 33.008123][ T3535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.056124][ T3535] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.087218][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.087279][ T3491] IPVS: starting estimator thread 0... [ 33.106800][ T3523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 33.138394][ T3538] team0 (unregistering): Port device team_slave_0 removed [ 33.304650][ T3542] EXT4-fs (loop3): shut down requested (0) [ 33.324612][ T3540] IPVS: using max 2784 ests per chain, 139200 per kthread [ 34.226023][ T3538] team0 (unregistering): Port device team_slave_1 removed [ 34.354580][ T3511] syz.0.6 (3511) used greatest stack depth: 9832 bytes left [ 34.710079][ T3550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13'. [ 34.823755][ T3552] xt_recent: Unsupported userspace flags (000000b1) [ 34.917204][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.125590][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.160936][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 35.160953][ T28] audit: type=1400 audit(1772761886.975:173): avc: denied { create } for pid=3554 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 35.195080][ T28] audit: type=1400 audit(1772761887.005:174): avc: denied { listen } for pid=3554 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 35.224651][ T3519] syz.3.8 (3519) used greatest stack depth: 9288 bytes left [ 35.597781][ T28] audit: type=1400 audit(1772761887.115:175): avc: denied { write } for pid=3555 comm="syz.4.14" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 36.551411][ T28] audit: type=1400 audit(1772761887.845:176): avc: denied { shutdown } for pid=3561 comm="syz.2.16" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.573743][ T28] audit: type=1400 audit(1772761887.855:177): avc: denied { create } for pid=3561 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 36.610585][ T28] audit: type=1400 audit(1772761887.855:178): avc: denied { sys_admin } for pid=3561 comm="syz.2.16" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 36.657593][ T3556] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.686795][ T28] audit: type=1400 audit(1772761887.855:179): avc: denied { checkpoint_restore } for pid=3561 comm="syz.2.16" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.712760][ T3556] IPv6: sit1: Disabled Multicast RS [ 36.818330][ T28] audit: type=1400 audit(1772761888.365:180): avc: denied { create } for pid=3567 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.930962][ T3576] loop0: detected capacity change from 0 to 512 [ 36.932758][ T28] audit: type=1400 audit(1772761888.365:181): avc: denied { ioctl } for pid=3567 comm="syz.2.17" path="socket:[4822]" dev="sockfs" ino=4822 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.939286][ T3579] batadv_slave_1: entered promiscuous mode [ 37.043270][ T3576] EXT4-fs: Ignoring removed i_version option [ 37.826070][ T28] audit: type=1400 audit(1772761888.465:182): avc: denied { create } for pid=3554 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 37.872431][ T3576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.057894][ T3576] capability: warning: `syz.0.20' uses deprecated v2 capabilities in a way that may be insecure [ 38.380670][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.406975][ T3567] batadv_slave_1: left promiscuous mode [ 38.688186][ T3594] loop3: detected capacity change from 0 to 128 [ 38.719124][ T3591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.745590][ T3594] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.868096][ T3591] loop4: detected capacity change from 0 to 512 [ 38.918366][ T3591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.955579][ T3591] EXT4-fs (loop4): orphan cleanup on readonly fs [ 38.990015][ T3591] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 39.041455][ T3591] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 39.064212][ T3591] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.22: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 39.123323][ T3591] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 39.123586][ T3591] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.22: couldn't read orphan inode 13 (err -117) [ 39.132978][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 39.133001][ C1] EXT4-fs (loop4): last error at time 1772761890: ext4_ext_check_inode:521: inode 13 [ 39.175460][ T3603] loop1: detected capacity change from 0 to 128 [ 39.196317][ T3591] loop4: lost filesystem error report for type 5 error -117 [ 39.200611][ T3591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.221280][ T3603] syz.1.24: attempt to access beyond end of device [ 39.221280][ T3603] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 39.235823][ T3603] syz.1.24: attempt to access beyond end of device [ 39.235823][ T3603] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 39.260645][ T3603] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 39.269370][ T3603] syz.1.24: attempt to access beyond end of device [ 39.269370][ T3603] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 39.283934][ T3603] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 39.293648][ T3591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22'. [ 39.296793][ T3603] syz.1.24: attempt to access beyond end of device [ 39.296793][ T3603] loop1: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 39.316942][ T3603] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 39.336051][ T3603] syz.1.24: attempt to access beyond end of device [ 39.336051][ T3603] loop1: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 39.350624][ T3603] Buffer I/O error on dev loop1, logical block 78, lost async page write [ 39.350813][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.359798][ T3603] syz.1.24: attempt to access beyond end of device [ 39.359798][ T3603] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 39.390119][ T3603] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 39.400640][ T3603] syz.1.24: attempt to access beyond end of device [ 39.400640][ T3603] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 39.436263][ T3607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'. [ 39.456996][ T3603] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 39.502916][ T117] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.638640][ T3602] syz.1.24: attempt to access beyond end of device [ 39.638640][ T3602] loop1: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 39.694938][ T3609] netlink: 'syz.3.26': attribute type 11 has an invalid length. [ 39.723347][ T3609] netlink: 44 bytes leftover after parsing attributes in process `syz.3.26'. [ 39.736160][ T3602] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 39.759153][ T3612] tipc: Started in network mode [ 39.764043][ T3612] tipc: Node identity 5, cluster identity 3 [ 39.775912][ T3602] syz.1.24: attempt to access beyond end of device [ 39.775912][ T3602] loop1: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 39.799870][ T3612] tipc: Node number set to 5 [ 39.805281][ T3602] Buffer I/O error on dev loop1, logical block 78, lost async page write [ 39.813744][ T3602] syz.1.24: attempt to access beyond end of device [ 39.813744][ T3602] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 39.827479][ T3602] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 39.835972][ T3602] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 39.916173][ T3607] netlink: 15 bytes leftover after parsing attributes in process `syz.4.25'. [ 39.963882][ T3616] loop2: detected capacity change from 0 to 512 [ 39.985637][ T3616] EXT4-fs (loop2): Invalid default hash set in the superblock [ 40.132284][ T3630] raw_sendmsg: syz.1.29 forgot to set AF_INET. Fix it! [ 40.138778][ T3616] loop2: detected capacity change from 0 to 512 [ 40.139767][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.414289][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 40.414318][ T28] audit: type=1400 audit(1772761892.225:227): avc: denied { bpf } for pid=3613 comm="syz.3.27" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.614701][ T28] audit: type=1400 audit(1772761892.425:228): avc: denied { create } for pid=3639 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 40.740373][ T28] audit: type=1400 audit(1772761892.425:229): avc: denied { setopt } for pid=3639 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 40.761616][ T3616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.819880][ T3616] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.850157][ T28] audit: type=1400 audit(1772761892.665:230): avc: denied { setopt } for pid=3644 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.887801][ T3566] Process accounting resumed [ 40.891722][ T28] audit: type=1326 audit(1772761892.665:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3615 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7bd27cfce code=0x7ffc0000 [ 40.953681][ T28] audit: type=1326 audit(1772761892.665:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3615 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa7bd2babd7 code=0x7ffc0000 [ 41.022681][ T28] audit: type=1326 audit(1772761892.665:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3615 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7bd27cfce code=0x7ffc0000 [ 41.091922][ T28] audit: type=1326 audit(1772761892.665:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3615 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bd2bc799 code=0x7ffc0000 [ 41.220340][ T28] audit: type=1326 audit(1772761892.665:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3615 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bd2bc799 code=0x7ffc0000 [ 41.243578][ T28] audit: type=1326 audit(1772761892.695:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3615 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa7bd2bc799 code=0x7ffc0000 [ 41.581363][ T3661] loop3: detected capacity change from 0 to 1024 [ 41.616959][ T3661] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.731093][ T3661] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.32: Invalid block bitmap block 0 in block_group 0 [ 41.746489][ T3661] loop3: lost filesystem error report for type 5 error -117 [ 41.754458][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 41.768201][ C1] EXT4-fs (loop3): initial error at time 1772761893: ext4_read_block_bitmap_nowait:483 [ 41.777882][ C1] EXT4-fs (loop3): last error at time 1772761893: ext4_read_block_bitmap_nowait:483 [ 42.028098][ T3661] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.32: Failed to acquire dquot type 0 [ 42.040908][ T3661] loop3: lost filesystem error report for type 5 error -117 [ 42.068127][ T3666] loop4: detected capacity change from 0 to 512 [ 42.087810][ T3666] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.207792][ T3666] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 42.341214][ T3661] EXT4-fs error (device loop3): ext4_free_blocks:6724: comm syz.3.32: Freeing blocks not in datazone - block = 0, count = 4096 [ 42.357156][ T3661] loop3: lost filesystem error report for type 5 error -117 [ 42.974853][ T3661] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.32: Invalid inode bitmap blk 0 in block_group 0 [ 42.992678][ T3616] netlink: 80 bytes leftover after parsing attributes in process `syz.2.28'. [ 42.998075][ T3661] loop3: lost filesystem error report for type 5 error -117 [ 43.004285][ T40] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 0 [ 43.004316][ T40] loop3: lost filesystem error report for type 5 error -117 [ 43.353056][ T3661] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 43.435025][ T3661] loop3: lost filesystem error report for type 5 error -117 [ 43.558378][ T3661] EXT4-fs (loop3): 1 orphan inode deleted [ 43.583837][ T3661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.825970][ T3661] syz.3.32 (3661) used greatest stack depth: 7624 bytes left [ 43.894364][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.903781][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 0 [ 43.921665][ T12] loop3: lost filesystem error report for type 5 error -117 [ 43.950181][ T3671] loop3: detected capacity change from 0 to 128 [ 44.059604][ T3669] sctp: [Deprecated]: syz.0.36 (pid 3669) Use of int in maxseg socket option. [ 44.059604][ T3669] Use struct sctp_assoc_value instead [ 44.094159][ T3669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.36'. [ 44.112590][ T3674] loop3: detected capacity change from 0 to 512 [ 44.119611][ T3674] journal_path: Non-blockdev passed as './file2' [ 44.126104][ T3674] EXT4-fs: error: could not find journal device path [ 44.146926][ T3674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35'. [ 44.156132][ T3674] netlink: 48 bytes leftover after parsing attributes in process `syz.3.35'. [ 44.240485][ T3671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 44.267238][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.276918][ T3671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 44.340810][ T3684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 44.442260][ T3676] loop0: detected capacity change from 0 to 512 [ 44.475277][ T3688] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.487096][ T3676] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.515486][ T3692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.41'. [ 44.651466][ T3684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 44.829805][ T3692] loop3: detected capacity change from 0 to 164 [ 44.960031][ T3688] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.039866][ T3692] ISOFS: unable to read i-node block [ 45.061958][ T3692] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 45.092696][ T3688] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.236637][ T3688] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.419804][ T3714] mmap: syz.2.44 (3714) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.434206][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 45.434282][ T28] audit: type=1400 audit(1772761897.245:338): avc: denied { firmware_load } for pid=3706 comm="syz.2.44" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 45.698080][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.720635][ T1661] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.732283][ T1661] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.764891][ T1661] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.864850][ T28] audit: type=1400 audit(1772761897.675:339): avc: denied { read write } for pid=3718 comm="syz.0.46" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 45.960735][ T28] audit: type=1400 audit(1772761897.675:340): avc: denied { open } for pid=3718 comm="syz.0.46" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 46.018313][ T3721] loop1: detected capacity change from 0 to 512 [ 46.093751][ T3719] loop0: detected capacity change from 0 to 512 [ 46.129483][ T3721] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.47: invalid indirect mapped block 256 (level 2) [ 46.148060][ T28] audit: type=1400 audit(1772761897.935:341): avc: denied { mounton } for pid=3718 comm="syz.0.46" path="/7/file1" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.240580][ T3721] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.240869][ T3721] EXT4-fs (loop1): 2 truncates cleaned up [ 46.250077][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 46.250102][ C1] EXT4-fs (loop1): initial error at time 1772761898: ext4_free_branches:1023: inode 11 [ 46.250128][ C1] EXT4-fs (loop1): last error at time 1772761898: ext4_free_branches:1023: inode 11 [ 46.342279][ T3730] loop2: detected capacity change from 0 to 256 [ 46.371560][ T3721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.426773][ T28] audit: type=1400 audit(1772761898.245:342): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 46.476492][ T3726] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 46.629141][ T28] audit: type=1400 audit(1772761898.355:343): avc: denied { create } for pid=3731 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_selinux_socket permissive=1 [ 46.842434][ T3735] loop3: detected capacity change from 0 to 1024 [ 46.857557][ T28] audit: type=1400 audit(1772761898.365:344): avc: denied { create } for pid=3731 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 46.911791][ T3735] EXT4-fs: test_dummy_encryption option not supported [ 46.985553][ T28] audit: type=1400 audit(1772761898.375:345): avc: denied { connect } for pid=3731 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 47.006477][ T28] audit: type=1400 audit(1772761898.375:346): avc: denied { connectto } for pid=3731 comm="syz.3.49" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=system_u:object_r:hugetlbfs_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 47.047346][ T28] audit: type=1400 audit(1772761898.475:347): avc: denied { create } for pid=3731 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 47.962192][ T3719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.334936][ T3737] process 'syz.3.50' launched '/dev/fd/9' with NULL argv: empty string added [ 48.517155][ T3719] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.587831][ T3730] FAT-fs (loop2): Directory bread(block 64) failed [ 48.594501][ T3730] FAT-fs (loop2): Directory bread(block 65) failed [ 48.601124][ T3730] FAT-fs (loop2): Directory bread(block 66) failed [ 48.607784][ T3730] FAT-fs (loop2): Directory bread(block 67) failed [ 48.614520][ T3730] FAT-fs (loop2): Directory bread(block 68) failed [ 48.621093][ T3730] FAT-fs (loop2): Directory bread(block 69) failed [ 48.627733][ T3730] FAT-fs (loop2): Directory bread(block 70) failed [ 48.634288][ T3730] FAT-fs (loop2): Directory bread(block 71) failed [ 48.641022][ T3730] FAT-fs (loop2): Directory bread(block 72) failed [ 48.647686][ T3730] FAT-fs (loop2): Directory bread(block 73) failed [ 48.974958][ T3719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.080896][ T3746] loop0: detected capacity change from 0 to 1024 [ 49.090734][ T3746] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.134343][ T3721] netlink: 9 bytes leftover after parsing attributes in process `syz.1.47'. [ 49.144290][ T3721] gretap0: entered promiscuous mode [ 49.153493][ T3748] loop4: detected capacity change from 0 to 512 [ 49.171947][ T3752] loop3: detected capacity change from 0 to 1024 [ 49.178599][ T3748] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 49.191172][ T3752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 49.199454][ T3752] System zones: 0-1, 3-36 [ 49.205065][ T3752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.235456][ T3746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.262585][ T3748] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 49.277221][ T3746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1364 sclass=netlink_route_socket pid=3746 comm=syz.0.52 [ 49.288899][ T3748] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.53: bad orphan inode 4 [ 49.440776][ T3748] loop4: lost filesystem error report for type 5 error -117 [ 49.441184][ T3748] EXT4-fs (loop4): 1 orphan inode deleted [ 49.454447][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 49.460911][ C0] EXT4-fs (loop4): initial error at time 1772761901: ext4_orphan_get:1417 [ 49.462615][ T3746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 49.469478][ C0] EXT4-fs (loop4): last error at time 1772761901: ext4_orphan_get:1417 [ 49.524387][ T3746] netlink: 176 bytes leftover after parsing attributes in process `syz.0.52'. [ 49.602632][ T3766] lo: left promiscuous mode [ 49.607225][ T3766] lo: left allmulticast mode [ 49.639098][ T3766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.759767][ T3748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.117163][ T3760] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 50.308887][ T3770] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 4: comm syz.4.53: lblock 0 mapped to illegal pblock 4 (length 1) [ 50.414102][ T3746] netlink: 144 bytes leftover after parsing attributes in process `syz.0.52'. [ 50.918140][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.952054][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.013556][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.070874][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.097289][ T3485] IPVS: starting estimator thread 0... [ 51.098949][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.113904][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.184492][ T3777] IPVS: using max 2592 ests per chain, 129600 per kthread [ 52.466504][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 52.466550][ T28] audit: type=1400 audit(1772761904.285:362): avc: denied { ioctl } for pid=3779 comm="syz.1.57" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=5114 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.946998][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.963733][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.123158][ T28] audit: type=1400 audit(1772761904.315:363): avc: denied { create } for pid=3779 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.143511][ T28] audit: type=1400 audit(1772762160.556:364): avc: denied { ioctl } for pid=3779 comm="syz.1.57" path="socket:[6146]" dev="sockfs" ino=6146 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.430374][ T3791] serio: Serial port ptm0 [ 54.218822][ T3800] loop2: detected capacity change from 0 to 256 [ 54.403047][ T3795] loop4: detected capacity change from 0 to 128 [ 55.434647][ T28] audit: type=1400 audit(1772762163.216:365): avc: denied { block_suspend } for pid=3803 comm="syz.0.59" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.212306][ T3814] loop1: detected capacity change from 0 to 512 [ 58.472504][ T3814] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.917024][ T3814] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.978708][ T3814] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 59.023317][ T28] audit: type=1400 audit(1772762166.826:366): avc: denied { append } for pid=3815 comm="syz.4.65" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 59.051429][ T3814] EXT4-fs (loop1): 1 truncate cleaned up [ 59.060009][ T3820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.65'. [ 59.074146][ T3814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.108279][ T28] audit: type=1400 audit(1772762166.916:367): avc: denied { read append } for pid=3815 comm="syz.4.65" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.221471][ T28] audit: type=1400 audit(1772762166.966:368): avc: denied { open } for pid=3815 comm="syz.4.65" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.261674][ T3822] loop4: detected capacity change from 0 to 1024 [ 59.279448][ T28] audit: type=1400 audit(1772762167.056:369): avc: denied { write } for pid=3813 comm="syz.1.64" path="/11/file2/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.315310][ T3822] EXT4-fs: inline encryption not supported [ 59.337473][ T3822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.517598][ T28] audit: type=1400 audit(1772762167.176:370): avc: denied { map } for pid=3813 comm="syz.1.64" path="/11/file2/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.560799][ T3836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.67'. [ 59.601739][ T28] audit: type=1400 audit(1772762167.256:371): avc: denied { ioctl } for pid=3813 comm="syz.1.64" path="socket:[6218]" dev="sockfs" ino=6218 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 59.642948][ T3838] loop2: detected capacity change from 0 to 512 [ 59.857739][ T3838] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.907134][ T3842] gretap1: entered promiscuous mode [ 59.922040][ T28] audit: type=1400 audit(1772762167.726:372): avc: denied { write } for pid=3821 comm="syz.4.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.966541][ T3838] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 60.571815][ T3838] EXT4-fs (loop2): 1 truncate cleaned up [ 60.583252][ T3838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.744496][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.402898][ T3855] loop3: detected capacity change from 0 to 512 [ 61.410573][ T28] audit: type=1400 audit(1772762168.816:373): avc: denied { create } for pid=3834 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 61.430280][ T28] audit: type=1400 audit(1772762168.816:374): avc: denied { connect } for pid=3834 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 61.461411][ T3852] loop4: detected capacity change from 0 to 256 [ 61.500318][ T3855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.512978][ T3855] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.745976][ T3852] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.782269][ T28] audit: type=1400 audit(1772762169.536:375): avc: denied { map } for pid=3845 comm="syz.3.70" path="/14/file1/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.858495][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.055253][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.235144][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.422787][ T3893] loop0: detected capacity change from 0 to 128 [ 63.430234][ T3893] ext4: Unknown parameter 'smackfshat' [ 64.135622][ T3922] netlink: 'syz.4.76': attribute type 9 has an invalid length. [ 64.143294][ T3922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 64.263411][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 64.263430][ T28] audit: type=1400 audit(1772762172.066:392): avc: denied { watch watch_reads } for pid=3923 comm="syz.1.78" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 64.306726][ T3924] pimreg: entered allmulticast mode [ 64.414481][ T28] audit: type=1400 audit(1772762172.156:393): avc: denied { bind } for pid=3912 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.437191][ T3917] loop4: detected capacity change from 0 to 8192 [ 64.484096][ T28] audit: type=1400 audit(1772762172.166:394): avc: denied { setopt } for pid=3912 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.516777][ T3913] netlink: 64 bytes leftover after parsing attributes in process `syz.3.75'. [ 64.518530][ T3915] loop0: detected capacity change from 0 to 2048 [ 64.593782][ T3930] loop1: detected capacity change from 0 to 256 [ 64.726018][ T3919] loop0: p1 < > p4 [ 64.755490][ T3919] loop0: p4 size 8388608 extends beyond EOD, truncated [ 64.857263][ T3930] FAT-fs (loop1): Directory bread(block 64) failed [ 64.863975][ T3930] FAT-fs (loop1): Directory bread(block 65) failed [ 64.870567][ T3930] FAT-fs (loop1): Directory bread(block 66) failed [ 64.877210][ T3930] FAT-fs (loop1): Directory bread(block 67) failed [ 64.883914][ T3930] FAT-fs (loop1): Directory bread(block 68) failed [ 64.890531][ T3930] FAT-fs (loop1): Directory bread(block 69) failed [ 64.897318][ T3930] FAT-fs (loop1): Directory bread(block 70) failed [ 64.903862][ T3930] FAT-fs (loop1): Directory bread(block 71) failed [ 64.910593][ T3930] FAT-fs (loop1): Directory bread(block 72) failed [ 64.917163][ T3930] FAT-fs (loop1): Directory bread(block 73) failed [ 66.514865][ T3915] loop0: p1 < > p4 [ 66.539393][ T3915] loop0: p4 size 8388608 extends beyond EOD, truncated [ 66.553020][ T28] audit: type=1400 audit(1772762172.656:395): avc: denied { read write } for pid=3931 comm="syz.2.80" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 66.977208][ T28] audit: type=1400 audit(1772762172.656:396): avc: denied { open } for pid=3931 comm="syz.2.80" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 67.021572][ T3000] loop0: p1 < > p4 [ 67.026220][ T3000] loop0: p4 size 8388608 extends beyond EOD, truncated [ 67.037903][ T3937] IPv6: sit1: Disabled Multicast RS [ 67.043918][ T3937] sit1: entered allmulticast mode [ 67.061307][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 67.062416][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 67.109108][ T28] audit: type=1400 audit(1772762174.916:397): avc: denied { listen } for pid=3942 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.132361][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 67.166008][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 67.213782][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 67.225022][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 67.281877][ T3946] loop3: detected capacity change from 0 to 128 [ 67.331371][ T3950] loop0: detected capacity change from 0 to 1024 [ 67.339077][ T3950] EXT4-fs: Ignoring removed orlov option [ 67.344881][ T3950] EXT4-fs: Ignoring removed bh option [ 67.392293][ T28] audit: type=1400 audit(1772762175.196:398): avc: denied { mounton } for pid=3945 comm="syz.3.83" path="/16/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 67.441350][ T30] bio_check_eod: 1 callbacks suppressed [ 67.441377][ T30] kworker/u8:1: attempt to access beyond end of device [ 67.441377][ T30] loop1: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 67.540994][ T3950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.574225][ T3955] veth1_macvtap: left promiscuous mode [ 67.637252][ T28] audit: type=1400 audit(1772762175.276:399): avc: denied { bind } for pid=3939 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.680177][ T30] kworker/u8:1: attempt to access beyond end of device [ 67.680177][ T30] loop1: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 67.747101][ T30] kworker/u8:1: attempt to access beyond end of device [ 67.747101][ T30] loop1: rw=1, sector=1960, nr_sectors = 24352 limit=256 [ 67.811047][ T28] audit: type=1400 audit(1772762175.296:400): avc: denied { cpu } for pid=3939 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 67.840183][ T28] audit: type=1400 audit(1772762175.376:401): avc: denied { setattr } for pid=3942 comm="syz.0.82" path="/12/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.865392][ T3955] macsec0: entered allmulticast mode [ 67.878950][ T30] kworker/u8:1: attempt to access beyond end of device [ 67.878950][ T30] loop1: rw=1, sector=26344, nr_sectors = 128 limit=256 [ 67.906421][ T30] kworker/u8:1: attempt to access beyond end of device [ 67.906421][ T30] loop1: rw=1, sector=26504, nr_sectors = 64 limit=256 [ 67.921181][ T3947] netlink: 'syz.2.84': attribute type 3 has an invalid length. [ 67.930364][ T3947] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.84'. [ 67.951182][ T30] kworker/u8:1: attempt to access beyond end of device [ 67.951182][ T30] loop1: rw=1, sector=26600, nr_sectors = 192 limit=256 [ 67.970655][ T30] kworker/u8:1: attempt to access beyond end of device [ 67.970655][ T30] loop1: rw=1, sector=26824, nr_sectors = 192 limit=256 [ 67.985169][ T30] kworker/u8:1: attempt to access beyond end of device [ 67.985169][ T30] loop1: rw=1, sector=27048, nr_sectors = 256 limit=256 [ 68.000367][ T30] kworker/u8:1: attempt to access beyond end of device [ 68.000367][ T30] loop1: rw=1, sector=27336, nr_sectors = 256 limit=256 [ 68.015095][ T30] kworker/u8:1: attempt to access beyond end of device [ 68.015095][ T30] loop1: rw=1, sector=27624, nr_sectors = 352 limit=256 [ 68.114951][ T3964] xt_policy: output policy not valid in PREROUTING and INPUT [ 68.164069][ T3967] netlink: 'syz.3.86': attribute type 2 has an invalid length. [ 68.189019][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.215689][ T3968] loop1: detected capacity change from 0 to 2048 [ 68.232069][ T3971] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 68.237804][ T3962] netlink: 14 bytes leftover after parsing attributes in process `syz.3.86'. [ 68.318897][ T3972] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.326174][ T3972] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.348619][ T3964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 68.388931][ T3968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.445373][ T3972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.455849][ T3972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.690519][ T30] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.745242][ T30] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.757944][ T30] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.767161][ T30] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.886941][ T3990] loop0: detected capacity change from 0 to 4096 [ 68.910900][ T3990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.984092][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.169104][ T4001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 69.260840][ T4008] loop2: detected capacity change from 0 to 1764 [ 69.268256][ T4008] iso9660: Unknown parameter 'utF8' [ 69.307524][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 69.307562][ T28] audit: type=1400 audit(1772762177.116:408): avc: denied { connect } for pid=4005 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.594921][ T28] audit: type=1400 audit(1772762177.266:409): avc: denied { append } for pid=3989 comm="syz.0.92" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.645197][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.665717][ T4017] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 70.187226][ T4001] macvlan2: entered promiscuous mode [ 70.189563][ T4001] macvlan2: entered allmulticast mode [ 70.196662][ T4001] veth0_virt_wifi: entered allmulticast mode [ 71.955705][ T4035] syz.1.98 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 71.970707][ T28] audit: type=1400 audit(1772762179.776:410): avc: denied { setopt } for pid=4029 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.097020][ T4038] loop2: detected capacity change from 0 to 512 [ 72.248707][ T4038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.406471][ T4038] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.455915][ T4039] netlink: 64 bytes leftover after parsing attributes in process `syz.0.100'. [ 72.721570][ T28] audit: type=1400 audit(1772762180.526:411): avc: denied { create } for pid=4046 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.984398][ T4052] loop1: detected capacity change from 0 to 512 [ 73.077830][ T4052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.090454][ T4052] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.140000][ T4052] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz.1.101: invalid size [ 73.153659][ T4052] EXT4-fs (loop1): Remounting filesystem read-only [ 73.184537][ T28] audit: type=1400 audit(1772762180.946:412): avc: denied { remove_name } for pid=4043 comm="syz.1.101" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.230636][ T28] audit: type=1400 audit(1772762180.946:413): avc: denied { rename } for pid=4043 comm="syz.1.101" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 73.333474][ T28] audit: type=1400 audit(1772762180.946:414): avc: denied { rmdir } for pid=4043 comm="syz.1.101" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.378828][ T28] audit: type=1400 audit(1772762180.976:415): avc: denied { mounton } for pid=4043 comm="syz.1.101" path="/18/file1" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.498448][ T28] audit: type=1400 audit(1772762181.306:416): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.521042][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.532456][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.534907][ T28] audit: type=1400 audit(1772762181.346:417): avc: denied { bind } for pid=4048 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.636443][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.780930][ T4071] loop0: detected capacity change from 0 to 512 [ 75.800245][ T4068] loop2: detected capacity change from 0 to 512 [ 75.816663][ T4071] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.107: inode has both inline data and extents flags [ 75.850344][ T4068] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.860532][ T4071] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.864439][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 75.864786][ T4071] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.107: couldn't read orphan inode 15 (err -117) [ 75.873607][ C1] EXT4-fs (loop0): initial error at time 1772762183: ext4_orphan_get:1391: inode 15 [ 75.901274][ C1] EXT4-fs (loop0): last error at time 1772762183: ext4_orphan_get:1391: inode 15 [ 75.911058][ T4071] loop0: lost filesystem error report for type 5 error -117 [ 75.939484][ T4071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.231224][ T4068] EXT4-fs (loop2): 1 truncate cleaned up [ 76.449720][ T4068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.490816][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 76.491120][ T28] audit: type=1400 audit(1772762184.286:418): avc: denied { ioctl } for pid=4070 comm="syz.0.107" path="/19/file0/file1" dev="loop0" ino=18 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.310379][ T28] audit: type=1400 audit(1772762185.086:419): avc: denied { add_name } for pid=4067 comm="syz.2.106" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.338941][ T4090] lo speed is unknown, defaulting to 1000 [ 77.344782][ T4090] lo speed is unknown, defaulting to 1000 [ 77.351269][ T4090] lo speed is unknown, defaulting to 1000 [ 77.357794][ T4090] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 77.366209][ T4090] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 77.383215][ T4090] lo speed is unknown, defaulting to 1000 [ 77.389660][ T4090] lo speed is unknown, defaulting to 1000 [ 77.396317][ T4090] lo speed is unknown, defaulting to 1000 [ 77.402854][ T4090] lo speed is unknown, defaulting to 1000 [ 77.409483][ T4090] lo speed is unknown, defaulting to 1000 [ 77.489314][ T4090] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 77.563471][ T28] audit: type=1400 audit(1772762185.086:420): avc: denied { create } for pid=4067 comm="syz.2.106" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.588356][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.871418][ T28] audit: type=1400 audit(1772762185.126:421): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.944527][ T28] audit: type=1400 audit(1772762185.146:422): avc: denied { create } for pid=4084 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 78.020063][ T28] audit: type=1400 audit(1772762185.146:423): avc: denied { write } for pid=4084 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.021431][ T28] audit: type=1400 audit(1772762185.246:424): avc: denied { create } for pid=4084 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.724987][ T28] audit: type=1400 audit(1772762185.366:425): avc: denied { read append open } for pid=4067 comm="syz.2.106" path="/22/file1/memory.events.local" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.750207][ T4104] hub 8-0:1.0: USB hub found [ 79.755008][ T4104] hub 8-0:1.0: 8 ports detected [ 79.764308][ T4104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4104 comm=syz.4.115 [ 79.844031][ T28] audit: type=1400 audit(1772762185.366:426): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.904883][ T4100] loop0: detected capacity change from 0 to 512 [ 79.911582][ T28] audit: type=1400 audit(1772762185.366:427): avc: denied { open } for pid=3308 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.072350][ T4100] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 80.141208][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.728382][ T4113] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 81.177881][ T4120] netlink: 64 bytes leftover after parsing attributes in process `syz.0.119'. [ 81.543564][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 81.543582][ T28] audit: type=1400 audit(1772762189.186:468): avc: denied { setopt } for pid=4117 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.614354][ T4128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.120'. [ 81.623531][ T4128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.120'. [ 81.658567][ T4136] netlink: 'syz.0.122': attribute type 27 has an invalid length. [ 81.746536][ T4124] loop1: detected capacity change from 0 to 128 [ 81.798869][ T3775] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.833695][ T28] audit: type=1400 audit(1772762189.186:469): avc: denied { connect } for pid=4117 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.867427][ T28] audit: type=1400 audit(1772762189.186:470): avc: denied { name_connect } for pid=4117 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 81.888731][ T3775] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.923040][ T4124] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 81.944552][ T28] audit: type=1400 audit(1772762189.296:471): avc: denied { nlmsg_read } for pid=4121 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.064510][ T28] audit: type=1400 audit(1772762189.396:472): avc: denied { read } for pid=4135 comm="syz.0.122" dev="nsfs" ino=4026532474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.123145][ T28] audit: type=1400 audit(1772762189.396:473): avc: denied { open } for pid=4135 comm="syz.0.122" path="net:[4026532474]" dev="nsfs" ino=4026532474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.146786][ T28] audit: type=1400 audit(1772762189.396:474): avc: denied { shutdown } for pid=4117 comm="syz.4.120" lport=48896 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.169760][ T28] audit: type=1400 audit(1772762189.426:475): avc: denied { create } for pid=4117 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.203554][ T28] audit: type=1400 audit(1772762189.446:476): avc: denied { create } for pid=4135 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.224217][ T28] audit: type=1400 audit(1772762189.456:477): avc: denied { bind } for pid=4135 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.344744][ T4124] IPv6: NLM_F_CREATE should be specified when creating new route [ 82.529500][ T4137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.703835][ T4160] loop2: detected capacity change from 0 to 164 [ 82.861006][ T4165] netlink: 27 bytes leftover after parsing attributes in process `syz.4.125'. [ 83.048327][ T4167] hub 8-0:1.0: USB hub found [ 83.053678][ T4167] hub 8-0:1.0: 8 ports detected [ 83.413739][ T4160] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 84.229982][ T4160] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 84.306063][ T4136] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.313296][ T4136] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.897886][ T4136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.013700][ T4136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.152658][ T3775] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.316815][ T4155] bridge_slave_0: left allmulticast mode [ 85.322640][ T4155] bridge_slave_0: left promiscuous mode [ 85.329251][ T4155] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.405221][ T4155] bridge_slave_1: left allmulticast mode [ 85.411077][ T4155] bridge_slave_1: left promiscuous mode [ 85.425082][ T4155] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.478018][ T4155] bond0: (slave bond_slave_0): Releasing backup interface [ 85.515388][ T4155] bond0: (slave bond_slave_1): Releasing backup interface [ 85.549178][ T4155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.557200][ T4155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.575127][ T4155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.582707][ T4155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.611837][ T4155] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 85.660751][ T3775] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.671023][ T3775] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.680301][ T3775] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.705047][ T3775] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.714170][ T3775] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.730538][ T3417] lo speed is unknown, defaulting to 1000 [ 85.820050][ T4181] bond_slave_0: entered promiscuous mode [ 85.827030][ T4181] bond_slave_1: entered promiscuous mode [ 85.834683][ T4181] vlan2: entered promiscuous mode [ 85.840394][ T4181] bond0: entered promiscuous mode [ 85.847681][ T4196] netlink: 48 bytes leftover after parsing attributes in process `syz.0.129'. [ 85.862820][ T4181] bridge_slave_1: entered promiscuous mode [ 85.989383][ T4199] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.088024][ T4200] lo speed is unknown, defaulting to 1000 [ 86.134270][ T4188] lo speed is unknown, defaulting to 1000 [ 86.140147][ T3775] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.149322][ T3775] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.158570][ T3775] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.167914][ T3775] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.196627][ T4195] pim6reg: entered allmulticast mode [ 86.300349][ T4206] siw: device registration error -23 [ 86.306987][ T4206] netlink: 40 bytes leftover after parsing attributes in process `syz.4.131'. [ 86.361431][ T4206] loop4: detected capacity change from 0 to 512 [ 86.462274][ T4208] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 87.186766][ T4192] lo speed is unknown, defaulting to 1000 [ 87.219317][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 87.219335][ T28] audit: type=1400 audit(1772762195.036:499): avc: denied { mount } for pid=4191 comm="syz.3.130" name="/" dev="ramfs" ino=6655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 87.268172][ T4211] loop1: detected capacity change from 0 to 512 [ 87.434052][ T4214] xt_hashlimit: size too large, truncated to 1048576 [ 88.136930][ T4219] loop0: detected capacity change from 0 to 1024 [ 88.143903][ T4219] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.150449][ T4219] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.396641][ T4219] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 88.404858][ T4219] System zones: 0-1, 3-36 [ 88.418786][ T28] audit: type=1400 audit(1772762196.226:500): avc: denied { write } for pid=4201 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.440074][ T4219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.676774][ T28] audit: type=1400 audit(1772762196.226:501): avc: denied { read } for pid=4201 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.314511][ T28] audit: type=1400 audit(1772762196.266:502): avc: denied { mount } for pid=4215 comm="syz.0.134" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 89.869098][ T4231] loop2: detected capacity change from 0 to 512 [ 89.878107][ T28] audit: type=1400 audit(1772762196.276:503): avc: denied { create } for pid=4215 comm="syz.0.134" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 89.915035][ T4231] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.923729][ T28] audit: type=1400 audit(1772762196.916:504): avc: denied { read write } for pid=4221 comm="syz.2.135" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.052157][ T28] audit: type=1400 audit(1772762196.916:505): avc: denied { open } for pid=4221 comm="syz.2.135" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.077348][ T4231] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.135: invalid block [ 90.144504][ T4231] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.151285][ T4231] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.135: invalid indirect mapped block 4294967295 (level 1) [ 90.160495][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 90.160517][ C1] EXT4-fs (loop2): initial error at time 1772762197: ext4_get_branch:178: inode 11: block 4294967295 [ 90.160559][ C1] EXT4-fs (loop2): last error at time 1772762197: ext4_get_branch:178: inode 11: block 4294967295 [ 90.206094][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.244517][ T4231] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.244882][ T4231] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.135: invalid indirect mapped block 4294967295 (level 1) [ 90.271287][ T4231] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.282314][ T4231] EXT4-fs (loop2): 2 truncates cleaned up [ 90.324119][ T4235] loop0: detected capacity change from 0 to 512 [ 90.334874][ T4231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.350873][ T4235] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.536231][ T28] audit: type=1400 audit(1772762198.206:506): avc: denied { mount } for pid=4236 comm="syz.4.139" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 90.561178][ T4235] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.137: bg 0: block 393: padding at end of block bitmap is not set [ 91.375952][ T4235] loop0: lost filesystem error report for type 5 error -117 [ 91.376175][ T4235] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 91.392226][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 91.392246][ C0] EXT4-fs (loop0): initial error at time 1772762199: ext4_validate_block_bitmap:441 [ 91.392272][ C0] EXT4-fs (loop0): last error at time 1772762199: ext4_validate_block_bitmap:441 [ 91.417564][ T4235] loop0: lost filesystem error report for type 5 error -117 [ 91.418055][ T4235] EXT4-fs (loop0): 2 truncates cleaned up [ 91.692573][ T28] audit: type=1400 audit(1772762199.496:508): avc: denied { create } for pid=4236 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.908250][ T4245] xt_hashlimit: size too large, truncated to 1048576 [ 92.385334][ T4235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.430371][ T28] audit: type=1400 audit(1772762199.676:509): avc: denied { bind } for pid=4236 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.520770][ T28] audit: type=1400 audit(1772762199.676:510): avc: denied { listen } for pid=4236 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.540350][ T28] audit: type=1400 audit(1772762199.676:511): avc: denied { connect } for pid=4236 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.414480][ T28] audit: type=1400 audit(1772762199.886:512): avc: denied { write } for pid=4236 comm="syz.4.139" path="socket:[6696]" dev="sockfs" ino=6696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.533286][ T28] audit: type=1400 audit(1772762200.036:513): avc: denied { accept } for pid=4236 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.803888][ T4235] infiniband syz2: set down [ 93.808817][ T4235] infiniband syz2: added team_slave_1 [ 93.821728][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.858045][ T4235] RDS/IB: syz2: added [ 93.864268][ T4235] smc: adding ib device syz2 with port count 1 [ 93.878707][ T4235] smc: ib device syz2 port 1 has no pnetid [ 94.042458][ T28] audit: type=1400 audit(1772762199.236:507): avc: denied { write } for pid=4221 comm="syz.2.135" path="/27/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.103575][ T28] audit: type=1400 audit(1772762201.426:514): avc: denied { create } for pid=4251 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.212486][ T4262] netlink: 'syz.1.143': attribute type 6 has an invalid length. [ 94.240428][ T28] audit: type=1400 audit(1772762201.426:515): avc: denied { bind } for pid=4251 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.260149][ T28] audit: type=1400 audit(1772762201.426:516): avc: denied { write } for pid=4251 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.280297][ T4262] netlink: 'syz.1.143': attribute type 6 has an invalid length. [ 94.291226][ T28] audit: type=1400 audit(1772762201.426:517): avc: denied { allowed } for pid=4251 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.303911][ T4262] 9p: Bad value for 'rfdno' [ 94.328062][ T4266] xt_limit: Overflow, try lower: 65536/2147483648 [ 94.457121][ T4270] netlink: 'syz.2.146': attribute type 1 has an invalid length. [ 94.465098][ T4270] netlink: 5 bytes leftover after parsing attributes in process `syz.2.146'. [ 95.475853][ T4270] lo speed is unknown, defaulting to 1000 [ 96.400174][ T3417] IPVS: starting estimator thread 0... [ 97.354499][ T4280] IPVS: using max 2832 ests per chain, 141600 per kthread [ 97.450368][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.584390][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 97.590915][ T4290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 97.593170][ T28] audit: type=1400 audit(1772762461.387:532): avc: denied { bind } for pid=4289 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.620591][ T28] audit: type=1400 audit(1772762461.397:533): avc: denied { name_bind } for pid=4289 comm="syz.3.150" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 97.671979][ T4296] macsec1: entered allmulticast mode [ 97.678155][ T28] audit: type=1400 audit(1772762461.397:534): avc: denied { node_bind } for pid=4289 comm="syz.3.150" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 97.725498][ T4296] dummy0: entered allmulticast mode [ 97.734260][ T28] audit: type=1400 audit(1772762461.397:535): avc: denied { bind } for pid=4289 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.762213][ T28] audit: type=1400 audit(1772762461.457:536): avc: denied { name_connect } for pid=4289 comm="syz.3.150" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 97.784946][ T28] audit: type=1400 audit(1772762461.467:537): avc: denied { write } for pid=4293 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.804361][ T28] audit: type=1400 audit(1772762461.467:538): avc: denied { create } for pid=4287 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.824216][ T28] audit: type=1400 audit(1772762461.477:539): avc: denied { connect } for pid=4287 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.851264][ T4302] loop4: detected capacity change from 0 to 512 [ 97.861188][ T4299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.902072][ T4299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.910625][ T28] audit: type=1400 audit(1772762461.477:540): avc: denied { ioctl } for pid=4287 comm="syz.0.149" path="socket:[7447]" dev="sockfs" ino=7447 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.987261][ T4296] dummy0: left allmulticast mode [ 98.109467][ T4302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.122164][ T4302] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.208098][ T28] audit: type=1400 audit(1772762461.667:541): avc: denied { read write } for pid=4293 comm="syz.1.152" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.354650][ T4318] loop0: detected capacity change from 0 to 512 [ 98.387876][ T4318] EXT4-fs: Ignoring removed i_version option [ 98.399024][ T4318] EXT4-fs: Ignoring removed bh option [ 98.427330][ T4318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.471926][ T4318] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.622999][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.966733][ T4339] loop4: detected capacity change from 0 to 8192 [ 99.088298][ T4350] loop1: detected capacity change from 0 to 1024 [ 99.175285][ T4350] EXT4-fs: inline encryption not supported [ 99.211479][ T4350] EXT4-fs: Ignoring removed nobh option [ 99.233283][ T4350] EXT4-fs: Ignoring removed bh option [ 99.246825][ T4354] netlink: 'syz.4.157': attribute type 15 has an invalid length. [ 99.304756][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.317106][ T4350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.353888][ T4339] lo speed is unknown, defaulting to 1000 [ 99.505630][ T4361] loop2: detected capacity change from 0 to 128 [ 99.540474][ T4361] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 100.027238][ T4364] IPv6: NLM_F_CREATE should be specified when creating new route [ 101.098695][ T4372] loop2: detected capacity change from 0 to 128 [ 101.105512][ T4372] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615' [ 101.247125][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.986373][ T4374] loop1: detected capacity change from 0 to 512 [ 102.270984][ T4382] loop2: detected capacity change from 0 to 512 [ 102.756574][ T4368] loop4: detected capacity change from 0 to 2048 [ 102.856597][ T4382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.869320][ T4382] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.022490][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 103.022508][ T28] audit: type=1326 audit(1772762466.817:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429352c799 code=0x7ffc0000 [ 103.056549][ T28] audit: type=1326 audit(1772762466.817:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f429352c799 code=0x7ffc0000 [ 103.080314][ T28] audit: type=1326 audit(1772762466.817:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429352c799 code=0x7ffc0000 [ 103.089032][ T4374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.113591][ T28] audit: type=1326 audit(1772762466.817:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429352c799 code=0x7ffc0000 [ 103.162976][ T4374] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.184070][ T28] audit: type=1326 audit(1772762466.817:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4391 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42934ecfce code=0x7ffc0000 [ 103.217511][ T4368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.224675][ T28] audit: type=1326 audit(1772762466.827:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f429352c799 code=0x7ffc0000 [ 103.276123][ T4374] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 103.313808][ T28] audit: type=1326 audit(1772762466.827:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429352c799 code=0x7ffc0000 [ 103.337536][ T28] audit: type=1326 audit(1772762466.827:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429352c799 code=0x7ffc0000 [ 103.361003][ T28] audit: type=1326 audit(1772762466.827:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42934cdb19 code=0x7ffc0000 [ 103.384300][ T28] audit: type=1326 audit(1772762466.827:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f429352c799 code=0x7ffc0000 [ 103.390463][ T4374] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 103.769332][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.781833][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.792066][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.004860][ T4421] SELinux: Context : is not valid (left unmapped). [ 105.018356][ T4421] loop1: detected capacity change from 0 to 1024 [ 105.124634][ T4421] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 105.186119][ T4421] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 105.323863][ T4421] EXT4-fs (loop1): invalid journal inode [ 105.341172][ T4411] loop4: detected capacity change from 0 to 512 [ 105.348477][ T4421] EXT4-fs (loop1): can't get journal size [ 105.365159][ T4421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.955454][ T4431] cgroup: subsys name conflicts with all [ 106.000292][ T4411] netlink: 'syz.4.168': attribute type 10 has an invalid length. [ 106.464666][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.742296][ T4433] loop0: detected capacity change from 0 to 256 [ 106.916311][ T4433] FAT-fs (loop0): Directory bread(block 64) failed [ 106.930234][ T4433] FAT-fs (loop0): Directory bread(block 65) failed [ 106.947361][ T4433] FAT-fs (loop0): Directory bread(block 66) failed [ 106.956482][ T4433] FAT-fs (loop0): Directory bread(block 67) failed [ 106.965545][ T4433] FAT-fs (loop0): Directory bread(block 68) failed [ 106.972978][ T4433] FAT-fs (loop0): Directory bread(block 69) failed [ 106.981387][ T4433] FAT-fs (loop0): Directory bread(block 70) failed [ 106.990706][ T4433] FAT-fs (loop0): Directory bread(block 71) failed [ 106.999026][ T4433] FAT-fs (loop0): Directory bread(block 72) failed [ 107.335601][ T4439] loop2: detected capacity change from 0 to 1024 [ 107.346438][ T4433] FAT-fs (loop0): Directory bread(block 73) failed [ 107.360374][ T4442] netlink: 68 bytes leftover after parsing attributes in process `syz.1.174'. [ 107.593200][ T4439] EXT4-fs: inline encryption not supported [ 107.602403][ T4439] EXT4-fs: Ignoring removed nobh option [ 107.608186][ T4439] EXT4-fs: Ignoring removed bh option [ 107.666657][ T898] IPVS: starting estimator thread 0... [ 108.534519][ T4446] IPVS: using max 2832 ests per chain, 141600 per kthread [ 108.548798][ T4439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.399934][ T4461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.179'. [ 110.920549][ T4466] lo speed is unknown, defaulting to 1000 [ 111.678438][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 111.678456][ T28] audit: type=1400 audit(1772762475.437:633): avc: denied { read } for pid=4463 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 111.704896][ T28] audit: type=1400 audit(1772762475.477:634): avc: denied { create } for pid=4463 comm="syz.4.180" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 111.813916][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.177726][ T28] audit: type=1400 audit(1772762475.477:635): avc: denied { write } for pid=4463 comm="syz.4.180" name="file0" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 113.227324][ T4479] loop0: detected capacity change from 0 to 128 [ 113.234592][ T4479] msdos: Bad value for 'gid' [ 113.239214][ T4479] msdos: Bad value for 'gid' [ 113.328081][ T28] audit: type=1400 audit(1772762475.477:636): avc: denied { open } for pid=4463 comm="syz.4.180" path="/41/file0" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 113.350885][ T28] audit: type=1400 audit(1772762475.477:637): avc: denied { ioctl } for pid=4463 comm="syz.4.180" path="/41/file0" dev="tmpfs" ino=245 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 113.375057][ T28] audit: type=1400 audit(1772762476.857:638): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 113.397920][ T28] audit: type=1400 audit(1772762477.117:639): avc: denied { watch } for pid=4465 comm="syz.3.182" path="/32/file0" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 113.497247][ T28] audit: type=1400 audit(1772762477.117:640): avc: denied { execute } for pid=4465 comm="syz.3.182" name="file1" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.564454][ T28] audit: type=1400 audit(1772762477.117:641): avc: denied { execute_no_trans } for pid=4465 comm="syz.3.182" path="/32/file1" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.645599][ T4485] loop2: detected capacity change from 0 to 512 [ 113.851168][ T4485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.863756][ T4485] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.037778][ T4492] loop0: detected capacity change from 0 to 1024 [ 114.045929][ T4492] EXT4-fs: Ignoring removed nobh option [ 114.051765][ T4492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.241643][ T4492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.650839][ T28] audit: type=1400 audit(1772762477.327:642): avc: denied { create } for pid=4477 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 114.667881][ T4492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.186'. [ 115.481616][ T4491] lo speed is unknown, defaulting to 1000 [ 115.718659][ T4501] loop1: detected capacity change from 0 to 512 [ 116.035126][ T4501] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 116.190661][ T4501] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.181: bg 0: block 255: padding at end of block bitmap is not set [ 116.224493][ T4501] loop1: lost filesystem error report for type 5 error -117 [ 116.224697][ T4501] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 116.240785][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 116.240818][ C0] EXT4-fs (loop1): initial error at time 1772762480: ext4_validate_block_bitmap:441 [ 116.240839][ C0] EXT4-fs (loop1): last error at time 1772762480: ext4_validate_block_bitmap:441 [ 116.300263][ T4501] loop1: lost filesystem error report for type 5 error -117 [ 116.301211][ T4501] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.181: invalid indirect mapped block 1 (level 1) [ 116.334518][ T4501] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.334867][ T4501] EXT4-fs (loop1): 1 truncate cleaned up [ 116.803680][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.804212][ T4501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.888361][ T4509] loop0: detected capacity change from 0 to 1024 [ 116.941713][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 116.941731][ T28] audit: type=1400 audit(1772762480.727:645): avc: denied { create } for pid=4498 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.076109][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.105571][ T4509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.140144][ T28] audit: type=1400 audit(1772762480.947:646): avc: denied { setattr } for pid=4507 comm="syz.0.189" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.190915][ T4524] loop2: detected capacity change from 0 to 1024 [ 118.594516][ T4522] siw: device registration error -23 [ 118.928775][ T4522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.189'. [ 118.964918][ T4524] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 119.021950][ T4524] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 119.039781][ T4524] EXT4-fs (loop2): invalid journal inode [ 119.095513][ T4524] EXT4-fs (loop2): can't get journal size [ 119.112497][ T4524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.132598][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.144851][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.178749][ T28] audit: type=1400 audit(1772762482.987:647): avc: denied { getopt } for pid=4527 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.201110][ T4528] netlink: 36 bytes leftover after parsing attributes in process `syz.4.194'. [ 119.226385][ T28] audit: type=1400 audit(1772762483.027:648): avc: denied { write } for pid=4526 comm="syz.3.192" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.294835][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.349973][ T28] audit: type=1400 audit(1772762483.027:649): avc: denied { create } for pid=4527 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 119.526562][ T28] audit: type=1400 audit(1772762483.317:650): avc: denied { mount } for pid=4532 comm="syz.1.202" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 119.555310][ T4539] loop2: detected capacity change from 0 to 128 [ 119.829475][ T28] audit: type=1400 audit(1772762483.327:651): avc: denied { read append } for pid=4532 comm="syz.1.202" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 119.888772][ T28] audit: type=1400 audit(1772762483.327:652): avc: denied { open } for pid=4532 comm="syz.1.202" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 119.916036][ T4543] loop4: detected capacity change from 0 to 1024 [ 119.966330][ T4543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.013687][ T4543] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.194: corrupted xattr block 113: invalid header [ 120.124892][ T4553] bridge_slave_0: left allmulticast mode [ 120.165314][ T4555] loop1: detected capacity change from 0 to 1024 [ 120.176113][ T4553] bridge_slave_0: left promiscuous mode [ 120.181945][ T4553] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.244947][ T4555] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.251589][ T4555] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.287268][ T4553] bridge_slave_1: left allmulticast mode [ 120.293802][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.307356][ T4555] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 120.313461][ T4553] bridge_slave_1: left promiscuous mode [ 120.330973][ T4553] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.333407][ T4551] 9pnet_fd: p9_fd_create_unix (4551): problem connecting socket: ./file0: -2 [ 120.349635][ T4555] System zones: 0-1, 3-36 [ 120.357209][ T4555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.384700][ T4553] bond0: (slave bond_slave_0): Releasing backup interface [ 120.427734][ T4553] bond0: (slave bond_slave_1): Releasing backup interface [ 120.450833][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.462982][ T4553] team0: Port device team_slave_0 removed [ 120.509180][ T4553] team0: Port device team_slave_1 removed [ 120.509747][ T4565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=4565 comm=syz.2.195 [ 120.528714][ T4553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.539844][ T4565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5129 sclass=netlink_audit_socket pid=4565 comm=syz.2.195 [ 120.555328][ T4553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.572974][ T4553] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 120.769454][ T4563] netlink: 64 bytes leftover after parsing attributes in process `syz.4.198'. [ 120.842411][ T4567] syzkaller0: entered promiscuous mode [ 120.848465][ T4567] syzkaller0: entered allmulticast mode [ 122.810351][ T4596] loop4: detected capacity change from 0 to 512 [ 122.817464][ T4596] ext4: Unknown parameter 'measure' [ 123.047842][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 123.057086][ T4592] netlink: 'syz.4.207': attribute type 5 has an invalid length. [ 123.064786][ T4592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.207'. [ 123.080357][ T4592] geneve2: entered promiscuous mode [ 123.085621][ T4592] geneve2: entered allmulticast mode [ 123.104522][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 123.114110][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 123.123937][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 123.142114][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 123.567292][ T4611] loop2: detected capacity change from 0 to 1024 [ 123.574163][ T4611] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.365754][ T4611] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.385557][ T4611] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 124.475304][ T4611] System zones: 0-1, 3-36 [ 125.379370][ T4611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.496470][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.688933][ T4633] loop1: detected capacity change from 0 to 1024 [ 125.709449][ T4633] EXT4-fs: inline encryption not supported [ 125.829198][ T4640] loop4: detected capacity change from 0 to 128 [ 125.921584][ T4642] xt_recent: Unsupported userspace flags (000000b1) [ 126.000749][ T4633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.028161][ T4640] bio_check_eod: 85 callbacks suppressed [ 126.028184][ T4640] syz.4.217: attempt to access beyond end of device [ 126.028184][ T4640] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 126.059151][ T4643] 9pnet_fd: p9_fd_create_unix (4643): problem connecting socket: ./file0: -2 [ 126.277793][ T4640] syz.4.217: attempt to access beyond end of device [ 126.277793][ T4640] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 126.371080][ T4636] bridge_slave_0: left allmulticast mode [ 126.388956][ T4640] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 126.401960][ T4636] bridge_slave_0: left promiscuous mode [ 126.421108][ T4649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.216'. [ 126.439691][ T4649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'. [ 126.483486][ T4636] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.492362][ T4640] syz.4.217: attempt to access beyond end of device [ 126.492362][ T4640] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 126.530488][ T4640] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 126.545007][ T4636] bridge_slave_1: left allmulticast mode [ 126.559907][ T4640] syz.4.217: attempt to access beyond end of device [ 126.559907][ T4640] loop4: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 126.614848][ T4636] bridge_slave_1: left promiscuous mode [ 126.621746][ T4636] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.629300][ T4640] Buffer I/O error on dev loop4, logical block 77, lost async page write [ 126.638273][ T4640] syz.4.217: attempt to access beyond end of device [ 126.638273][ T4640] loop4: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 126.654555][ T4636] bond0: (slave bond_slave_0): Releasing backup interface [ 126.662036][ T4640] Buffer I/O error on dev loop4, logical block 78, lost async page write [ 126.664928][ T4636] bond0: (slave bond_slave_1): Releasing backup interface [ 126.681221][ T4640] syz.4.217: attempt to access beyond end of device [ 126.681221][ T4640] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 126.700549][ T4636] team0: Port device team_slave_0 removed [ 126.706645][ T4640] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 126.722242][ T4636] team0: Port device team_slave_1 removed [ 126.729078][ T4640] syz.4.217: attempt to access beyond end of device [ 126.729078][ T4640] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 126.744657][ T4636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.752066][ T4636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.760324][ T4640] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 126.781501][ T28] audit: type=1400 audit(1772762490.587:653): avc: denied { create } for pid=4639 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.803016][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.804447][ T4636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.819463][ T4636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.829260][ T4636] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 126.853416][ T4638] ipvlan2: entered allmulticast mode [ 126.859030][ T4638] dummy0: entered allmulticast mode [ 126.866266][ T4655] loop1: detected capacity change from 0 to 512 [ 126.885719][ T4641] lo speed is unknown, defaulting to 1000 [ 126.892695][ T4655] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.218: invalid block [ 126.951414][ T4655] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 126.953674][ T4655] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.218: invalid indirect mapped block 4294967295 (level 1) [ 126.962946][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 126.962963][ C0] EXT4-fs (loop1): initial error at time 1772762490: ext4_get_branch:178: inode 11: block 4294967295 [ 126.962994][ C0] EXT4-fs (loop1): last error at time 1772762490: ext4_get_branch:178: inode 11: block 4294967295 [ 127.016317][ T4655] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 127.025621][ T4655] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.218: invalid indirect mapped block 4294967295 (level 1) [ 127.066749][ T28] audit: type=1400 audit(1772762490.757:654): avc: denied { listen } for pid=4639 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 127.100501][ T4655] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 127.101023][ T4655] EXT4-fs (loop1): 2 truncates cleaned up [ 127.117758][ T4655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.246446][ T4662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 127.257906][ T4650] syz.4.217: attempt to access beyond end of device [ 127.257906][ T4650] loop4: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 127.339480][ T4663] netlink: 'syz.2.220': attribute type 7 has an invalid length. [ 127.351666][ T4650] Buffer I/O error on dev loop4, logical block 77, lost async page write [ 127.353437][ T28] audit: type=1400 audit(1772762491.137:655): avc: denied { create } for pid=4664 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.386703][ T4650] syz.4.217: attempt to access beyond end of device [ 127.386703][ T4650] loop4: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 127.388480][ T28] audit: type=1400 audit(1772762491.137:656): avc: denied { append } for pid=4664 comm="syz.0.221" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 127.424592][ T28] audit: type=1400 audit(1772762491.137:657): avc: denied { write } for pid=4664 comm="syz.0.221" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 127.449389][ T4650] Buffer I/O error on dev loop4, logical block 78, lost async page write [ 127.460787][ T4650] syz.4.217: attempt to access beyond end of device [ 127.460787][ T4650] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 127.477053][ T4650] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 127.487858][ T4650] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 127.514436][ T28] audit: type=1400 audit(1772762491.257:658): avc: denied { listen } for pid=4664 comm="syz.0.221" lport=43970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.547727][ T4667] loop2: detected capacity change from 0 to 1024 [ 127.564616][ T28] audit: type=1400 audit(1772762491.287:659): avc: denied { remove_name } for pid=4654 comm="syz.1.218" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.593068][ T28] audit: type=1400 audit(1772762491.287:660): avc: denied { rename } for pid=4654 comm="syz.1.218" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.633676][ T4667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.646908][ T28] audit: type=1400 audit(1772762491.437:661): avc: denied { accept } for pid=4664 comm="syz.0.221" lport=43970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.754330][ T4677] loop4: detected capacity change from 0 to 256 [ 127.818150][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.916768][ T4677] FAT-fs (loop4): Directory bread(block 64) failed [ 127.925324][ T4677] FAT-fs (loop4): Directory bread(block 65) failed [ 127.933167][ T4677] FAT-fs (loop4): Directory bread(block 66) failed [ 127.943389][ T4677] FAT-fs (loop4): Directory bread(block 67) failed [ 127.951880][ T4677] FAT-fs (loop4): Directory bread(block 68) failed [ 127.960303][ T4677] FAT-fs (loop4): Directory bread(block 69) failed [ 128.105394][ T4677] FAT-fs (loop4): Directory bread(block 70) failed [ 128.118799][ T4677] FAT-fs (loop4): Directory bread(block 71) failed [ 128.813951][ T4683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.815583][ T4677] FAT-fs (loop4): Directory bread(block 72) failed [ 129.834923][ T28] audit: type=1400 audit(1772762493.037:662): avc: denied { ioctl } for pid=4679 comm="syz.1.225" path="socket:[8294]" dev="sockfs" ino=8294 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.868739][ T4677] FAT-fs (loop4): Directory bread(block 73) failed [ 129.907734][ T4686] loop0: detected capacity change from 0 to 1024 [ 130.899420][ T4686] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.913201][ T4686] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.973062][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.088801][ T4686] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 131.164510][ T4694] netlink: 27 bytes leftover after parsing attributes in process `syz.1.230'. [ 131.189115][ T4695] netlink: 'syz.4.229': attribute type 10 has an invalid length. [ 131.206926][ T4686] System zones: 0-1, 3-36 [ 131.248113][ T4694] hub 8-0:1.0: USB hub found [ 131.252916][ T4694] hub 8-0:1.0: 8 ports detected [ 131.300124][ T4686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.362419][ T4699] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.411070][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.526894][ T4697] lo speed is unknown, defaulting to 1000 [ 131.753709][ T4706] lo speed is unknown, defaulting to 1000 [ 132.262292][ T28] audit: type=1400 audit(1772762496.067:663): avc: denied { connect } for pid=4717 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.331553][ T4708] netlink: 'syz.0.232': attribute type 13 has an invalid length. [ 132.453332][ T4722] loop4: detected capacity change from 0 to 1024 [ 132.460739][ T4722] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 132.494819][ T4722] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 132.550983][ T28] audit: type=1400 audit(1772762496.357:664): avc: denied { connect } for pid=4705 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.582347][ T28] audit: type=1400 audit(1772762496.387:665): avc: denied { write } for pid=4705 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.599118][ T4722] EXT4-fs (loop4): invalid journal inode [ 132.617479][ T4722] EXT4-fs (loop4): can't get journal size [ 132.634681][ T4713] loop0: detected capacity change from 0 to 512 [ 132.655062][ T4722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.729605][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.764906][ T4713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.779048][ T4711] cgroup: subsys name conflicts with all [ 132.779290][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.795223][ T4708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.807563][ T4711] netlink: 'syz.3.233': attribute type 10 has an invalid length. [ 132.829038][ T4723] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 133.132092][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.873518][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.867731][ T28] audit: type=1400 audit(1772762498.667:666): avc: denied { ioctl } for pid=4732 comm="syz.1.237" path="socket:[8112]" dev="sockfs" ino=8112 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.878280][ T4747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.844946][ T4758] loop4: detected capacity change from 0 to 164 [ 136.863637][ T4758] serio: Serial port ptm0 [ 136.902487][ T4761] loop2: detected capacity change from 0 to 1024 [ 136.920811][ T28] audit: type=1400 audit(1772762500.727:667): avc: denied { nlmsg_write } for pid=4757 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 136.965086][ T4738] ipvlan2: entered allmulticast mode [ 137.069003][ T4745] lo speed is unknown, defaulting to 1000 [ 137.131321][ T4761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.145018][ T4751] batadv_slave_1: entered promiscuous mode [ 137.295423][ T4736] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.302952][ T4774] loop0: detected capacity change from 0 to 1024 [ 137.327439][ T4774] EXT4-fs: inline encryption not supported [ 137.328229][ T4736] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.333536][ T4774] EXT4-fs: Ignoring removed nobh option [ 137.385451][ T28] audit: type=1400 audit(1772762501.187:668): avc: denied { create } for pid=4757 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 137.406935][ T4777] siw: device registration error -23 [ 137.414641][ T4777] netlink: 20 bytes leftover after parsing attributes in process `syz.2.243'. [ 137.471607][ T4774] EXT4-fs: Ignoring removed bh option [ 137.568670][ T4774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.311378][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.325198][ T4736] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.019269][ T4789] loop2: detected capacity change from 0 to 1024 [ 139.026090][ T4789] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.032520][ T4789] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.378305][ T4736] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.561291][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.608148][ T4789] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 139.616343][ T4789] System zones: 0-1, 3-36 [ 139.635995][ T4789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.915837][ T28] audit: type=1400 audit(1772762503.447:669): avc: denied { read } for pid=4790 comm="syz.4.247" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.972466][ T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.023210][ T4798] loop4: detected capacity change from 0 to 764 [ 140.092645][ T4798] iso9660: Unknown parameter '' [ 140.178226][ T4798] netlink: 36 bytes leftover after parsing attributes in process `syz.4.247'. [ 140.366627][ T2365] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.422146][ T28] audit: type=1400 audit(1772762504.227:670): avc: denied { append } for pid=4800 comm="syz.0.248" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 140.475108][ T2365] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.649515][ T2365] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.674518][ T28] audit: type=1400 audit(1772762504.227:671): avc: denied { ioctl } for pid=4800 comm="syz.0.248" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 141.110819][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.184240][ T4736] batadv_slave_1: left promiscuous mode [ 141.273186][ T4812] lo speed is unknown, defaulting to 1000 [ 141.471344][ T4813] loop2: detected capacity change from 0 to 2048 [ 141.592447][ T4822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.466102][ T4813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.494126][ T4812] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 143.688385][ T4810] netlink: 64 bytes leftover after parsing attributes in process `syz.1.252'. [ 143.752120][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.230883][ T4835] loop0: detected capacity change from 0 to 512 [ 144.260146][ T4835] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.535138][ T28] audit: type=1400 audit(1772762510.277:672): avc: denied { getopt } for pid=4828 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.772421][ T4841] loop2: detected capacity change from 0 to 512 [ 147.821038][ T4841] EXT4-fs warning (device loop2): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop2. [ 147.954644][ T4837] lo speed is unknown, defaulting to 1000 [ 148.105799][ T4848] loop0: detected capacity change from 0 to 128 [ 148.504624][ T28] audit: type=1400 audit(1772762511.907:673): avc: denied { sqpoll } for pid=4843 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 148.873575][ T28] audit: type=1400 audit(1772762512.677:674): avc: denied { getattr } for pid=4852 comm="syz.3.260" name="[io_uring]" dev="anon_inodefs" ino=9411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 149.365721][ T4864] loop4: detected capacity change from 0 to 1024 [ 149.373025][ T4864] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.379587][ T4864] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.483291][ T4864] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 149.491543][ T4864] System zones: 0-1, 3-36 [ 149.498425][ T4864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.834480][ T4868] netlink: 20 bytes leftover after parsing attributes in process `syz.3.262'. [ 149.845590][ T4868] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 149.858375][ T4868] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 149.875150][ T28] audit: type=1400 audit(1772762513.617:675): avc: denied { bind } for pid=4862 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 150.184489][ T4872] loop0: detected capacity change from 0 to 4096 [ 150.340794][ T4872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.380570][ T4872] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.264: corrupted inode contents [ 150.502790][ T4878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.286316][ T4872] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.264: mark_inode_dirty error [ 151.304869][ T28] audit: type=1400 audit(1772762515.097:676): avc: denied { rename } for pid=4871 comm="syz.0.264" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.745178][ T28] audit: type=1400 audit(1772762515.097:677): avc: denied { unlink } for pid=4871 comm="syz.0.264" name="file3" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.790251][ T4881] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.264'. [ 151.901408][ T28] audit: type=1400 audit(1772762515.707:678): avc: denied { bind } for pid=4871 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.956430][ T28] audit: type=1400 audit(1772762515.737:679): avc: denied { name_bind } for pid=4871 comm="syz.0.264" src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 151.978307][ T28] audit: type=1400 audit(1772762515.737:680): avc: denied { node_bind } for pid=4871 comm="syz.0.264" src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 151.999580][ T28] audit: type=1400 audit(1772762515.757:681): avc: denied { setopt } for pid=4871 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.019885][ T28] audit: type=1400 audit(1772762515.757:682): avc: denied { accept } for pid=4871 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.286943][ T4872] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.264: corrupted inode contents [ 152.300060][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.312812][ T4863] lo speed is unknown, defaulting to 1000 [ 152.338123][ T4872] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.264: mark_inode_dirty error [ 152.473366][ T28] audit: type=1400 audit(1772762516.277:683): avc: denied { write } for pid=4891 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.474078][ T4872] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.264: corrupted inode contents [ 152.505731][ T4872] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.264: mark_inode_dirty error [ 152.517412][ T4872] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.264: corrupted inode contents [ 152.607716][ T28] audit: type=1326 audit(1772762516.417:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fa9c799 code=0x7ffc0000 [ 152.646473][ T4872] EXT4-fs error (device loop0): ext4_truncate:4587: inode #15: comm syz.0.264: mark_inode_dirty error [ 152.854316][ T4872] EXT4-fs error (device loop0) in ext4_setattr:5983: Corrupt filesystem [ 152.870632][ T4893] loop1: detected capacity change from 0 to 512 [ 152.896165][ T28] audit: type=1326 audit(1772762516.447:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fa9c799 code=0x7ffc0000 [ 152.955654][ T4879] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.264: corrupted inode contents [ 152.991540][ T4893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.251603][ T28] audit: type=1326 audit(1772762517.057:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f140fa9c799 code=0x7ffc0000 [ 153.301136][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.135280][ T4907] serio: Serial port ptm0 [ 154.221571][ T4910] lo speed is unknown, defaulting to 1000 [ 154.469938][ T4916] loop0: detected capacity change from 0 to 1024 [ 154.488997][ T4916] EXT4-fs: inline encryption not supported [ 154.569915][ T4916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.725671][ T4910] netlink: 'syz.4.272': attribute type 13 has an invalid length. [ 154.745496][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.758147][ T4910] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 155.649210][ T4913] loop4: detected capacity change from 0 to 512 [ 155.680594][ T4928] loop1: detected capacity change from 0 to 1024 [ 155.814659][ T4924] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 155.945065][ T4928] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.274: bad orphan inode 134217728 [ 155.965265][ T4926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.270'. [ 156.130610][ T4923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'. [ 156.177852][ T4913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.200766][ T4928] loop1: lost filesystem error report for type 5 error -117 [ 156.201343][ T4928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.342952][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.411458][ T4928] lo speed is unknown, defaulting to 1000 [ 156.696877][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.706086][ T4937] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 156.758203][ T4937] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 156.824764][ T4937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.107536][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 157.107553][ T28] audit: type=1400 audit(1772762520.917:719): avc: denied { connect } for pid=4933 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 157.717843][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.033834][ T4961] loop4: detected capacity change from 0 to 256 [ 158.722915][ T4961] FAT-fs (loop4): Directory bread(block 64) failed [ 158.729838][ T4961] FAT-fs (loop4): Directory bread(block 65) failed [ 158.736622][ T4961] FAT-fs (loop4): Directory bread(block 66) failed [ 158.743154][ T4961] FAT-fs (loop4): Directory bread(block 67) failed [ 158.749927][ T4961] FAT-fs (loop4): Directory bread(block 68) failed [ 158.756728][ T4961] FAT-fs (loop4): Directory bread(block 69) failed [ 158.763505][ T4961] FAT-fs (loop4): Directory bread(block 70) failed [ 158.770168][ T4961] FAT-fs (loop4): Directory bread(block 71) failed [ 158.776867][ T4961] FAT-fs (loop4): Directory bread(block 72) failed [ 158.783520][ T4961] FAT-fs (loop4): Directory bread(block 73) failed [ 159.725334][ T4961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 159.736950][ T4961] team0: Port device team_slave_0 removed [ 161.615914][ T4973] Invalid ELF header magic: != ELF [ 161.710641][ T4973] loop1: detected capacity change from 0 to 256 [ 161.769217][ T28] audit: type=1400 audit(1772762525.377:720): avc: denied { module_load } for pid=4963 comm="syz.1.280" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=9711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 161.805450][ T23] IPVS: starting estimator thread 0... [ 161.894488][ T4977] IPVS: using max 2784 ests per chain, 139200 per kthread [ 161.981906][ T4973] FAT-fs (loop1): Directory bread(block 64) failed [ 161.989974][ T4973] FAT-fs (loop1): Directory bread(block 65) failed [ 161.998727][ T4973] FAT-fs (loop1): Directory bread(block 66) failed [ 162.006773][ T4973] FAT-fs (loop1): Directory bread(block 67) failed [ 162.018318][ T4973] FAT-fs (loop1): Directory bread(block 68) failed [ 162.025872][ T4973] FAT-fs (loop1): Directory bread(block 69) failed [ 162.033520][ T4973] FAT-fs (loop1): Directory bread(block 70) failed [ 162.041849][ T4973] FAT-fs (loop1): Directory bread(block 71) failed [ 162.050534][ T4973] FAT-fs (loop1): Directory bread(block 72) failed [ 162.058077][ T4973] FAT-fs (loop1): Directory bread(block 73) failed [ 162.909779][ T28] audit: type=1400 audit(1772762526.717:721): avc: denied { read } for pid=4980 comm="syz.0.283" path="socket:[8674]" dev="sockfs" ino=8674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.966202][ T4984] loop4: detected capacity change from 0 to 512 [ 162.982913][ T4984] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.115348][ T4987] loop1: detected capacity change from 0 to 1024 [ 163.133408][ T4984] EXT4-fs (loop4): 1 truncate cleaned up [ 163.160447][ T4984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.246777][ T28] audit: type=1400 audit(1772762527.027:722): avc: denied { mount } for pid=4980 comm="syz.0.283" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 163.492282][ T4987] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.284: bad orphan inode 134217728 [ 163.578011][ T28] audit: type=1400 audit(1772762527.137:723): avc: denied { ioctl } for pid=4980 comm="syz.0.283" path="socket:[8674]" dev="sockfs" ino=8674 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.624188][ T4987] loop1: lost filesystem error report for type 5 error -117 [ 163.647633][ T4987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.672825][ T5005] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5005 comm=syz.3.288 [ 163.721856][ T28] audit: type=1400 audit(1772762527.137:724): avc: denied { write } for pid=4980 comm="syz.0.283" path="socket:[8674]" dev="sockfs" ino=8674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.881385][ T28] audit: type=1400 audit(1772762527.687:725): avc: denied { ioctl } for pid=4983 comm="syz.1.284" path="/53/bus/bus" dev="loop1" ino=18 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 164.011530][ T5008] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 164.108705][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.171388][ T5005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.288'. [ 164.643187][ T5013] loop0: detected capacity change from 0 to 256 [ 164.666859][ T5005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.952916][ T5032] xt_policy: output policy not valid in PREROUTING and INPUT [ 164.982492][ T5031] lo speed is unknown, defaulting to 1000 [ 165.359182][ T5044] netlink: 'syz.2.295': attribute type 13 has an invalid length. [ 165.381268][ T5039] lo speed is unknown, defaulting to 1000 [ 165.520123][ T5033] loop2: detected capacity change from 0 to 512 [ 165.574986][ T60] ================================================================== [ 165.583213][ T60] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 165.590535][ T60] [ 165.592881][ T60] write to 0xffff888109806c88 of 4 bytes by task 50 on cpu 0: [ 165.600351][ T60] touch_atime+0x1d7/0x330 [ 165.604817][ T60] shmem_file_read_iter+0x477/0x540 [ 165.610058][ T60] lo_rw_aio+0x67d/0x730 [ 165.614341][ T60] loop_process_work+0x56c/0xac0 [ 165.619411][ T60] loop_rootcg_workfn+0x22/0x30 [ 165.624291][ T60] process_scheduled_works+0x4de/0x9e0 [ 165.629777][ T60] worker_thread+0x581/0x770 [ 165.634392][ T60] kthread+0x22a/0x280 [ 165.638485][ T60] ret_from_fork+0x150/0x360 [ 165.643121][ T60] ret_from_fork_asm+0x1a/0x30 [ 165.647913][ T60] [ 165.650422][ T60] read to 0xffff888109806c88 of 4 bytes by task 60 on cpu 1: [ 165.657799][ T60] atime_needs_update+0x25f/0x3e0 [ 165.662860][ T60] touch_atime+0x4a/0x330 [ 165.667231][ T60] shmem_file_read_iter+0x477/0x540 [ 165.672475][ T60] lo_rw_aio+0x67d/0x730 [ 165.676760][ T60] loop_process_work+0x56c/0xac0 [ 165.681737][ T60] loop_workfn+0x31/0x40 [ 165.686017][ T60] process_scheduled_works+0x4de/0x9e0 [ 165.691598][ T60] worker_thread+0x581/0x770 [ 165.696230][ T60] kthread+0x22a/0x280 [ 165.700326][ T60] ret_from_fork+0x150/0x360 [ 165.704947][ T60] ret_from_fork_asm+0x1a/0x30 [ 165.709743][ T60] [ 165.712076][ T60] value changed: 0x1685ec90 -> 0x171e8310 [ 165.717805][ T60] [ 165.720132][ T60] Reported by Kernel Concurrency Sanitizer on: [ 165.726294][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 165.735592][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.745654][ T60] Workqueue: loop2 loop_workfn [ 165.750430][ T60] ================================================================== [ 165.816909][ T5033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.859288][ T5044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.898677][ T28] audit: type=1400 audit(1772762529.707:726): avc: denied { append } for pid=4982 comm="syz.4.286" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.102854][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.154276][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.341825][ T28] audit: type=1400 audit(1772762530.147:727): avc: denied { kexec_image_load } for pid=5051 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 166.362121][ T28] audit: type=1400 audit(1772762530.147:728): avc: denied { create } for pid=5051 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 166.676563][ T5051] delete_channel: no stack